Name: Threat Intelligence: 179.61.192.160
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelCRITICAL72/1001 rule type

15 incidents · active attack detected · persistent 16-day campaign · last seen 16d ago

PTR	server.internationalbeethovenproject.com
Org / ASN	Private Customer
Country	🇺🇸 United States
City	Buffalo, New York
Timezone	America/New_York

Attack Analysis

🇺🇸 United States · West Seneca · 14670 · Private Customer

Suricata IDS Alert

Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (15)

Date	Severity	Description
16 Jul 2026 - 07:38	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 05:29	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 03:22	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 01:18	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
15 Jul 2026 - 23:12	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
15 Jul 2026 - 21:05	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 09:24	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 08:11	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 05:50	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 03:32	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 01:11	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
13 Jul 2026 - 22:53	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
9 Jul 2026 - 11:50	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
4 Jul 2026 - 03:19	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
30 Jun 2026 - 10:14	high	IDS: Suricata alert — Honeypot: probe to closed SSH port 22

Report for IP: 179.61.192.160

Attack Analysis

Reports (15)

Related IPs — Same /24 Block (179.61.192.0/24)