Report for IP: 160.251.139.91

Threat LevelCRITICAL74/1002 rule types across 2 attack categories
21 incidents · 2 rule types · active attack detected · persistent 23-day campaign · seen 13h ago
PTR v160-251-139-91.rmt4.static.cnode.jp
Org / ASN GMO Internet Group, Inc.
Country 🇯🇵 Japan
City Chiyoda City, Tokyo
Timezone Asia/Tokyo

Attack Analysis

🇯🇵 Japan · Tokyo · 58791 · Gmo Internet, Inc.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
IDS: SSH Port Scan
Suricata detected automated SSH port scanning from this IP. SSH scanners map targets before launching credential brute-force attacks. This is the reconnaissance phase of a larger attack campaign.

Reports (21)

Date Severity Description
31 Jul 2026 - 12:46 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
31 Jul 2026 - 10:58 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
18 Jul 2026 - 19:37 high IDS: SSH port scan — ET SCAN Potential SSH Scan
18 Jul 2026 - 19:37 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 09:11 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 09:11 high IDS: SSH port scan — ET SCAN Potential SSH Scan
16 Jul 2026 - 06:51 high IDS: SSH port scan — ET SCAN Potential SSH Scan
16 Jul 2026 - 06:51 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 04:29 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 04:29 high IDS: SSH port scan — ET SCAN Potential SSH Scan
16 Jul 2026 - 02:11 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
16 Jul 2026 - 02:11 high IDS: SSH port scan — ET SCAN Potential SSH Scan
15 Jul 2026 - 21:31 high IDS: SSH port scan — ET SCAN Potential SSH Scan
15 Jul 2026 - 21:31 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 15:18 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 15:18 high IDS: SSH port scan — ET SCAN Potential SSH Scan
14 Jul 2026 - 09:43 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 05:14 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
14 Jul 2026 - 02:19 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
13 Jul 2026 - 23:25 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
Part of EagleEye Intelligence