Report for IP: 72.167.38.16

Threat LevelCRITICAL72/1001 rule type
4 incidents on record · active attack detected · active over 2 days · seen 9h ago
PTR 16.38.167.72.host.secureserver.net
Org / ASN GoDaddy.com, LLC
Country 🇺🇸 United States
City Tempe, Arizona
Timezone America/Phoenix

Attack Analysis

🇺🇸 United States · Phoenix · 398101 · Godaddy.com, LLC
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (4)

Date Severity Description
31 Jul 2026 - 18:12 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
31 Jul 2026 - 12:59 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
31 Jul 2026 - 10:59 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
29 Jul 2026 - 09:50 high IDS: Suricata alert — Honeypot: probe to closed SSH port 22