Report for IP: 87.251.64.110

Threat LevelCRITICAL80/1002 rule types across 2 attack categories
6 incidents on record · 2 rule types · active attacker + blocklisted · last seen 1d ago · bulletproof hosting
PTR N/A
Org / ASN Isaev
Country 🇵🇱 Poland
City Warsaw, Mazovia
Timezone Europe/Warsaw
Single-Operator Abuse BlockISAEV Igor Maratovich (AS200730, Warsaw)
AS200730 is a single-person autonomous system registered to Igor Isaev in Warsaw, announcing one /24 block (87.251.64.0/24). Individual IPs within this range carry among the highest abuse report counts in global databases: 87.251.64.145 accumulates 59,056 reports from 837 independent sources (100% confidence); 87.251.64.147 carries 55,458 reports from 886 sources. No legitimate services operate on a solo-person ASN with this report density. The entire /24 is dedicated attack infrastructure.

Attack Analysis

🇵🇱 Poland · Warsaw · 200730 · Isaev Igor Maratovich
IDS: Blocklist — Dshield
This IP was reported to the DShield community blocklist by multiple independent security sensors worldwide. DShield aggregates firewall logs from thousands of contributors; IPs on this list are confirmed active attackers observed across many networks.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (6)

Date Severity Description
12 Jun 2026 - 01:27 high IDS: Blocklist — Dshield listed IP — ET DROP Dshield Block Listed Source group 1
11 Jun 2026 - 23:06 high IDS: Blocklist — Dshield listed IP — ET DROP Dshield Block Listed Source group 1
11 Jun 2026 - 23:06 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
11 Jun 2026 - 22:35 high IDS: Suricata alert
11 Jun 2026 - 22:35 medium IDS: Suricata alert — Honeypot: probe to closed SSH port 22
11 Jun 2026 - 22:35 high IDS: Blocklist — Dshield listed IP — ET DROP Dshield Block Listed Source group 1