Name: Threat Intelligence: 157.254.114.199
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelHIGH62/1001 rule type

11 incidents · confirmed on global blocklist · persistent 19-day campaign · last seen 3d ago

PTR	N/A
Org / ASN	AS9009 M247 Europe SRL
Country	🇺🇸 United States
City	New York, New York
Timezone	America/New_York

Attack Analysis

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

Reports (11)

Date	Severity	Description
26 Sep 2026 - 22:37	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
26 Sep 2026 - 03:14	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
26 Sep 2026 - 01:32	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
24 Sep 2026 - 15:01	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
22 Sep 2026 - 12:55	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
20 Sep 2026 - 16:45	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
19 Sep 2026 - 16:09	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
19 Sep 2026 - 01:11	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
18 Sep 2026 - 16:18	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
7 Sep 2026 - 15:49	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
7 Sep 2026 - 14:36	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30

Report for IP: 157.254.114.199

Attack Analysis

Reports (11)

Related IPs — Same /24 Block (157.254.114.0/24)