Report for IP: 167.86.66.42

Threat LevelCRITICAL72/1001 rule type
7 incidents on record · active attack detected · persistent 16-day campaign · last seen 2d ago
PTR sunucu.onebilisim.com
Org / ASN Contabo GmbH
Country 🇩🇪 Germany
City Nuremberg, Bavaria
Timezone Europe/Berlin

Attack Analysis

🇩🇪 Germany · Mainz · 51167 · Contabo GmbH
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (7)

Date Severity Description
30 Jul 2026 - 10:59 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 15:14 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 12:35 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 09:50 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 07:10 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 01:51 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 09:34 high IDS: Suricata alert — Honeypot: probe to closed SSH port 22