Report for IP: 45.7.67.65

Threat LevelCRITICAL72/1002 rule types across 2 attack categories
63 incidents · 2 rule types · active attack detected · 63 attacks/day · last seen 29d ago
PTR dinamyc-45-7-67-65.maysnet.mx
Org / ASN AS270143 MAYSNET SA DE CV
Country 🇲🇽 Mexico
City Metepec, Hidalgo
Timezone America/Mexico_City

Attack Analysis

Port 22 Honeypot Probe
This IP connected to a fake SSH honeypot — a port 22 listener that is not a real SSH server. This is an automated scanner fingerprinting targets before launching a brute-force campaign. Legitimate systems never probe port 22 without a specific reason; this activity is virtually 100% malicious.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (63)

Date Severity Description
1 Sep 2026 - 03:27 high IDS: Suricata alert
1 Sep 2026 - 03:27 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:25 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:25 high IDS: Suricata alert
1 Sep 2026 - 03:22 high IDS: Suricata alert
1 Sep 2026 - 03:22 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:20 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:20 high IDS: Suricata alert
1 Sep 2026 - 03:18 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:18 high IDS: Suricata alert
1 Sep 2026 - 03:17 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:17 high IDS: Suricata alert
1 Sep 2026 - 03:16 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:16 high IDS: Suricata alert
1 Sep 2026 - 03:15 high IDS: Suricata alert
1 Sep 2026 - 03:15 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:14 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:14 high IDS: Suricata alert
1 Sep 2026 - 03:13 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 03:13 high IDS: Suricata alert