Maximum Danger
IP 80.94.92.187, registered to Unmanaged Ltd in Romania (AS47890), is a critical-risk address definitively linked to SSH brute-force intrusion activity, achieving a maximum threat level of 10/10 with a 94% confidence score across 811 independent abuse reports.
honeypot sensors detected this IP repeatedly attempting unauthorized SSH access between November 2025 and January 2026, with 20 distinct automated sensors recording hundreds of automated connection attempts. The sustained report volume over this three-month period reflects persistent, automated scanning rather than opportunistic probing, indicating a deliberate campaign to compromise exposed SSH services. Romania's network infrastructure through AS47890 has facilitated this malicious traffic, though the IP may itself be part of a broader compromised infrastructure rather than originating directly from the operator.
SSH brute-force attacks represent a straightforward but effective method for gaining unauthorized server access by systematically attempting credential combinations. This particular IP has conducted hundreds of such attempts, demonstrating significant risk to any publicly accessible SSH service, particularly servers with weak or default credentials. The automated nature of these attacks means exposed systems face continuous pressure without manual intervention from threat actors, and successful authentication would grant adversaries shell access to internal systems.
Site operators should immediately block IP 80.94.92.187 at the firewall or network perimeter to prevent further contact with exposed services. Deploying tools such as fail2ban to automatically detect and ban repeated SSH authentication failures from this source provides an effective automated defence layer. Hardening SSH configurations by disabling root login, enforcing public key authentication and changing the default port significantly reduces vulnerability. Continuous monitoring of authentication logs for patterns associated with this IP ensures early detection of any evasion attempts.
MX