Table: Security_events
Displaying rows 97551 - 97600 of 120479 (Page 1952 / 2410)
| Entity | Type | Event time | Action taken | Ai reason | Ai confidence score | Ai details | Event id |
|---|---|---|---|---|---|---|---|
| 195.178.110.161 | ip | 2025-07-22 12:05:25 | block | Critical malicious activity; scanning for sensitive JS config, JSON creds, env vars; browser impersonation. | 0.8999999761581421 | severity: Severity.critical | 49c8dec7-6664-4f18-b01a-7904d19f70b2 |
| 194.50.16.252 | ip | 2025-07-22 12:05:25 | block | Critical malicious activity; targeting Spring Boot Actuator with command injection attempts. | 1.0 | severity: Severity.critical | 16a8ae64-3222-478b-9719-e320c6c8a5b3 |
| 2001:4878:8216:510:dddd:b98a:3a76:296c | ip | 2025-07-22 12:05:25 | block | Critical malicious activity; accessed obfuscated path linked to prior critical activity. | 0.949999988079071 | severity: Severity.critical | 60f43be9-abe5-4216-a0b3-a7311c647cf4 |
| 20.171.207.158 | ip | 2025-07-22 12:05:25 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | 1c2c1595-417d-40b6-9188-4305b36eb5cc |
| 205.169.39.130 | ip | 2025-07-22 12:05:25 | block | Critical malicious activity; triggered IP blocking due to burst activity. | 0.8999999761581421 | severity: Severity.critical | df32c61e-306c-4939-826a-710a33e31741 |
| 2001:bc8:1f90:4:7ec2:55ff:fe9e:8476 | ip | 2025-07-22 12:05:25 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | d35e384d-42ce-48c7-8caa-d9d0cf112021 |
| 2001:bc8:1201:19:46a8:42ff:fe1b:ae29 | ip | 2025-07-22 12:05:25 | block | Persistent medium malicious activity; all requests flagged by WAF. | 0.8500000238418579 | severity: Severity.medium | b6488a98-144e-4dfa-a155-36856e4fdd1c |
| 216.126.227.20 | ip | 2025-07-22 12:05:25 | block | Critical malicious activity; targeted WordPress paths (wlwmanifest.xml, xmlrpc.php); browser impersonation. | 1.0 | severity: Severity.critical | 433faa72-5866-40c3-a58d-c19bff0df71e |
| 205.169.39.4 | ip | 2025-07-22 12:05:25 | block | Critical malicious activity; high flagged requests, triggered IP blocking by burst. | 0.8999999761581421 | severity: Severity.critical | 0bb1af77-2fd2-4c31-81be-5732b5d60490 |
| 3.92.177.104 | ip | 2025-07-22 12:05:25 | block | Critical malicious activity; targeting WordPress wlwmanifest.xml and xmlrpc.php; WAF IPBLOCK. | 1.0 | severity: Severity.critical | d4aab453-2169-49bc-afb1-bb8770ee9f87 |
| 2604:a880:400:d1:0:1:4cea:4001 | ip | 2025-07-22 12:05:25 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | b06d4cb4-6686-447b-bf6f-b8001fa68259 |
| 51.38.105.105 | ip | 2025-07-22 12:05:25 | block | Critical malicious activity; extensive scanning for sensitive files/PHP info; browser impersonation. | 0.8999999761581421 | severity: Severity.critical | d64a73b9-a0f6-43cc-a234-0c9c1782b81b |
| 34.116.246.85 | ip | 2025-07-22 12:05:25 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | e07559d4-0f1f-4c75-88cd-33acf6aa806a |
| 34.116.172.61 | ip | 2025-07-22 12:05:25 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | 212a3292-c9c1-4c09-8da4-7c0c143db7ca |
| 66.249.77.104 | ip | 2025-07-22 12:05:25 | block | Critical malicious activity; all requests flagged by WAF and security alerts. | 0.949999988079071 | severity: Severity.critical | c8817ce1-3d7d-47bd-8541-2807359492ef |
| 66.249.68.133 | ip | 2025-07-22 12:05:25 | block | Persistent medium malicious scanning; all requests flagged by WAF (100% threat detection). | 0.8999999761581421 | severity: Severity.medium | 90d07455-0a50-4cce-b34d-0ed986ff3884 |
| AS211590 | asn | 2025-07-22 12:05:25 | block | Critical malicious activity; 100% threat detection targeting sensitive files/creds/LFI. | 1.0 | severity: Severity.critical | 81a55d44-0bc5-4b2e-8a9d-f764d9594aa0 |
