Name: Threat Intelligence: 154.16.115.34
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelCRITICAL76/1001 rule type

23 incidents · active attack detected · persistent 22-day campaign · seen 8h ago

PTR	server2.atarim.com
Org / ASN	OC1-HostForWeb, LLC
Country	🇺🇸 United States
City	Buffalo, New York
Timezone	America/New_York

Attack Analysis

🇺🇸 United States · West Seneca · 14670 · Oc1-hostforweb, LLC

Suricata IDS Alert

Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (23)

Date	Severity	Description
31 Jul 2026 - 18:11	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
31 Jul 2026 - 13:05	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
29 Jul 2026 - 10:03	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 07:47	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 06:00	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 04:13	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 02:27	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 00:42	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
15 Jul 2026 - 23:02	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
15 Jul 2026 - 21:12	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 09:43	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 07:48	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 06:23	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 04:59	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 03:37	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 02:14	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 00:54	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
13 Jul 2026 - 23:34	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
13 Jul 2026 - 22:16	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
12 Jul 2026 - 13:37	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22

Report for IP: 154.16.115.34

Attack Analysis

Reports (23)

Related IPs — Same /24 Block (154.16.115.0/24)