Threat LevelCRITICAL80/1002 rule types across 2 attack categories
10 incidents · 2 rule types · active attacker + blocklisted · persistent 7-day campaign · last seen 18d ago · bulletproof hosting
| PTR | N/A |
| Org / ASN | Unmanaged LTD |
| Country | 🇭🇺 Hungary |
| City | Budapest, Budapest |
| Timezone | Europe/Budapest |
Bulletproof HostingUNMANAGED LTD (AS47890)
UNMANAGED LTD (AS47890) is a nominally UK-registered hosting provider with Romanian operational ties, whose address space includes blocks listed on Spamhaus DROP. Scamalytics estimates 39% of web traffic from this ISP is fraudulent. Consistent with the pattern of UK-fronted Eastern European bulletproof hosting that maintains minimal abuse response while enabling high-volume malicious traffic.
Attack Analysis
IDS: Blocklist — Spamhaus DROP
This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
Reports (10)
| Date | Severity | Description |
|---|---|---|
| 14 Jul 2026 - 12:01 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11 |
| 14 Jul 2026 - 10:00 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11 |
| 13 Jul 2026 - 20:40 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11 |
| 13 Jul 2026 - 19:18 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11 |
| 13 Jul 2026 - 08:25 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11 |
| 12 Jul 2026 - 19:35 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11 |
| 12 Jul 2026 - 19:35 | high | IDS: Blocklist — Spamhaus DROP listed IP |
| 10 Jul 2026 - 13:32 | high | IDS: Suricata alert — Honeypot: probe to closed SSH port 22 |
| 7 Jul 2026 - 01:43 | high | IDS: Blocklist — Spamhaus DROP listed IP |
| 7 Jul 2026 - 01:43 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 11 |
EagleEye Intelligence