Threat LevelHIGH54/1002 rule types
2 incidents on record · 2 rule types · active attack detected · active over 3 days · last seen 5d ago
| PTR | 154-16-44-233.infrawat.ch |
Attack Analysis
WordPress: Brute Force Attack
This IP was blocked attempting to log into a WordPress site's wp-login.php — either from a disallowed country or after exceeding the allowed number of failed login attempts. Automated credential-stuffing and brute-force tools account for the overwhelming majority of this traffic; legitimate users rarely trigger a hard IP block on login alone.
Identified Vulnerability Scanner
This request's User-Agent self-identified as an automated vulnerability scanner or security-research bot (rather than a browser). Genuine security researchers and monitoring tools that announce themselves this way are still uninvited probing from this site's point of view — the traffic is automated reconnaissance, not a human visitor.
Reports (2)
| Date | Severity | Description |
|---|---|---|
| 31 Oct 2026 - 10:08 | low | Query Guard — Ua Known Scanner |
| 28 Oct 2026 - 09:20 | medium | WordPress Login Brute Force Attempt |
EagleEye Intelligence