| AS16276 | asn | 2025-07-22 12:05:25 | block | Critical malicious activity; aggregated traffic with high threat detection, diverse malicious activities. | 1.0 | severity: Severity.critical | a2e198ac-c084-4fdb-9720-83f90f09f3ba |
| AS132203 | asn | 2025-07-22 12:05:25 | block | Critical malicious activity; high volume 100% flagged requests targeting WordPress; obfuscated paths. | 0.8999999761581421 | severity: Severity.critical | 724c3595-8beb-4867-816f-5731ef297051 |
| 3%7e7bcf51bfc0d0b65f | tls | 2025-07-22 12:05:25 | block | Critical malicious activity; extensive reconnaissance for sensitive app configs/creds; LFI attempts. | 1.0 | severity: Severity.critical | cfab31c7-a895-4573-8253-ba83cc1fb63e |
| 3%7e2faa3a9db1c111de | tls | 2025-07-22 12:05:25 | block | Critical malicious activity; high volume 100% flagged requests targeting WordPress/sensitive configs/obfuscated paths. | 1.0 | severity: Severity.critical | 02811e97-306c-47f6-9c67-7d0fb7175daa |
| 3%7ede29393936a8dc4153 | tls | 2025-07-22 12:05:25 | block | Critical malicious activity; all requests flagged by WAF; targeting WordPress endpoints; obfuscated paths; browser impersonation. | 0.949999988079071 | severity: Severity.critical | 482f0287-10fa-4e7d-ac5c-b88683fdd082 |
| 3%7ede293936a8dc4153 | tls | 2025-07-22 12:05:25 | block | Critical malicious activity; all requests flagged by WAF; targeting WordPress endpoints; obfuscated paths; browser impersonation. | 0.949999988079071 | severity: Severity.critical | b937ca22-020c-4e3b-9f6c-d230f1e33a7d |
| 3%7ebaae1457ad64ff16 | tls | 2025-07-22 12:05:25 | block | Critical malicious activity; all requests flagged by WAF; obfuscated paths; reconnaissance. | 0.8999999761581421 | severity: Severity.critical | 5208431c-4c42-4893-8582-470efc013027 |
| 3%7ea97fdb0b70d4a7b7 | tls | 2025-07-22 12:05:25 | block | Critical malicious activity; 100% flagged; aggressive scanning for sensitive files/creds/phpinfo; browser impersonation. | 0.9800000190734863 | severity: Severity.critical | 30cbbee2-ff26-4a41-a622-37a13f5dad86 |
| UNKNOWN | tls | 2025-07-22 12:05:25 | block | Critical malicious activity; comprehensive/aggressive attacks: sensitive file probing, WordPress exploits, web shell probing, LFI. | 1.0 | severity: Severity.critical | 0f902fc6-e380-44b4-9fbf-287692bcc223 |
| 3%7ee35ec11fcbea7346 | tls | 2025-07-22 12:05:25 | block | Critical malicious activity; very high flagged requests, obfuscated paths; triggered IP blocking by burst. | 0.8999999761581421 | severity: Severity.critical | 5e249e67-e5d6-4318-8a34-bce33dce43ed |
| 195.178.110.161 | ip | 2025-07-22 11:55:21 | block | Critical malicious activity; scanning for sensitive JS config, JSON creds, env vars; browser impersonation. | 0.8999999761581421 | severity: Severity.critical | 82d79786-c208-4cdc-9815-0b351c6f623d |
| 194.50.16.252 | ip | 2025-07-22 11:55:21 | block | Critical malicious activity; targeting Spring Boot Actuator with command injection attempts. | 1.0 | severity: Severity.critical | 4d9ce37b-70a8-4623-a0c5-47ad2da5d077 |
| 2001:4878:8216:510:dddd:b98a:3a76:296c | ip | 2025-07-22 11:55:21 | block | Critical malicious activity; accessed obfuscated path linked to prior critical activity. | 0.949999988079071 | severity: Severity.critical | 15e42bf8-6c3a-484e-be52-3e3a0fe04920 |
| 20.171.207.158 | ip | 2025-07-22 11:55:21 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | e2696631-1d21-465e-95d7-9d3f0eb4e2fb |
| 205.169.39.130 | ip | 2025-07-22 11:55:21 | block | Critical malicious activity; triggered IP blocking due to burst activity. | 0.8999999761581421 | severity: Severity.critical | 543b1eb2-4893-4357-bd3f-a88ba03f5866 |
| 2001:bc8:1f90:4:7ec2:55ff:fe9e:8476 | ip | 2025-07-22 11:55:21 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | 6605938f-9ad0-46c6-9e52-a3221d480e80 |
