Report for IP: 178.128.66.109

Threat LevelHIGH60/1001 rule type
2 incidents on record · active attack detected · last seen 31d ago · known internet scanner
PTR a3a36d8ec3.research-scanner.com
Org / ASN Digitalocean
Country 🇺🇸 United States
City Santa Clara, California
Timezone America/Los_Angeles
Internet Scannera3a36d8ec3.research-scanner.com
The reverse DNS of this IP explicitly identifies it as a scanner. This host conducts systematic internet-wide probes. Unsolicited scanning is treated as hostile traffic on this network.

Attack Analysis

🇺🇸 United States · Santa Clara · 14061 · DIGITALOCEAN
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (2)

Date Severity Description
1 Jul 2026 - 08:25 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Jul 2026 - 08:25 high IDS: Suricata alert