Name: Threat Intelligence: 191.101.33.225
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelCRITICAL76/1001 rule type

27 incidents · active attack detected · persistent 22-day campaign · seen 11h ago

PTR	zppnz.host1dns.com
Org / ASN	Ipxo
Country	🇺🇸 United States
City	Buffalo, New York
Timezone	America/New_York

Attack Analysis

🇺🇸 United States · West Seneca · 14670 · Private Customer

Suricata IDS Alert

Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (27)

Date	Severity	Description
31 Jul 2026 - 12:54	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
31 Jul 2026 - 12:46	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
31 Jul 2026 - 09:48	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
30 Jul 2026 - 11:08	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
29 Jul 2026 - 09:57	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
24 Jul 2026 - 11:11	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
19 Jul 2026 - 10:51	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
19 Jul 2026 - 10:39	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 09:10	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 07:22	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 05:35	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 03:46	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 01:59	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 00:14	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
15 Jul 2026 - 22:23	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
15 Jul 2026 - 20:31	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 09:39	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 07:14	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 05:45	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 04:16	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22

Report for IP: 191.101.33.225

Attack Analysis

Reports (27)

Related IPs — Same /24 Block (191.101.33.0/24)