| 2001:bc8:1201:19:46a8:42ff:fe1b:ae29 | ip | 2025-07-22 11:55:21 | block | Persistent medium malicious activity; all requests flagged by WAF. | 0.8500000238418579 | severity: Severity.medium | df48a372-c317-43d2-bdf6-6e679eb871e9 |
| 216.126.227.20 | ip | 2025-07-22 11:55:21 | block | Critical malicious activity; targeted WordPress paths (wlwmanifest.xml, xmlrpc.php); browser impersonation. | 1.0 | severity: Severity.critical | 962072e8-1145-4c58-9d21-c2d864b6a1ac |
| 205.169.39.4 | ip | 2025-07-22 11:55:21 | block | Critical malicious activity; high flagged requests, triggered IP blocking by burst. | 0.8999999761581421 | severity: Severity.critical | 544c0fc2-b915-4e58-8872-c2d060910c76 |
| 3.92.177.104 | ip | 2025-07-22 11:55:21 | block | Critical malicious activity; targeting WordPress wlwmanifest.xml and xmlrpc.php; WAF IPBLOCK. | 1.0 | severity: Severity.critical | 2ec1eac5-c965-48e8-abf3-160a3c252638 |
| 2604:a880:400:d1:0:1:4cea:4001 | ip | 2025-07-22 11:55:21 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | 60a90f9d-9a2d-4f59-a8db-13be8af7313f |
| 51.38.105.105 | ip | 2025-07-22 11:55:21 | block | Critical malicious activity; extensive scanning for sensitive files/PHP info; browser impersonation. | 0.8999999761581421 | severity: Severity.critical | b5d44854-b77c-4c77-b87e-5d4e77e71737 |
| 34.116.246.85 | ip | 2025-07-22 11:55:21 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | 4baf7fd6-cdc4-499a-9ddb-eadf1afa882f |
| 34.116.172.61 | ip | 2025-07-22 11:55:21 | block | Persistent medium malicious activity; all requests flagged by WAF; obfuscated paths. | 0.8500000238418579 | severity: Severity.medium | c4a636f9-d0cd-4aab-b7ac-ebe321c54578 |
| 66.249.77.104 | ip | 2025-07-22 11:55:21 | block | Critical malicious activity; all requests flagged by WAF and security alerts. | 0.949999988079071 | severity: Severity.critical | 402be04a-65b5-48b7-9226-31aa11d7a3e9 |
| 66.249.68.133 | ip | 2025-07-22 11:55:21 | block | Persistent medium malicious scanning; all requests flagged by WAF (100% threat detection). | 0.8999999761581421 | severity: Severity.medium | c1ddee2a-d705-43ac-a51b-b0c41491513c |
| AS211590 | asn | 2025-07-22 11:55:21 | block | Critical malicious activity; 100% threat detection targeting sensitive files/creds/LFI. | 1.0 | severity: Severity.critical | 5da137a5-8bef-420f-a944-92fe3710d50d |
| AS16276 | asn | 2025-07-22 11:55:21 | block | Critical malicious activity; aggregated traffic with high threat detection, diverse malicious activities. | 1.0 | severity: Severity.critical | 6aefa68e-d274-4334-bf4b-c47ae2f0e20b |
| AS132203 | asn | 2025-07-22 11:55:21 | block | Critical malicious activity; high volume 100% flagged requests targeting WordPress; obfuscated paths. | 0.8999999761581421 | severity: Severity.critical | cec1578e-8197-481e-8b6a-b96bb58c14b2 |
| 3%7e7bcf51bfc0d0b65f | tls | 2025-07-22 11:55:21 | block | Critical malicious activity; extensive reconnaissance for sensitive app configs/creds; LFI attempts. | 1.0 | severity: Severity.critical | 29f25a82-c633-43b6-b6bb-837c9e0ab57c |
| 3%7e2faa3a9db1c111de | tls | 2025-07-22 11:55:21 | block | Critical malicious activity; high volume 100% flagged requests targeting WordPress/sensitive configs/obfuscated paths. | 1.0 | severity: Severity.critical | 0a0ce138-3d03-457b-861d-1fc26edabeda |
| 3%7ede29393936a8dc4153 | tls | 2025-07-22 11:55:21 | block | Critical malicious activity; all requests flagged by WAF; targeting WordPress endpoints; obfuscated paths; browser impersonation. | 0.949999988079071 | severity: Severity.critical | 9906f303-3572-4afe-929c-2a8bbe00ea6c |
| 3%7ede293936a8dc4153 | tls | 2025-07-22 11:55:21 | block | Critical malicious activity; all requests flagged by WAF; targeting WordPress endpoints; obfuscated paths; browser impersonation. | 0.949999988079071 | severity: Severity.critical | 2e698b3d-f2cf-4946-9f9e-ef62afcd1095 |