Threat LevelCRITICAL72/1002 rule types across 2 attack categories
2 incidents on record · 2 rule types · active attack detected · active over 3 days · seen 16h ago
| PTR | N/A |
Attack Analysis
Directory Brute-Force (Active Scan)
This IP triggered 10 or more HTTP 4xx errors within 60 seconds — the signature of a vulnerability scanner cycling through wordlists of common admin paths, config files, and endpoints. Tools like Nikto, Dirbuster, and Gobuster produce exactly this pattern.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
Reports (2)
| Date | Severity | Description |
|---|---|---|
| 5 Nov 2026 - 13:01 | high | IDS: Suricata alert |
| 2 Nov 2026 - 02:12 | high | Web: Active scan — 10+ 4xx errors in 60s |
EagleEye Intelligence