["Repeated GET requests to /robots.txt","No legitimate reason for unknown IPs to scan this private application","Blocked on multiple DNS blocklists (17 in total)","Open ports limited to SSH (22) and HTTP (80)"]
{"ai_analysis":{"classification":"bot|scanner","confidence":0.85,"indicators":["Repeated GET requests to /robots.txt","No legitimate reason for unknown IPs to scan this private application","Blocked on multiple DNS blocklists (17 in total)","Open ports limited to SSH (22) and HTTP (80)"],"likely_automated":true,"pattern":"The attack pattern involves repeated, automated requests to non-existent paths using a known bot user agent.","recommendation":"ban permanently","summary":"The IP address 51.68.111.204 is engaged in repeated probing of non-existent paths, specifically targeting the /robots.txt file. This behavior is indicative of a bot or scanner activity.","threat_level":"high"},"error":null,"geo":{"as":"AS16276 OVH SAS","city":"Roubaix","country":"France","countryCode":"FR","hosting":true,"isp":"OVH SAS","lat":50.6916,"lon":3.20151,"mobile":false,"org":"OVH","proxy":false,"regionName":"Hauts-de-France","status":"success","timezone":"Europe/Paris"},"ip":"51.68.111.204","log_count":2,"webcheck":{"block_lists":{"blocklists":[{"isBlocked":true,"server":"AdGuard","serverIp":"176.103.130.130"},{"isBlocked":true,"server":"AdGuard Family","serverIp":"176.103.130.132"},{"isBlocked":true,"server":"CleanBrowsing Adult","serverIp":"185.228.168.10"},{"isBlocked":true,"server":"CleanBrowsing Family","serverIp":"185.228.168.168"},{"isBlocked":true,"server":"CleanBrowsing Security","serverIp":"185.228.168.9"},{"isBlocked":true,"server":"CloudFlare","serverIp":"1.1.1.1"},{"isBlocked":true,"server":"CloudFlare Family","serverIp":"1.1.1.3"},{"isBlocked":true,"server":"Comodo Secure","serverIp":"8.26.56.26"},{"isBlocked":true,"server":"Google DNS","serverIp":"8.8.8.8"},{"isBlocked":true,"server":"Neustar Family","serverIp":"156.154.70.3"},{"isBlocked":true,"server":"Neustar Protection","serverIp":"156.154.70.2"},{"isBlocked":true,"server":"Norton Family","serverIp":"199.85.126.20"},{"isBlocked":true,"server":"OpenDNS","serverIp":"208.67.222.222"},{"isBlocked":true,"server":"OpenDNS Family","serverIp":"208.67.222.123"},{"isBlocked":true,"server":"Quad9","serverIp":"9.9.9.9"},{"isBlocked":true,"server":"Yandex Family","serverIp":"77.88.8.7"},{"isBlocked":true,"server":"Yandex Safe","serverIp":"77.88.8.88"}]},"dns":{"A":{"address":"51.68.111.204","family":4},"AAAA":[],"CNAME":[],"MX":[],"NS":[],"PTR":[],"SOA":[],"SRV":[],"TXT":[]},"ports":{"failedPorts":[20,21,23,25,53,67,68,69,110,119,123,143,156,161,162,179,194,389,443,587,993,995,3000,3306,3389,5060,5900,8000,8080,8888],"openPorts":[22,80]},"trace_route":{"message":"Traceroute completed!","result":[{"172.17.0.1":[0.233]},{"192.168.1.1":[0.485]},{"100.64.3.3":[46.923]},{"45.38.16.3":[57.265]},{"85.12.50.82":[46.898]},{"128.241.9.66":[47.141]},{"129.250.2.124":[57.303]},{"62.115.205.197":[60.992]},{"129.250.9.167":[60.978]},{"62.115.205.197":[60.967]},false,false,{"54.36.50.229":[144.412]},{"37.59.16.24":[152.638]},false,false,{"37.59.16.24":[153.937]},false,false,false,{"51.68.111.204":[125.797,null]}]}}}