Severe Risk
IP 152.32.185.214 is a high-risk address originating from Hong Kong that has been repeatedly linked to SSH brute-force attacks, warranting immediate defensive action by any organization running exposed SSH services.
Automated honeypot sensors and community reports have documented 320 abuse reports tied to this address over approximately six months, with activity spanning October 2025 through April 2026. The dominant threat profile consists of SSH brute-force attempts (18 of the categorized reports), supplemented by general hacking activity and evidence suggesting the IP may itself be an exploited host being used as an attack platform. The network is registered to ZEN-DPS under ASN AS62610 in the Hong Kong region. Detection mechanisms including fail2ban and network intrusion detection systems have logged multiple SSH brute-force violation events, with Suricata sensors confirming active SSH sessions on expected ports consistent with credential-guessing campaigns.
SSH brute-force attacks represent a persistent and automated threat that exploits weak or default credentials to gain unauthorized server access. Attackers systematically attempt username and password combinations across targeted systems, often leveraging compromised hosts to obscure their origin and increase attack volume. The volume and consistency of reports against this address suggest an organized, sustained campaign rather than opportunistic scanning. Organizations with exposed SSH services face the risk of unauthorized access, data exfiltration, malware deployment, or further exploitation of internal network resources if credentials are successfully compromised.
Administrators should immediately block this IP at the firewall or network edge, implement fail2ban or equivalent tools to dynamically ban repeat offenders, and enforce key-based authentication for all SSH access while disabling root login and changing default ports. Regular monitoring of authentication logs and patching SSH services to the latest version will further reduce exposure to these attack vectors.
SG 
CA 
PL 
TW