["Exploit scan attempts targeting .git/config","Multiple user agent probes (HeadlessChrome/135.0.0.0)","Blocked on 17 DNS blocklists including AdGuard and CleanBrowsing Family"]
{"ai_analysis":{"classification":"scanner|bot","confidence":0.95,"indicators":["Exploit scan attempts targeting .git/config","Multiple user agent probes (HeadlessChrome/135.0.0.0)","Blocked on 17 DNS blocklists including AdGuard and CleanBrowsing Family"],"likely_automated":true,"pattern":"The IP is performing repeated exploit scans targeting common directories, which are characteristic of automated scanning tools. The presence on multiple blocklists further supports this classification.","recommendation":"Ban permanently","summary":"The IP address 64.62.197.17 is engaging in multiple exploit scans and has been blocked on numerous DNS blocklists, indicating a high likelihood of being an automated scanner or bot.","threat_level":"critical"},"error":null,"geo":{"as":"AS6939 Hurricane Electric LLC","city":"Pleasanton","country":"United States","countryCode":"US","hosting":true,"isp":"Hurricane Electric LLC","lat":37.6951,"lon":-121.9,"mobile":false,"org":"The Shadowserver Foundation, Inc","proxy":false,"regionName":"California","status":"success","timezone":"America/Los_Angeles"},"ip":"64.62.197.17","log_count":5,"webcheck":{"block_lists":{"blocklists":[{"isBlocked":true,"server":"AdGuard","serverIp":"176.103.130.130"},{"isBlocked":true,"server":"AdGuard Family","serverIp":"176.103.130.132"},{"isBlocked":true,"server":"CleanBrowsing Adult","serverIp":"185.228.168.10"},{"isBlocked":true,"server":"CleanBrowsing Family","serverIp":"185.228.168.168"},{"isBlocked":true,"server":"CleanBrowsing Security","serverIp":"185.228.168.9"},{"isBlocked":true,"server":"CloudFlare","serverIp":"1.1.1.1"},{"isBlocked":true,"server":"CloudFlare Family","serverIp":"1.1.1.3"},{"isBlocked":true,"server":"Comodo Secure","serverIp":"8.26.56.26"},{"isBlocked":true,"server":"Google DNS","serverIp":"8.8.8.8"},{"isBlocked":true,"server":"Neustar Family","serverIp":"156.154.70.3"},{"isBlocked":true,"server":"Neustar Protection","serverIp":"156.154.70.2"},{"isBlocked":true,"server":"Norton Family","serverIp":"199.85.126.20"},{"isBlocked":true,"server":"OpenDNS","serverIp":"208.67.222.222"},{"isBlocked":true,"server":"OpenDNS Family","serverIp":"208.67.222.123"},{"isBlocked":true,"server":"Quad9","serverIp":"9.9.9.9"},{"isBlocked":true,"server":"Yandex Family","serverIp":"77.88.8.7"},{"isBlocked":true,"server":"Yandex Safe","serverIp":"77.88.8.88"}]},"dns":{"A":{"address":"64.62.197.17","family":4},"AAAA":[],"CNAME":[],"MX":[],"NS":[],"PTR":[],"SOA":[],"SRV":[],"TXT":[]},"ports":{"failedPorts":[20,21,22,23,25,53,67,68,69,110,119,123,143,156,161,162,179,194,389,443,587,993,995,3000,3306,3389,5060,5900,8000,8080,8888],"openPorts":[80]},"trace_route":{"message":"Traceroute completed!","result":[{"172.17.0.1":[0.243]},{"192.168.1.1":[0.636]},{"100.64.3.3":[57.029]},{"45.38.16.2":[57.284]},{"85.12.50.78":[57.097]},{"128.241.10.88":[57.075]},{"129.250.3.250":[57.134]},{"129.250.5.45":[57.063]},{"129.250.8.17":[57.221]},{"62.115.141.51":[57.209]},{"62.115.139.34":[54.67]},{"62.115.139.33":[131.596]},{"62.115.115.76":[104.294]},{"62.115.139.104":[131.678]},{"62.115.139.112":[129.081]},{"62.115.139.111":[126.254]},{"62.115.171.59":[132.242]},{"62.115.171.59":[128.907]},{"184.105.223.186":[115.329]},{"64.62.197.17":[128.374]}]}}}