|
3%7efe38c35477967146
|
tls
|
2025-10-30 22:16:15
|
block
|
Maintaining block: Confirmed persistent malicious activity detected using this TLS fingerprint.
|
0.9800000190734863
|
severity: Severity.critical
|
|
3%7ee35ec11fcbea7346
|
tls
|
2025-10-30 22:16:15
|
block
|
Maintaining block: Confirmed persistent malicious activity detected using this TLS fingerprint.
|
0.8999999761581421
|
severity: Severity.critical
|
|
103.207.148.148
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
101.55.81.36
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
141.98.11.115
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed highly malicious automated activity and bot impersonation.
|
1.0
|
severity: Severity.critical
|
|
123.6.49.50
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
172.192.3.69
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed suspicious PHP file probing, WAF deny rule triggered, and associated ASN is blocked.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.106
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
172.190.142.176
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
178.33.134.25
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
157.180.49.118
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
185.177.72.104
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.144
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.12
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.11
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.107
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.3
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.205
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.204
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.2
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
185.177.72.16
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
196.251.66.28
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
195.178.110.75
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
194.50.16.252
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
195.178.110.201
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed severe reconnaissance and potential exploit attempts (LFI anomaly, sensitive file access).
|
1.0
|
severity: Severity.critical
|
|
196.251.84.111
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
195.178.110.161
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
20.171.207.158
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
196.251.86.207
|
ip
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.9800000190734863
|
severity: Severity.critical
|
|
UNKNOWN
|
tls
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity detected using an unknown TLS fingerprint.
|
1.0
|
severity: Severity.critical
|
|
3%7efe38c35477967146
|
tls
|
2025-10-30 22:16:14
|
block
|
Maintaining block: Confirmed persistent malicious activity detected using this TLS fingerprint.
|
0.9800000190734863
|
severity: Severity.critical
|
|
34.1.27.103
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed associated with a known malicious TLS fingerprint, indicating coordinated malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
34.1.26.204
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed active malicious scanning detected, triggering multiple WAF alerts.
|
0.8999999761581421
|
severity: Severity.medium
|
|
34.1.23.207
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed burst of activity detected by WAF, suggesting automated malicious behavior.
|
0.8999999761581421
|
severity: Severity.critical
|
|
34.1.21.203
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed burst of activity detected by WAF, suggesting automated malicious behavior.
|
0.8999999761581421
|
severity: Severity.critical
|
|
48.210.236.214
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
45.153.163.23
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
34.116.246.85
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
34.116.172.61
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
66.249.66.40
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed consistent malicious activity observed, triggering WAF alerts.
|
0.800000011920929
|
severity: Severity.medium
|
|
51.38.105.105
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
66.249.68.133
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.medium
|
|
66.249.69.35
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
66.249.70.200
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
62.60.130.211
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.9800000190734863
|
severity: Severity.critical
|
|
AS16276
|
asn
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity detected from this ASN.
|
1.0
|
severity: Severity.critical
|
|
AS132203
|
asn
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity detected from this ASN.
|
0.8999999761581421
|
severity: Severity.critical
|
|
85.204.70.106
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed extensive scanning and attack attempts against sensitive WordPress paths.
|
1.0
|
severity: Severity.critical
|
|
81.17.20.98
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
66.249.77.104
|
ip
|
2025-10-30 22:01:15
|
block
|
Maintaining block: Confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|