Threat LevelCRITICAL80/1003 rule types across 2 attack categories
32 incidents · 3 rule types · confirmed on global blocklist · persistent 31-day campaign · last seen 3d ago
| PTR | N/A |
| Org / ASN | TechTies Inc |
| Country | 🇳🇱 The Netherlands |
| City | Amsterdam, North Holland |
| Timezone | Europe/Amsterdam |
Attack Analysis
IDS: Blocklist — Spamhaus DROP
This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.
Plugin/Theme Version Fingerprinting Probe
This IP requested an installed plugin or theme's readme.txt/changelog.txt directly over HTTP — the file's "Stable tag:" line names the exact installed version, which an attacker cross-references against known CVEs for that version before firing the real exploit. WordPress.org's own tooling reads this file server-side, never over HTTP.
Bad Bot Flood
This IP generated over 20 HTTP 4xx errors in 60 seconds using a User-Agent identified as a bad bot (scraper, headless browser, or attack proxy). The high error rate indicates automated probing for vulnerabilities while trying to appear as generic traffic. Legitimate services respect robots.txt and do not flood servers with errors.
Reports (32)
| Date | Severity | Description |
|---|---|---|
| 1 Nov 2026 - 04:55 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 13 |
| 1 Nov 2026 - 00:33 | high | IDS: Blocklist — Spamhaus DROP listed IP |
| 1 Nov 2026 - 00:33 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 13 |
| 1 Nov 2026 - 00:33 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 13 |
| 31 Oct 2026 - 02:51 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 13 |
| 30 Oct 2026 - 22:18 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 13 |
| 30 Oct 2026 - 22:18 | high | IDS: Blocklist — Spamhaus DROP listed IP |
| 28 Oct 2026 - 20:57 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 27 Oct 2026 - 06:37 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 26 Oct 2026 - 15:58 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 23 Oct 2026 - 10:43 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 18 Oct 2026 - 01:05 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 17 Oct 2026 - 07:45 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 16 Oct 2026 - 13:33 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 16 Oct 2026 - 04:56 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 15 Oct 2026 - 14:16 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 15 Oct 2026 - 09:57 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 15 Oct 2026 - 03:13 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 14 Oct 2026 - 09:37 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 14 Oct 2026 - 05:50 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
EagleEye Intelligence