Report for IP: 166.62.89.133

Threat LevelCRITICAL76/1001 rule type
27 incidents · active attack detected · persistent 22-day campaign · seen 8h ago
PTR 133.89.62.166.host.secureserver.net
Org / ASN GoDaddy.com, LLC
Country 🇺🇸 United States
City Tempe, Arizona
Timezone America/Phoenix

Attack Analysis

🇺🇸 United States · Tempe · 398101 · Godaddy.com, LLC
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (27)

Date Severity Description
13 Jul 2026 - 23:07 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
13 Jul 2026 - 21:43 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
12 Jul 2026 - 13:56 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
12 Jul 2026 - 13:11 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
12 Jul 2026 - 13:10 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
9 Jul 2026 - 16:41 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
9 Jul 2026 - 11:14 high IDS: Suricata alert — Honeypot: probe to closed SSH port 22