Report for IP: 186.39.13.83

Threat LevelCRITICAL72/1002 rule types across 2 attack categories
52 incidents · 2 rule types · active attack detected · 52 attacks/day · last seen 29d ago
PTR 186-39-13-83.mrse.com.ar
Org / ASN Telefonica de Argentina
Country 🇦🇷 Argentina
City San Juan Bautista, Buenos Aires
Timezone America/Argentina/Buenos_Aires

Attack Analysis

Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
Port 22 Honeypot Probe
This IP connected to a fake SSH honeypot — a port 22 listener that is not a real SSH server. This is an automated scanner fingerprinting targets before launching a brute-force campaign. Legitimate systems never probe port 22 without a specific reason; this activity is virtually 100% malicious.

Reports (52)

Date Severity Description
1 Sep 2026 - 04:30 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:30 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:30 high IDS: Suricata alert
1 Sep 2026 - 04:30 high IDS: Suricata alert
1 Sep 2026 - 04:30 high IDS: Suricata alert
1 Sep 2026 - 04:26 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:26 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:26 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:26 high IDS: Suricata alert
1 Sep 2026 - 04:26 high IDS: Suricata alert
1 Sep 2026 - 04:26 high IDS: Suricata alert
1 Sep 2026 - 04:26 high IDS: Suricata alert
1 Sep 2026 - 04:21 high IDS: Suricata alert
1 Sep 2026 - 04:21 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:21 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:21 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:19 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:19 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
1 Sep 2026 - 04:19 high IDS: Suricata alert
1 Sep 2026 - 04:19 high IDS: Suricata alert