77.90.185.226 | UnwantedIP

Threat LevelCRITICAL77/1003 rule types across 2 attack categories

336 incidents · 3 rule types · confirmed on global blocklist · persistent 65-day campaign · last seen 6d ago · bulletproof hosting

PTR	N/A
Org / ASN	Limited Network LTD
Country	🇩🇪 Germany
City	Augsburg, Bavaria
Timezone	Europe/Berlin

Bulletproof HostingLimited Network LTD (AS213790)

Limited Network LTD (AS213790) is a UK-registered but Romania-operated hosting entity whose address space is listed on Spamhaus DROP. The abuse contact routes to a Romanian address — a pattern consistent with Eastern European bulletproof hosting using UK shell companies as legitimacy facades. Flagged by multiple honeypot networks for reconnaissance and intrusion attempts.

Attack Analysis

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

IDS: Database Port Scan

Suricata detected this IP scanning database ports (MySQL, PostgreSQL, Redis, MongoDB). This is reconnaissance to find exposed database services for direct exploitation or credential brute-force. Database ports should never be reachable from the internet.

IDS: Blocklist — Dshield

This IP was reported to the DShield community blocklist by multiple independent security sensors worldwide. DShield aggregates firewall logs from thousands of contributors; IPs on this list are confirmed active attackers observed across many networks.

Reports (336)

Date	Severity	Description
25 Oct 2026 - 04:58	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
25 Oct 2026 - 02:21	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
24 Oct 2026 - 23:28	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11
24 Oct 2026 - 23:28	high	IDS: Blocklist — Dshield listed IP — ET DROP Dshield Block Listed Source group 1
17 Sep 2026 - 15:40	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
17 Sep 2026 - 11:10	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
17 Sep 2026 - 05:09	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
16 Sep 2026 - 22:59	high	IDS: Blocklist — Spamhaus DROP listed IP
16 Sep 2026 - 22:59	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11
16 Sep 2026 - 22:59	high	IDS: Blocklist — Dshield listed IP — ET DROP Dshield Block Listed Source group 1
16 Sep 2026 - 20:43	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
16 Sep 2026 - 17:01	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
16 Sep 2026 - 17:01	high	IDS: Database port scan — ET SCAN Suspicious inbound to PostgreSQL port 5432
16 Sep 2026 - 06:26	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
16 Sep 2026 - 06:26	high	IDS: Database port scan — ET SCAN Suspicious inbound to PostgreSQL port 5432
16 Sep 2026 - 02:15	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
16 Sep 2026 - 02:15	high	IDS: Database port scan — ET SCAN Suspicious inbound to PostgreSQL port 5432
16 Sep 2026 - 00:10	high	IDS: Blocklist — Spamhaus DROP listed IP
6 Sep 2026 - 01:09	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11
6 Sep 2026 - 01:09	high	IDS: Blocklist — Dshield listed IP — ET DROP Dshield Block Listed Source group 1

Report for IP: 77.90.185.226

Attack Analysis

Reports (336)

Related IPs — Same /24 Block (77.90.185.0/24)