Threat LevelHIGH70/1002 rule types across 2 attack categories

29 incidents · 2 rule types · confirmed on global blocklist · persistent 10-day campaign · seen 10h ago

PTR	N/A
Org / ASN	Lanedonet Datacenter
Country	🇳🇱 The Netherlands
City	Amsterdam, North Holland
Timezone	Europe/Amsterdam

Attack Analysis

🇳🇱 Netherlands · Amsterdam · 214940 · Lanedonet Datacenter

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

WordPress XML-RPC Abuse

This IP targeted xmlrpc.php, a legacy WordPress endpoint that has been abused for brute-force authentication attacks, credential stuffing, and DDoS amplification. Any direct access to xmlrpc.php is an attack or reconnaissance attempt; modern WordPress sites should disable it entirely.

Reports (29)

Date	Severity	Description
31 Jul 2026 - 14:13	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
31 Jul 2026 - 12:37	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
26 Jul 2026 - 17:07	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
26 Jul 2026 - 11:46	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
25 Jul 2026 - 19:17	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
25 Jul 2026 - 13:01	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
25 Jul 2026 - 02:29	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
24 Jul 2026 - 21:26	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
24 Jul 2026 - 18:47	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
24 Jul 2026 - 17:23	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
23 Jul 2026 - 06:45	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
23 Jul 2026 - 05:06	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
23 Jul 2026 - 03:31	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
23 Jul 2026 - 01:55	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
23 Jul 2026 - 00:17	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
22 Jul 2026 - 22:56	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
22 Jul 2026 - 21:18	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
22 Jul 2026 - 19:41	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
22 Jul 2026 - 18:01	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
22 Jul 2026 - 16:28	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10

Report for IP: 77.83.39.59

Attack Analysis

Reports (29)

Related IPs — Same /24 Block (77.83.39.0/24)