Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 8 requests from 2026-11-08T17:55:41+00:00 to 2026-11-10T22:20:45+00:00, e.g. 'GET /en/esv,web/deut/5 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ...
show moreHTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 8 requests from 2026-11-08T17:55:41+00:00 to 2026-11-10T22:20:45+00:00, e.g. 'GET /en/esv,web/deut/5 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested).
show less
This address presented itself as a vulnerability or port scanner — its User-Agent names sqlmap, masscan, nmap, zmap, zgrab or nuclei, or a made-up bot pointing at example.com. No scan of the sites we host is authorised, so it was refused on its word; ...
show moreThis address presented itself as a vulnerability or port scanner — its User-Agent names sqlmap, masscan, nmap, zmap, zgrab or nuclei, or a made-up bot pointing at example.com. No scan of the sites we host is authorised, so it was refused on its word; the request itself carried no exploit. If this is a scan you ordered, please stop it or tell us. | ua: wp2shell_detector/6.0.0 (authorized-security-validation) | 2026-09-27 14:15 UTC
show less
UDP flood (DDoS) vs AS215599: 1669 pkts / 2.39 MB to UDP 80 across 211 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. ...
show moreUDP flood (DDoS) vs AS215599: 1669 pkts / 2.39 MB to UDP 80 across 211 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 1669 pkts / 2.39 MB to UDP 80 across 211 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. ...
show moreUDP flood (DDoS) vs AS215599: 1669 pkts / 2.39 MB to UDP 80 across 211 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
