Report for IP: 220.76.68.23

Threat LevelCRITICAL72/1001 rule type
2 incidents on record · active attack detected · persistent 9-day campaign · seen 11h ago
PTR N/A
Org / ASN jusighwyeusa keiti
Country 🇰🇷 South Korea
City Songpa-gu, Seoul
Timezone Asia/Seoul

Attack Analysis

🇰🇷 South Korea · Guri-si · 4766 · Korea Telecom
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (2)

Date Severity Description
31 Jul 2026 - 15:03 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
22 Jul 2026 - 15:48 high IDS: Suricata alert — Honeypot: probe to closed SSH port 22