["Multiple 404_HIT entries for non-existent paths","Exploit scans targeting wp-admin/maint/about.php and wp-admin/network/wp-config.php","Blocked on 17 DNS blocklists (AdGuard, AdGuard Family, CleanBrowsing Adult, etc.)"]
{"ai_analysis":{"classification":"scanner|bot","confidence":0.95,"indicators":["Multiple 404_HIT entries for non-existent paths","Exploit scans targeting wp-admin/maint/about.php and wp-admin/network/wp-config.php","Blocked on 17 DNS blocklists (AdGuard, AdGuard Family, CleanBrowsing Adult, etc.)"],"likely_automated":true,"pattern":"The IP is exhibiting a pattern of automated scanning and probing for vulnerabilities, consistent with known scanner or bot behavior.","recommendation":"Ban permanently","summary":"The IP address 20.48.232.178 is engaged in aggressive scanning and probing activities, including multiple exploit attempts on common web paths. This behavior aligns with known scanner or bot patterns.","threat_level":"critical"},"error":null,"geo":{"as":"AS8075 Microsoft Corporation","city":"Toronto","country":"Canada","countryCode":"CA","hosting":true,"isp":"Microsoft Corporation","lat":43.653,"lon":-79.383,"mobile":false,"org":"Microsoft Azure Cloud (canadacentral)","proxy":false,"regionName":"Ontario","status":"success","timezone":"America/Toronto"},"ip":"20.48.232.178","log_count":31,"webcheck":{"block_lists":{"blocklists":[{"isBlocked":true,"server":"AdGuard","serverIp":"176.103.130.130"},{"isBlocked":true,"server":"AdGuard Family","serverIp":"176.103.130.132"},{"isBlocked":true,"server":"CleanBrowsing Adult","serverIp":"185.228.168.10"},{"isBlocked":true,"server":"CleanBrowsing Family","serverIp":"185.228.168.168"},{"isBlocked":true,"server":"CleanBrowsing Security","serverIp":"185.228.168.9"},{"isBlocked":true,"server":"CloudFlare","serverIp":"1.1.1.1"},{"isBlocked":true,"server":"CloudFlare Family","serverIp":"1.1.1.3"},{"isBlocked":true,"server":"Comodo Secure","serverIp":"8.26.56.26"},{"isBlocked":true,"server":"Google DNS","serverIp":"8.8.8.8"},{"isBlocked":true,"server":"Neustar Family","serverIp":"156.154.70.3"},{"isBlocked":true,"server":"Neustar Protection","serverIp":"156.154.70.2"},{"isBlocked":true,"server":"Norton Family","serverIp":"199.85.126.20"},{"isBlocked":true,"server":"OpenDNS","serverIp":"208.67.222.222"},{"isBlocked":true,"server":"OpenDNS Family","serverIp":"208.67.222.123"},{"isBlocked":true,"server":"Quad9","serverIp":"9.9.9.9"},{"isBlocked":true,"server":"Yandex Family","serverIp":"77.88.8.7"},{"isBlocked":true,"server":"Yandex Safe","serverIp":"77.88.8.88"}]},"dns":{"A":{"address":"20.48.232.178","family":4},"AAAA":[],"CNAME":[],"MX":[],"NS":[],"PTR":[],"SOA":[],"SRV":[],"TXT":[]},"ports":{"failedPorts":[20,21,22,23,25,53,67,68,69,80,110,119,123,143,156,161,162,179,194,389,443,587,993,995,3000,3306,3389,5060,5900,8000,8080,8888],"openPorts":[]},"trace_route":{"message":"Traceroute completed!","result":[{"172.17.0.1":[0.494]},{"192.168.1.1":[0.991]},{"100.64.3.3":[54.999]},{"45.38.16.2":[55.643]},{"85.12.50.80":[47.16]},{"128.241.9.66":[55.612]},{"129.250.2.124":[55.591]},{"129.250.4.189":[71.715]},{"129.250.6.39":[62.911]},{"129.250.9.22":[69.991]},{"62.115.143.236":[72.342]},false,{"62.115.199.221":[72.423]},{"51.10.15.238":[69.876]},{"104.44.33.239":[101.82]},false,{"104.44.51.190":[101.738]},false,{"51.10.4.154":[90.088]},{"51.10.22.28":[87.637]},{"104.44.51.85":[96.438]},{"51.10.14.236":[96.32]},false,false,false,false,false,false,false,false]}}}