Threat LevelHIGH65/1001 rule type
2 incidents on record · confirmed on global blocklist · last seen 2d ago · bulletproof hosting
| PTR | N/A |
| Org / ASN | Kprohost |
| Country | 🇳🇱 The Netherlands |
| City | Eygelshoven, Limburg |
| Timezone | Europe/Amsterdam |
Bulletproof HostingKprohost LLC (AS214940)
Kprohost (AS214940, Netherlands) is a micro-hosting operation whose netblocks are among the most-reported attack ranges in global abuse databases, with individual IPs accumulating thousands of reports from hundreds of independent reporters. The operation uses a Gmail address for abuse contact and functions as de facto bulletproof hosting — dedicated attack infrastructure, not incidentally compromised servers.
Attack Analysis
IDS: Blocklist — Spamhaus DROP
This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.
Reports (2)
| Date | Severity | Description |
|---|---|---|
| 17 Jun 2026 - 12:56 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 7 |
| 17 Jun 2026 - 11:40 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 7 |
EagleEye Intelligence