Threat LevelCRITICAL72/1002 rule types across 2 attack categories
2 incidents on record · 2 rule types · active attack detected · last seen 9d ago
| PTR | N/A |
Attack Analysis
Directory Brute-Force (Active Scan)
This IP triggered 10 or more HTTP 4xx errors within 60 seconds — the signature of a vulnerability scanner cycling through wordlists of common admin paths, config files, and endpoints. Tools like Nikto, Dirbuster, and Gobuster produce exactly this pattern.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
Reports (2)
| Date | Severity | Description |
|---|---|---|
| 27 Oct 2026 - 02:23 | medium | IDS: Suricata alert — ET INFO Go-http-client User-Agent Observed Inbound |
| 27 Oct 2026 - 02:23 | high | Web: Active scan — 10+ 4xx errors in 60s |
EagleEye Intelligence