Report for IP: 211.253.9.49

Threat LevelCRITICAL72/1001 rule type
1 incident on record · active attack detected · last seen 32d ago
PTR N/A
Org / ASN jeongbotongsinyounriwewonhwyeu
Country 🇰🇷 South Korea
City Wŏnju, Gangwon-do
Timezone Asia/Seoul

Attack Analysis

🇰🇷 Republic of Korea · Seongnam-si · 4766 · jeongbotongsinyounriwewonhwyeu
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (1)

Date Severity Description
30 Jun 2026 - 11:38 high IDS: Suricata alert — Honeypot: probe to closed SSH port 22