Threat LevelCRITICAL72/1001 rule type
14 incidents · active attack detected · persistent 17-day campaign · last seen 17d ago
| PTR | server.ipq.hzn.mybluehost.me |
| Org / ASN | Unified Layer |
| Country | 🇺🇸 United States |
| City | Provo, Utah |
| Timezone | America/Denver |
Attack Analysis
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
Reports (14)
| Date | Severity | Description |
|---|---|---|
| 15 Jul 2026 - 10:37 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 15 Jul 2026 - 05:15 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 23:58 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 18:42 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 13:27 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 09:55 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 09:26 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 06:24 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 04:47 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 03:11 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 01:36 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 14 Jul 2026 - 00:02 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 13 Jul 2026 - 22:27 | medium | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 28 Jun 2026 - 10:14 | high | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
EagleEye Intelligence