Report for IP: 45.7.67.65

Threat LevelCRITICAL72/1002 rule types across 2 attack categories
63 incidents · 2 rule types · active attack detected · 63 attacks/day · last seen 29d ago
PTR dinamyc-45-7-67-65.maysnet.mx
Org / ASN AS270143 MAYSNET SA DE CV
Country 🇲🇽 Mexico
City Metepec, Hidalgo
Timezone America/Mexico_City

Attack Analysis

Port 22 Honeypot Probe
This IP connected to a fake SSH honeypot — a port 22 listener that is not a real SSH server. This is an automated scanner fingerprinting targets before launching a brute-force campaign. Legitimate systems never probe port 22 without a specific reason; this activity is virtually 100% malicious.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (63)

Date Severity Description
1 Sep 2026 - 03:47 high IDS: Suricata alert
1 Sep 2026 - 03:47 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:41 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:41 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:41 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:41 high IDS: Suricata alert
1 Sep 2026 - 03:38 high IDS: Suricata alert
1 Sep 2026 - 03:38 high IDS: Suricata alert
1 Sep 2026 - 03:38 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:38 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:35 high IDS: Suricata alert
1 Sep 2026 - 03:35 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:33 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:33 high IDS: Suricata alert
1 Sep 2026 - 03:31 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:31 high IDS: Suricata alert
1 Sep 2026 - 03:31 high IDS: Suricata alert
1 Sep 2026 - 03:30 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:29 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:29 high IDS: Suricata alert