Report for IP: 64.89.162.139

Threat LevelCRITICAL80/1002 rule types across 2 attack categories
17 incidents · 2 rule types · active attacker + blocklisted · active over 6 days · seen 20h ago
PTR N/A
Org / ASN Meowcore
Country 🇳🇱 The Netherlands
City Amsterdam, North Holland
Timezone Europe/Amsterdam

Attack Analysis

🇳🇱 Netherlands · Amsterdam · 198584 · Meowcore
IDS: Blocklist — Spamhaus DROP
This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (17)

Date Severity Description
12 Jun 2026 - 12:49 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
12 Jun 2026 - 00:26 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
11 Jun 2026 - 20:18 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
10 Jun 2026 - 04:01 high IDS: Blocklist — Spamhaus DROP listed IP
10 Jun 2026 - 04:01 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
9 Jun 2026 - 20:33 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
9 Jun 2026 - 14:51 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
9 Jun 2026 - 07:11 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
9 Jun 2026 - 03:39 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
8 Jun 2026 - 09:06 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
7 Jun 2026 - 05:35 medium IDS: Suricata alert — ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
7 Jun 2026 - 05:35 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
6 Jun 2026 - 22:51 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
6 Jun 2026 - 22:51 medium IDS: Suricata alert — ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
6 Jun 2026 - 21:14 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
6 Jun 2026 - 17:57 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
6 Jun 2026 - 14:31 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9

Related IPs — Same /24 Block (64.89.162.0/24)

64.89.162.131HIGH30 reports64.89.162.78HIGH25 reports64.89.162.49ELEVATED8 reports64.89.162.149ELEVATED6 reports64.89.162.167ELEVATED6 reports64.89.162.188ELEVATED2 reports64.89.162.122ELEVATED2 reports64.89.162.172ELEVATED4 reports
Part of EagleEye Intelligence