Report for IP: 142.44.149.52

Threat LevelCRITICAL76/1002 rule types across 2 attack categories
32 incidents · 2 rule types · active attack detected · persistent 22-day campaign · seen 15h ago
PTR aadi01.honeywick.hosting
Org / ASN OVH Hosting, Inc.
Country 🇨🇦 Canada
City Montreal, Quebec
Timezone America/Toronto

Attack Analysis

🇨🇦 Canada · Montreal · 16276 · OVH (NWK)
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
IDS: SSH Port Scan
Suricata detected automated SSH port scanning from this IP. SSH scanners map targets before launching credential brute-force attacks. This is the reconnaissance phase of a larger attack campaign.

Reports (32)

Date Severity Description
31 Jul 2026 - 13:17 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
30 Jul 2026 - 11:05 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
30 Jul 2026 - 11:05 high IDS: SSH port scan — ET SCAN Potential SSH Scan
24 Jul 2026 - 10:59 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 08:54 high IDS: SSH port scan — ET SCAN Potential SSH Scan
16 Jul 2026 - 08:54 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 07:04 high IDS: SSH port scan — ET SCAN Potential SSH Scan
16 Jul 2026 - 07:04 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 05:11 high IDS: SSH port scan — ET SCAN Potential SSH Scan
16 Jul 2026 - 05:11 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 03:20 high IDS: SSH port scan — ET SCAN Potential SSH Scan
16 Jul 2026 - 03:20 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 01:31 high IDS: SSH port scan — ET SCAN Potential SSH Scan
16 Jul 2026 - 01:30 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 01:30 high IDS: SSH port scan — ET SCAN Potential SSH Scan
15 Jul 2026 - 23:43 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
15 Jul 2026 - 23:43 high IDS: SSH port scan — ET SCAN Potential SSH Scan
15 Jul 2026 - 21:49 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
15 Jul 2026 - 21:49 high IDS: SSH port scan — ET SCAN Potential SSH Scan
15 Jul 2026 - 20:17 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
Part of EagleEye Intelligence