Report for IP: 143.95.213.196

Threat LevelCRITICAL76/1002 rule types across 2 attack categories
29 incidents · 2 rule types · active attack detected · persistent 12-day campaign · seen 14h ago
PTR ip-143-95-213-196.iplocal
Org / ASN Newfold Digital, Inc.
Country 🇺🇸 United States
City Jacksonville, Florida
Timezone America/New_York

Attack Analysis

🇧🇷 Brazil · Vinhedo · 31898 · Newfold Digital, Inc.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
IDS: SSH Port Scan
Suricata detected automated SSH port scanning from this IP. SSH scanners map targets before launching credential brute-force attacks. This is the reconnaissance phase of a larger attack campaign.

Reports (29)

Date Severity Description
18 Jun 2026 - 23:05 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
18 Jun 2026 - 23:05 high IDS: SSH port scan — ET SCAN Potential SSH Scan
18 Jun 2026 - 02:50 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
18 Jun 2026 - 02:50 high IDS: SSH port scan — ET SCAN Potential SSH Scan
16 Jun 2026 - 21:58 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jun 2026 - 21:58 high IDS: SSH port scan — ET SCAN Potential SSH Scan
15 Jun 2026 - 19:22 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
15 Jun 2026 - 19:22 high IDS: SSH port scan — ET SCAN Potential SSH Scan
14 Jun 2026 - 18:38 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jun 2026 - 18:38 high IDS: SSH port scan — ET SCAN Potential SSH Scan
13 Jun 2026 - 20:05 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
13 Jun 2026 - 20:05 high IDS: SSH port scan — ET SCAN Potential SSH Scan
13 Jun 2026 - 01:02 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
13 Jun 2026 - 01:02 high IDS: SSH port scan — ET SCAN Potential SSH Scan
12 Jun 2026 - 08:12 high IDS: SSH port scan — ET SCAN Potential SSH Scan
12 Jun 2026 - 08:12 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
11 Jun 2026 - 17:17 high IDS: SSH port scan — ET SCAN Potential SSH Scan
11 Jun 2026 - 17:17 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
10 Jun 2026 - 23:43 high IDS: SSH port scan — ET SCAN Potential SSH Scan
10 Jun 2026 - 23:42 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
Part of EagleEye Intelligence