["Repeated 404 hits on /xmlrpc.php","User agents mimic mobile browsers (Firefox/91.0.0.0)","No legitimate reason for unknown IPs to scan the private application"]
{"ai_analysis":{"classification":"scanner|bot","confidence":0.85,"indicators":["Repeated 404 hits on /xmlrpc.php","User agents mimic mobile browsers (Firefox/91.0.0.0)","No legitimate reason for unknown IPs to scan the private application"],"likely_automated":true,"pattern":"The attack pattern involves repeated HTTP POST requests targeting common web paths, likely in an attempt to identify and exploit vulnerabilities.","recommendation":"ban permanently","summary":"The IP address 86.99.205.246 is performing repeated 404 hits on common paths, which suggests it may be a bot or scanner probing the application for vulnerabilities.","threat_level":"medium"},"error":null,"geo":{"as":"AS5384 Emirates Internet","city":"Sharjah","country":"United Arab Emirates","countryCode":"AE","hosting":false,"isp":"EMIRATES TELECOMMUNICATIONS GROUP COMPANY (ETISALAT GROUP) PJSC","lat":25.3412,"lon":55.4224,"mobile":false,"org":"Emirates Telecommunications Corporation","proxy":false,"regionName":"Emirate of Sharjah","status":"success","timezone":"Asia/Dubai"},"ip":"86.99.205.246","log_count":2,"webcheck":{"block_lists":{"blocklists":[{"isBlocked":true,"server":"AdGuard","serverIp":"176.103.130.130"},{"isBlocked":true,"server":"AdGuard Family","serverIp":"176.103.130.132"},{"isBlocked":true,"server":"CleanBrowsing Adult","serverIp":"185.228.168.10"},{"isBlocked":true,"server":"CleanBrowsing Family","serverIp":"185.228.168.168"},{"isBlocked":true,"server":"CleanBrowsing Security","serverIp":"185.228.168.9"},{"isBlocked":true,"server":"CloudFlare","serverIp":"1.1.1.1"},{"isBlocked":true,"server":"CloudFlare Family","serverIp":"1.1.1.3"},{"isBlocked":true,"server":"Comodo Secure","serverIp":"8.26.56.26"},{"isBlocked":true,"server":"Google DNS","serverIp":"8.8.8.8"},{"isBlocked":true,"server":"Neustar Family","serverIp":"156.154.70.3"},{"isBlocked":true,"server":"Neustar Protection","serverIp":"156.154.70.2"},{"isBlocked":true,"server":"Norton Family","serverIp":"199.85.126.20"},{"isBlocked":true,"server":"OpenDNS","serverIp":"208.67.222.222"},{"isBlocked":true,"server":"OpenDNS Family","serverIp":"208.67.222.123"},{"isBlocked":true,"server":"Quad9","serverIp":"9.9.9.9"},{"isBlocked":true,"server":"Yandex Family","serverIp":"77.88.8.7"},{"isBlocked":true,"server":"Yandex Safe","serverIp":"77.88.8.88"}]},"dns":{"A":{"address":"86.99.205.246","family":4},"AAAA":[],"CNAME":[],"MX":[],"NS":[],"PTR":[],"SOA":[],"SRV":[],"TXT":[]},"ports":{"failedPorts":[20,21,22,23,25,53,67,68,69,80,110,119,123,143,156,161,162,179,194,389,443,587,993,995,3000,3306,3389,5060,5900,8000,8080,8888],"openPorts":[]},"trace_route":{"message":"Traceroute completed!","result":[{"172.17.0.1":[0.03]},{"192.168.1.1":[0.897]},{"100.64.3.3":[55.672]},{"45.38.16.2":[55.693]},{"85.12.50.82":[55.598]},{"128.241.9.66":[60.523]},{"129.250.2.124":[56.144]},{"129.250.2.73":[216.914]},{"129.250.3.115":[82.03]},{"89.221.40.148":[95.922]},{"93.186.129.165":[210.845]},{"93.186.129.53":[226.101]},{"81.10.87.179":[276.492]},{"194.170.186.145":[271.812]},false,false,false,false,false,false,false,false,false,false,false,false,false,false,false,false]}}}