Threat LevelCRITICAL80/1003 rule types across 2 attack categories
3 incidents on record · 3 rule types · active attack detected · active over 6 days · last seen 4d ago
| PTR | pool-99-254-169-138.cpe.net.cable.rogers.com |
Attack Analysis
Bad Bot Flood
This IP generated over 20 HTTP 4xx errors in 60 seconds using a User-Agent identified as a bad bot (scraper, headless browser, or attack proxy). The high error rate indicates automated probing for vulnerabilities while trying to appear as generic traffic. Legitimate services respect robots.txt and do not flood servers with errors.
WordPress: Brute Force Attack
This IP was blocked attempting to log into a WordPress site's wp-login.php — either from a disallowed country or after exceeding the allowed number of failed login attempts. Automated credential-stuffing and brute-force tools account for the overwhelming majority of this traffic; legitimate users rarely trigger a hard IP block on login alone.
local blocklist
Reports (3)
| Date | Severity | Description |
|---|---|---|
| 1 Nov 2026 - 14:05 | low | local blocklist |
| 1 Nov 2026 - 14:05 | medium | WordPress Login Brute Force Attempt |
| 26 Oct 2026 - 11:44 | high | Web: Bad bot 4xx flood — 20+ errors in 60s |
EagleEye Intelligence