Report for IP: 45.7.67.65

Threat LevelCRITICAL72/1002 rule types across 2 attack categories
63 incidents · 2 rule types · active attack detected · 63 attacks/day · last seen 29d ago
PTR dinamyc-45-7-67-65.maysnet.mx
Org / ASN AS270143 MAYSNET SA DE CV
Country 🇲🇽 Mexico
City Metepec, Hidalgo
Timezone America/Mexico_City

Attack Analysis

Port 22 Honeypot Probe
This IP connected to a fake SSH honeypot — a port 22 listener that is not a real SSH server. This is an automated scanner fingerprinting targets before launching a brute-force campaign. Legitimate systems never probe port 22 without a specific reason; this activity is virtually 100% malicious.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (63)

Date Severity Description
1 Sep 2026 - 03:59 high IDS: Suricata alert
1 Sep 2026 - 03:59 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:59 high IDS: Suricata alert
1 Sep 2026 - 03:59 high IDS: Suricata alert
1 Sep 2026 - 03:56 high IDS: Suricata alert
1 Sep 2026 - 03:56 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:56 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:56 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:55 high IDS: Suricata alert
1 Sep 2026 - 03:55 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:52 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:52 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:52 high IDS: Suricata alert
1 Sep 2026 - 03:52 high IDS: Suricata alert
1 Sep 2026 - 03:52 high IDS: Suricata alert
1 Sep 2026 - 03:48 high IDS: Suricata alert
1 Sep 2026 - 03:48 high IDS: Suricata alert
1 Sep 2026 - 03:48 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:48 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:48 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22