Threat LevelCRITICAL91/1003 rule types across 2 attack categories

113 incidents · 3 rule types · confirmed on global blocklist · persistent 8-day campaign · 14 attacks/day · seen 49m ago · bulletproof hosting

PTR	N/A
Org / ASN	Limited Network LTD
Country	🇩🇪 Germany
City	Augsburg, Bavaria
Timezone	Europe/Berlin

Bulletproof HostingLimited Network LTD (AS213790)

Limited Network LTD (AS213790) is a UK-registered but Romania-operated hosting entity whose address space is listed on Spamhaus DROP. The abuse contact routes to a Romanian address — a pattern consistent with Eastern European bulletproof hosting using UK shell companies as legitimacy facades. Flagged by multiple honeypot networks for reconnaissance and intrusion attempts.

Attack Analysis

🇩🇪 Germany · Augsburg · 213790 · Limited Network LTD

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

IDS: Database Port Scan

Suricata detected this IP scanning database ports (MySQL, PostgreSQL, Redis, MongoDB). This is reconnaissance to find exposed database services for direct exploitation or credential brute-force. Database ports should never be reachable from the internet.

IDS: Blocklist — Dshield

This IP was reported to the DShield community blocklist by multiple independent security sensors worldwide. DShield aggregates firewall logs from thousands of contributors; IPs on this list are confirmed active attackers observed across many networks.

Reports (113)

Date	Severity	Description
13 Jun 2026 - 06:00	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
13 Jun 2026 - 06:00	high	IDS: Database port scan — ET SCAN Suspicious inbound to mySQL port 3306
13 Jun 2026 - 02:50	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
13 Jun 2026 - 01:15	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Jun 2026 - 22:07	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Jun 2026 - 20:38	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Jun 2026 - 18:24	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Jun 2026 - 18:24	high	IDS: Database port scan — ET SCAN Suspicious inbound to mySQL port 3306
12 Jun 2026 - 12:23	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Jun 2026 - 10:59	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Jun 2026 - 08:36	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Jun 2026 - 05:03	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Jun 2026 - 05:03	high	IDS: Database port scan — ET SCAN Suspicious inbound to mySQL port 3306
12 Jun 2026 - 02:00	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Jun 2026 - 01:15	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
11 Jun 2026 - 23:11	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
11 Jun 2026 - 23:03	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
11 Jun 2026 - 18:40	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
11 Jun 2026 - 18:40	high	IDS: Database port scan — ET SCAN Suspicious inbound to mySQL port 3306
11 Jun 2026 - 11:54	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10

Report for IP: 77.90.185.78

Attack Analysis

Reports (113)

Related IPs — Same /24 Block (77.90.185.0/24)