Threat LevelCRITICAL80/1003 rule types across 2 attack categories
33 incidents · 3 rule types · confirmed on global blocklist · persistent 35-day campaign · seen 24h ago
| PTR | N/A |
| Org / ASN | TechTies Inc |
| Country | 🇳🇱 The Netherlands |
| City | Amsterdam, North Holland |
| Timezone | Europe/Amsterdam |
Attack Analysis
IDS: Blocklist — Spamhaus DROP
This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.
Plugin/Theme Version Fingerprinting Probe
This IP requested an installed plugin or theme's readme.txt/changelog.txt directly over HTTP — the file's "Stable tag:" line names the exact installed version, which an attacker cross-references against known CVEs for that version before firing the real exploit. WordPress.org's own tooling reads this file server-side, never over HTTP.
Bad Bot Flood
This IP generated over 20 HTTP 4xx errors in 60 seconds using a User-Agent identified as a bad bot (scraper, headless browser, or attack proxy). The high error rate indicates automated probing for vulnerabilities while trying to appear as generic traffic. Legitimate services respect robots.txt and do not flood servers with errors.
Reports (33)
| Date | Severity | Description |
|---|---|---|
| 14 Oct 2026 - 05:50 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 11 Oct 2026 - 17:26 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 11 Oct 2026 - 12:12 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 10 Oct 2026 - 21:14 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 10 Oct 2026 - 17:39 | high | IDS: Blocklist — Spamhaus DROP listed IP |
| 7 Oct 2026 - 22:22 | high | Web: Bad bot 4xx flood — 20+ errors in 60s |
| 6 Oct 2026 - 18:40 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 6 Oct 2026 - 07:40 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 4 Oct 2026 - 14:15 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 3 Oct 2026 - 07:17 | high | IDS: Blocklist — Spamhaus DROP listed IP |
| 3 Oct 2026 - 07:16 | low | Query Guard — Path Plugin Theme Readme Probe |
| 1 Oct 2026 - 18:01 | high | IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 12 |
| 30 Sep 2026 - 18:16 | high | IDS: Blocklist — Spamhaus DROP listed IP |
EagleEye Intelligence