Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Used an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-10 04:41 UTC, API call ListPolicies, client Boto3/1.42.49 md/Botocore#1.42.49 ua/2.1 os/windows#11 md/arch#amd64 lang/python#3.14.3 md/pyimpl#CPython m ...
show moreUsed an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-10 04:41 UTC, API call ListPolicies, client Boto3/1.42.49 md/Botocore#1.42.49 ua/2.1 os/windows#11 md/arch#amd64 lang/python#3.14.3 md/pyimpl#CPython m/Z,b,e,D cfg/
show less
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /7-velo-electrique-ville | query: q=Capacit%C3%A9+batterie-250+Wh-500+Wh ...
show moreL7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /7-velo-electrique-ville | query: q=Capacit%C3%A9+batterie-250+Wh-500+Wh-600+Wh%2FDisponibilit%C3%A9-En+stock
show less
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/cat_ids~155,661,141/tag_ids~310,337,654,551,223/request_format~json/ | UA: Mozilla/5.0 (Macintosh; I ...
show moreCrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/cat_ids~155,661,141/tag_ids~310,337,654,551,223/request_format~json/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
show less