This IP address has been reported a total of
22
times from
20 distinct
sources.
36.73.18.53 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 9
reports;
United States of America
with 4
reports;
Finland
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
20
times;
SSH
19
times;
Web App Attack
2
times;
DDoS Attack
2
times;
Hacking
2
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 19 21:42:02 obsidian sshd[1792529]: Invalid user bwa from 36.73.18.53 port 58130
Oct 19 21:43:16 ...
show moreOct 19 21:42:02 obsidian sshd[1792529]: Invalid user bwa from 36.73.18.53 port 58130
Oct 19 21:43:16 obsidian sshd[1794678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.73.18.53 user=root
Oct 19 21:43:18 obsidian sshd[1794678]: Failed password for root from 36.73.18.53 port 40168 ssh2
...
show less
2026-10-19T20:12:00.670308+02:00 box sshd[1287764]: Failed password for invalid user postgres from 3 ...
show more2026-10-19T20:12:00.670308+02:00 box sshd[1287764]: Failed password for invalid user postgres from 36.73.18.53 port 42342 ssh2
2026-10-19T20:16:09.584569+02:00 box sshd[1289135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.73.18.53 user=root
2026-10-19T20:16:11.170326+02:00 box sshd[1289135]: Failed password for root from 36.73.18.53 port 57034 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH honeypot on port 22: 1 failed password attempt. Automated report from an SSH deception service.
2026-10-19T22:27:39.498936+08:00 *hostname* sshd-session[1661884]: Invalid user amalia from 36.73.18 ...
show more2026-10-19T22:27:39.498936+08:00 *hostname* sshd-session[1661884]: Invalid user amalia from 36.73.18.53 port 51582
2026-10-19T22:28:48.009206+08:00 *hostname* sshd-session[1661896]: Connection from 36.73.18.53 port 54378 on 10.100.131.227 port 22 rdomain ""
2026-10-19T22:28:50.856898+08:00 *hostname* sshd-session[1661896]: Invalid user umer from 36.73.18.53 port 54378
2026-10-19T22:29:59.073798+08:00 *hostname* sshd-session[1661908]: Connection from 36.73.18.53 port 49978 on 10.100.131.227 port 22 rdomain ""
2026-10-19T22:30:00.820671+08:00 *hostname* sshd-session[1661908]: Invalid user carmine from 36.73.18.53 port 49978
show less
Oct 19 14:27:14 Hazelaticketscat sshd[3335625]: Invalid user amalia from 36.73.18.53 port 54052
Oct ...
show moreOct 19 14:27:14 Hazelaticketscat sshd[3335625]: Invalid user amalia from 36.73.18.53 port 54052
Oct 19 14:28:25 Hazelaticketscat sshd[3337906]: Connection from 36.73.18.53 port 60436 on 188.245.156.236 port 22 rdomain ""
Oct 19 14:28:26 Hazelaticketscat sshd[3337906]: Invalid user umer from 36.73.18.53 port 60436
Oct 19 14:29:37 Hazelaticketscat sshd[3340165]: Connection from 36.73.18.53 port 58048 on 188.245.156.236 port 22 rdomain ""
Oct 19 14:29:38 Hazelaticketscat sshd[3340165]: Invalid user carmine from 36.73.18.53 port 58048
...
show less
Brute-Force
SSH
Anonymous
Oct 19 14:19:53 f2b auth.info sshd[23517]: Invalid user damilare from 36.73.18.53 port 35894
Oct 19 ...
show moreOct 19 14:19:53 f2b auth.info sshd[23517]: Invalid user damilare from 36.73.18.53 port 35894
Oct 19 14:19:53 f2b auth.info sshd[23517]: Failed password for invalid user damilare from 36.73.18.53 port 35894 ssh2
Oct 19 14:19:53 f2b auth.info sshd[23517]: Disconnected from invalid user damilare 36.73.18.53 port 35894 [preauth]
...
show less
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Indonesia 17x -> Target Country: Germany SS ...
show moreLevel: (LOW): Reputation Unknown via Cowrie IOC Country: Indonesia 17x -> Target Country: Germany SSH
show less
Level: (MEDIUM): Reputation Unknown via Cowrie IOC Country: Indonesia 23x -> Target Country: Germany ...
show moreLevel: (MEDIUM): Reputation Unknown via Cowrie IOC Country: Indonesia 23x -> Target Country: Germany SSH
show less
TSEC Honeypot Network report. Threat score: 97/100. Categories: DDoS Attack, Hacking, Brute-Force, E ...
show moreTSEC Honeypot Network report. Threat score: 97/100. Categories: DDoS Attack, Hacking, Brute-Force, Exploited Host, Web App Attack, SSH. Honeypot: cowrie. Context: Attacker IP 36.73.18.53 observed using SSH client fingerprint 'Unknown SSH Client (f555226df196)' 23 times when connecting to a government sector honeypot between 2026-10-19 11:25 and 2026-10-19 11....
show less
DDoS Attack
Hacking
Brute-Force
Exploited Host
Web App Attack
SSH
