🇩🇪
Viveronese
2026-08-25 05:03:41
(1 hour ago)
HTTP vulnerability scanning
Web App Attack
🇺🇸
island-freaks.com
2026-08-25 03:50:49
(2 hours ago)
Attack Type: WordPress Exploit Bot attempt on /api/v1/mcp | DNS host-212-36-35-110.ipv4.regusnet.com ...
show more
Attack Type: WordPress Exploit Bot attempt on /api/v1/mcp | DNS host-212-36-35-110.ipv4.regusnet.com | Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Port Scan
Hacking
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
london2038.com
2026-08-25 03:23:50
(2 hours ago)
Malformed or malicious web request
212.36.35.110 - - [25/Aug/2026:05:23:48 +0200] "POST /mcp HTTP/1. ...
show more
Malformed or malicious web request
212.36.35.110 - - [25/Aug/2026:05:23:48 +0200] "POST /mcp HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
2026-08-25 03:15:12
(2 hours ago)
Bot / seems abusive / Apache connections: 27
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
pscriptos
2026-08-25 02:43:55
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
Vegascosmetics
2026-08-25 02:14:56
(3 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 84>=65, Abuse 98, NonEU, first-seen)
show less
Hacking
Exploited Host
Web App Attack
🇳🇴
jad-abuse
2026-08-25 02:04:38
(4 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor( ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor(s); 49 hits.
show less
Port Scan
Bad Web Bot
🇳🇱
melroy89
2026-08-25 01:34:31
(4 hours ago)
212.36.35.110 - - [25/Aug/2026:03:34:01 +0200] "POST /v1/mcp HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Mac ...
show more
212.36.35.110 - - [25/Aug/2026:03:34:01 +0200] "POST /v1/mcp HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "melroy.org" 0.002
212.36.35.110 - - [25/Aug/2026:03:34:01 +0200] "POST /api/v1/mcp HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "melroy.org" 0.002
212.36.35.110 - - [25/Aug/2026:03:34:01 +0200] "POST /sse HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "melroy.org" 0.002
212.36.35.110 - - [25/Aug/2026:03:34:01 +0200] "POST /mcp HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "melroy.org" 0.001
212.36.35.110 - - [25/Aug/2026:03:34:17 +0200] "POST /mcp HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac
...
show less
Web App Attack
🇩🇪
Skyrider
2026-08-25 00:52:59
(5 hours ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇦🇺
aranguren.org
2026-08-25 00:45:22
(5 hours ago)
212.36.35.110 - - [25/Aug/2026:10:45:20 +1000] "POST /mcp-server HTTP/1.1" 406 - "-" "Mozilla/5.0 (M ...
show more
212.36.35.110 - - [25/Aug/2026:10:45:20 +1000] "POST /mcp-server HTTP/1.1" 406 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.36.35.110 - - [25/Aug/2026:10:45:20 +1000] "POST /sse HTTP/1.1" 406 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.36.35.110 - - [25/Aug/2026:10:45:21 +1000] "POST /functions/v1/mcp HTTP/1.1" 406 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.36.35.110 - - [25/Aug/2026:10:45:21 +1000] "POST /_mcp HTTP/1.1" 406 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.36.35.110 - - [25/Aug/2026:10:45:21 +1000] "POST /mcp/v1 HTTP/1.1" 406 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 S
...
show less
Bad Web Bot
🇳🇱
MyGlobalFlowers
2026-08-25 00:37:10
(5 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
kosada.com
2026-08-25 00:24:13
(5 hours ago)
Web vulnerability probing: /.well-known/mcp.json
Web App Attack
2026-08-25 00:18:17
(5 hours ago)
Banned by Fail2Ban on server
Web App Attack
2026-08-25 00:10:37
(5 hours ago)
vars[0]=md5&vars[1][]=Hello
Fraud Orders
Hacking
Brute-Force
Web App Attack
🇫🇷
conseilgouz
2026-08-24 23:41:41
(6 hours ago)
joe- 404 : Too many 404 errors
Brute-Force