Threat LevelCRITICAL80/1003 rule types across 3 attack categories

34 incidents · 3 rule types · active attacker + blocklisted · 34 attacks/day · last seen 23d ago · bulletproof hosting

PTR	N/A
Org / ASN	Unmanaged LTD
Country	🇬🇧 United Kingdom
City	Rushden, England
Timezone	Europe/London

Bulletproof HostingUNMANAGED LTD (AS47890)

UNMANAGED LTD (AS47890) is a nominally UK-registered hosting provider with Romanian operational ties, whose address space includes blocks listed on Spamhaus DROP. Scamalytics estimates 39% of web traffic from this ISP is fraudulent. Consistent with the pattern of UK-fronted Eastern European bulletproof hosting that maintains minimal abuse response while enabling high-volume malicious traffic.

Attack Analysis

🇷🇴 Romania · Bucharest · 47890 · UNMANAGED LTD

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

IDS: Database Port Scan

Suricata detected this IP scanning database ports (MySQL, PostgreSQL, Redis, MongoDB). This is reconnaissance to find exposed database services for direct exploitation or credential brute-force. Database ports should never be reachable from the internet.

Suricata IDS Alert

Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (34)

Date	Severity	Description
9 Jul 2026 - 12:22	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
9 Jul 2026 - 11:09	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
9 Jul 2026 - 04:07	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
9 Jul 2026 - 04:07	medium	IDS: Suricata alert — GPL SNMP public access udp
9 Jul 2026 - 03:58	medium	IDS: Suricata alert — GPL SNMP public access udp
9 Jul 2026 - 03:05	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
9 Jul 2026 - 02:02	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
9 Jul 2026 - 01:02	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
9 Jul 2026 - 00:02	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 23:01	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 22:01	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 20:58	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 19:55	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 18:55	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 17:52	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 16:49	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 15:46	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 14:44	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 13:44	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42
8 Jul 2026 - 12:41	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 42

Report for IP: 193.46.255.144

Attack Analysis

Reports (34)

Related IPs — Same /24 Block (193.46.255.0/24)