Threat LevelMEDIUM32/1002 rule types
2 incidents on record · 2 rule types · last seen 6d ago
| PTR | N/A |
| Org / ASN | VPN Consumer Osaka, Japan |
| Country | 🇯🇵 Japan |
| City | Osaka, Osaka |
| Timezone | Asia/Tokyo |
Attack Analysis
Drupal: Admin Path Probe
This IP probed Drupal administrative paths and received 4xx errors — a reconnaissance technique to map the CMS structure before a targeted attack. Automated scanners cycle through common admin paths to find unprotected entry points.
Directory Brute-Force (Active Scan)
This IP triggered 10 or more HTTP 4xx errors within 60 seconds — the signature of a vulnerability scanner cycling through wordlists of common admin paths, config files, and endpoints. Tools like Nikto, Dirbuster, and Gobuster produce exactly this pattern.
Reports (2)
| Date | Severity | Description |
|---|---|---|
| 15 Jun 2026 - 09:43 | high | Web: Active scan — 10+ 4xx errors in 60s |
| 15 Jun 2026 - 09:43 | high | Drupal: Admin path probe (4xx) |
EagleEye Intelligence