45.148.10.67

Threat LevelCRITICAL55/1001 rule type
218 confirmed attacks · active over 10 days · seen 43m ago
PTR N/A
Org / ASN Techoff SRV Limited
Country 🇳🇱 Netherlands
City Amsterdam, North Holland
Timezone Europe/Amsterdam

Attack Analysis

Port 22 Honeypot Probe
This IP connected to a fake SSH honeypot — a port 22 listener that is not a real SSH server. This is an automated scanner fingerprinting targets before launching a brute-force campaign. Legitimate systems never probe port 22 without a specific reason; this activity is virtually 100% malicious.

Reports (218)

Date Severity Description
24 May 2026 - 21:12 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 21:12 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 20:58 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 19:48 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 19:40 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 18:14 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 18:06 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 16:40 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 16:32 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 15:14 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 14:04 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 13:50 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 12:11 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 12:03 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 10:37 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 10:28 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 09:03 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 08:54 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 07:28 medium Rule 100570: Network: Port 22 honeypot probe
24 May 2026 - 07:19 medium Rule 100570: Network: Port 22 honeypot probe