|
20.171.207.158
|
ip
|
2025-10-31 10:16:29
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
20.244.26.188
|
ip
|
2025-10-31 10:16:29
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
20.193.136.32
|
ip
|
2025-10-31 10:16:29
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
2001:4878:8216:510:dddd:b98a:3a76:296c
|
ip
|
2025-10-31 10:16:29
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
205.169.39.130
|
ip
|
2025-10-31 10:16:29
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
205.169.39.125
|
ip
|
2025-10-31 10:16:29
|
block
|
Maintaining block due to confirmed part of a malicious subnet, linked to malicious hostname and TLS fingerprint, and accessed obfuscated paths.
|
0.949999988079071
|
severity: Severity.critical
|
|
2001:bc8:1f90:4:7ec2:55ff:fe9e:8476
|
ip
|
2025-10-31 10:16:29
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
2001:bc8:1201:19:46a8:42ff:fe1b:ae29
|
ip
|
2025-10-31 10:16:29
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
UNKNOWN
|
tls
|
2025-10-31 10:16:29
|
block
|
Confirmed persistent malicious activity detected using an unknown TLS fingerprint. Maintain block.
|
1.0
|
severity: Severity.critical
|
|
34.1.23.207
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed burst of activity detected by WAF, suggesting automated malicious behavior.
|
0.8999999761581421
|
severity: Severity.critical
|
|
34.1.17.182
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed burst of activity detected by WAF, suggesting automated malicious behavior.
|
0.8999999761581421
|
severity: Severity.critical
|
|
3.92.177.104
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
34.1.27.103
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed associated with a known malicious TLS fingerprint, indicating coordinated malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
34.1.21.203
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed burst of activity detected by WAF, suggesting automated malicious behavior.
|
0.8999999761581421
|
severity: Severity.critical
|
|
2604:a880:400:d1:0:1:4cea:4001
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
2604:a880:0:202a::bd93:3000
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed multiple WAF alerts and deny rules triggered, including bot impersonation and burst activity, with 100% of requests flagged as threats.
|
1.0
|
severity: Severity.critical
|
|
34.1.26.204
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed active malicious scanning detected, triggering multiple WAF alerts.
|
0.8999999761581421
|
severity: Severity.medium
|
|
34.1.16.79
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed active malicious scanning detected, triggering multiple WAF alerts.
|
0.8500000238418579
|
severity: Severity.medium
|
|
51.38.105.105
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
48.210.236.214
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
45.153.163.23
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
34.116.246.85
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
34.116.172.61
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8500000238418579
|
severity: Severity.medium
|
|
66.249.77.104
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
66.249.70.200
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|
|
66.249.69.35
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
66.249.68.133
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.medium
|
|
66.249.66.40
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed consistent malicious probing observed, triggering WAF alerts.
|
0.800000011920929
|
severity: Severity.medium
|
|
62.60.130.211
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.9800000190734863
|
severity: Severity.critical
|
|
AS8075
|
asn
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected from this ASN.
|
1.0
|
severity: Severity.critical
|
|
AS211590
|
asn
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected from this ASN.
|
1.0
|
severity: Severity.critical
|
|
AS16276
|
asn
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected from this ASN.
|
1.0
|
severity: Severity.critical
|
|
AS132203
|
asn
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected from this ASN.
|
0.8999999761581421
|
severity: Severity.critical
|
|
85.204.70.106
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed extensive scanning and attack attempts against sensitive WordPress paths.
|
1.0
|
severity: Severity.critical
|
|
81.17.20.98
|
ip
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
3%7ea97fdb0b70d4a7b7
|
tls
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected using this TLS fingerprint.
|
0.9800000190734863
|
severity: Severity.critical
|
|
3%7e7bcf51bfc0d0b65f
|
tls
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected using this TLS fingerprint.
|
1.0
|
severity: Severity.critical
|
|
3%7e788289bd73e01aa4
|
tls
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected using this TLS fingerprint.
|
1.0
|
severity: Severity.critical
|
|
3%7e2faa3a9db1c111de
|
tls
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected using this TLS fingerprint.
|
1.0
|
severity: Severity.critical
|
|
3%7ee35ec11fcbea7346
|
tls
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected using this TLS fingerprint.
|
0.8999999761581421
|
severity: Severity.critical
|
|
3%7ede8d6a84fab8672b
|
tls
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed common malicious client fingerprint associated with suspicious access patterns and reconnaissance.
|
0.949999988079071
|
severity: Severity.critical
|
|
3%7ede29393936a8dc4153
|
tls
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected using this TLS fingerprint.
|
0.949999988079071
|
severity: Severity.critical
|
|
3%7ede293936a8dc4153
|
tls
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected using this TLS fingerprint.
|
0.949999988079071
|
severity: Severity.critical
|
|
3%7ebaae1457ad64ff16
|
tls
|
2025-10-31 10:12:02
|
block
|
Maintaining block due to confirmed persistent malicious activity detected using this TLS fingerprint.
|
0.8999999761581421
|
severity: Severity.critical
|
|
UNKNOWN
|
tls
|
2025-10-31 10:12:02
|
block
|
Confirmed persistent malicious activity detected using an unknown TLS fingerprint. Maintain block.
|
1.0
|
severity: Severity.critical
|
|
3%7efe38c35477967146
|
tls
|
2025-10-31 10:12:02
|
block
|
Confirmed persistent malicious activity detected using this TLS fingerprint. Maintain block.
|
0.9800000190734863
|
severity: Severity.critical
|
|
103.207.148.148
|
ip
|
2025-10-31 10:12:01
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.949999988079071
|
severity: Severity.critical
|
|
141.98.11.115
|
ip
|
2025-10-31 10:12:01
|
block
|
Maintaining block due to confirmed highly malicious automated activity and bot impersonation.
|
1.0
|
severity: Severity.critical
|
|
123.6.49.50
|
ip
|
2025-10-31 10:12:01
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
0.8999999761581421
|
severity: Severity.critical
|
|
101.55.81.36
|
ip
|
2025-10-31 10:12:01
|
block
|
Maintaining block due to confirmed persistent malicious activity.
|
1.0
|
severity: Severity.critical
|