Report for IP: 185.226.197.97

Threat LevelHIGH69/1002 rule types across 2 attack categories
11 incidents · 2 rule types · confirmed on global blocklists · persistent 22-day campaign · seen 23h ago
PTR zl-amsc-nl-gp9-wk101a.internet-census.org
Org / ASN ICG 4 ZEN AMS
Country 🇳🇱 The Netherlands
City Amsterdam, North Holland
Timezone Europe/Amsterdam
Internet ScannerInternet-census
Internet Census / Network scanning research project performing large-scale surveys of internet infrastructure. All unsolicited scanning probes are treated as hostile traffic on this network regardless of stated purpose.

Attack Analysis

IDS: Blocklist — Dshield
This IP was reported to the DShield community blocklist by multiple independent security sensors worldwide. DShield aggregates firewall logs from thousands of contributors; IPs on this list are confirmed active attackers observed across many networks.
IDS: Threat Intel — CINS Active Threat
This IP appears in the CINS (Collective Intelligence Network Security) Active Threat Intelligence feed — a real-time blocklist of IPs with poor reputation scores derived from observed malicious activity. CINS-listed IPs are actively engaged in attacks at the time of detection.

Reports (11)

Date Severity Description
29 Sep 2026 - 01:49 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 261
28 Sep 2026 - 15:21 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 261
28 Sep 2026 - 10:22 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 261
28 Sep 2026 - 07:56 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 261
27 Sep 2026 - 21:40 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 261
26 Sep 2026 - 17:44 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 261
14 Sep 2026 - 11:39 high IDS: Blocklist — Dshield listed IP
12 Sep 2026 - 23:59 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 243
12 Sep 2026 - 23:59 high IDS: Blocklist — Dshield listed IP — ET DROP Dshield Block Listed Source group 1
12 Sep 2026 - 23:59 high IDS: Blocklist — Dshield listed IP
6 Sep 2026 - 16:02 high IDS: Threat Intel — CINS poor reputation IP