["Repeated 404 hits on /graphql and related endpoints","No legitimate reason for unknown IPs to scan the application","Low threat level but multiple attempts suggest automated scanning behavior"]
{"ai_analysis":{"classification":"bot|scanner","confidence":0.85,"indicators":["Repeated 404 hits on /graphql and related endpoints","No legitimate reason for unknown IPs to scan the application","Low threat level but multiple attempts suggest automated scanning behavior"],"likely_automated":true,"pattern":"The IP is attempting to probe common GraphQL and API endpoints using a consistent user agent, which is indicative of an automated scanner or bot.","recommendation":"monitor, ban permanently if no response","summary":"The IP address 65.108.103.25 is performing repeated POST requests to non-existent paths, indicating a potential bot or scanner activity.","threat_level":"medium"},"error":null,"geo":{"as":"AS24940 Hetzner Online GmbH","city":"Helsinki","country":"Finland","countryCode":"FI","hosting":true,"isp":"Hetzner Online GmbH","lat":60.1719,"lon":24.9347,"mobile":false,"org":"Hetzner Online GmbH","proxy":false,"regionName":"Uusimaa","status":"success","timezone":"Europe/Helsinki"},"ip":"65.108.103.25","log_count":6,"webcheck":{"block_lists":{"blocklists":[{"isBlocked":true,"server":"AdGuard","serverIp":"176.103.130.130"},{"isBlocked":true,"server":"AdGuard Family","serverIp":"176.103.130.132"},{"isBlocked":true,"server":"CleanBrowsing Adult","serverIp":"185.228.168.10"},{"isBlocked":true,"server":"CleanBrowsing Family","serverIp":"185.228.168.168"},{"isBlocked":true,"server":"CleanBrowsing Security","serverIp":"185.228.168.9"},{"isBlocked":true,"server":"CloudFlare","serverIp":"1.1.1.1"},{"isBlocked":true,"server":"CloudFlare Family","serverIp":"1.1.1.3"},{"isBlocked":true,"server":"Comodo Secure","serverIp":"8.26.56.26"},{"isBlocked":true,"server":"Google DNS","serverIp":"8.8.8.8"},{"isBlocked":true,"server":"Neustar Family","serverIp":"156.154.70.3"},{"isBlocked":true,"server":"Neustar Protection","serverIp":"156.154.70.2"},{"isBlocked":true,"server":"Norton Family","serverIp":"199.85.126.20"},{"isBlocked":true,"server":"OpenDNS","serverIp":"208.67.222.222"},{"isBlocked":true,"server":"OpenDNS Family","serverIp":"208.67.222.123"},{"isBlocked":true,"server":"Quad9","serverIp":"9.9.9.9"},{"isBlocked":true,"server":"Yandex Family","serverIp":"77.88.8.7"},{"isBlocked":true,"server":"Yandex Safe","serverIp":"77.88.8.88"}]},"dns":{"A":{"address":"65.108.103.25","family":4},"AAAA":[],"CNAME":[],"MX":[],"NS":[],"PTR":[],"SOA":[],"SRV":[],"TXT":[]},"ports":{"failedPorts":[20,21,23,25,53,67,68,69,80,110,119,123,143,156,161,162,179,194,389,443,587,993,995,3000,3306,3389,5060,5900,8000,8080,8888],"openPorts":[22]},"trace_route":{"message":"Traceroute completed!","result":[{"172.17.0.1":[0.257]},{"192.168.1.1":[0.95]},{"100.64.3.3":[59.031]},{"45.38.16.2":[58.996]},{"85.12.50.76":[50.488]},{"128.241.10.88":[59.047]},{"129.250.3.250":[50.817]},{"129.250.2.110":[136.083]},{"129.250.3.13":[146.768]},{"129.250.2.5":[136.857]},false,{"213.239.252.18":[151.772]},{"213.239.224.154":[160.121]},{"213.133.119.9":[160.104]},false,false,false,false,false,false,false,false,false,false,false,false,false,false,false,false]}}}