Name: Threat Intelligence: 157.254.119.137
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelHIGH66/1001 rule type

11 incidents · confirmed on global blocklist · persistent 22-day campaign · last seen 2d ago

PTR	N/A
Org / ASN	AS9009 M247 Europe SRL
Country	🇺🇸 United States
City	New York, New York
Timezone	America/New_York

Attack Analysis

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

Reports (11)

Date	Severity	Description
28 Sep 2026 - 04:44	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
26 Sep 2026 - 13:02	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
24 Sep 2026 - 23:56	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
24 Sep 2026 - 02:17	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
22 Sep 2026 - 14:59	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
21 Sep 2026 - 19:21	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
21 Sep 2026 - 06:52	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
19 Sep 2026 - 18:49	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
9 Sep 2026 - 10:47	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
8 Sep 2026 - 06:40	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30
5 Sep 2026 - 16:50	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 30

Report for IP: 157.254.119.137

Attack Analysis

Reports (11)

Related IPs — Same /24 Block (157.254.119.0/24)