[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 84.17.60.251 made 2 requests to GET ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 84.17.60.251 made 2 requests to GET / on api.majikah.solutions triggering rate-limit rules. Historical telemetry shows 1699 external reports and an Abuse Confidence Score of 100%, with the most recent report occurring minutes after the local activity. Likely motive: Automated scanning and scraping
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 45.138.12.180 generated 2 local hits ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 45.138.12.180 generated 2 local hits requesting GET / on api.majikah.solutions, triggering rate-limiting rules. External intelligence confirms extensive malicious activity: AbuseIPDB records 611 reports with a 100% confidence score, and CrowdSec flags the IP as malicious with high confidence for http:scan, http:bruteforce, http:exploit, and http:dos behaviors under MITRE techniques T1595, T1190, T1498, and T1110. Additionally, VirusTotal flags the IP as dangerous with multiple engine detections. Likely motive: Automated scanning and exploitation attempts against web applications
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 172.86.112.198 generated 2 local hit ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 172.86.112.198 generated 2 local hits executing POST requests on the endpoint / at api.majikah.solutions. CrowdSec and VirusTotal independently flag this IP with malicious behaviors including http:scan, http:exploit, and http:bruteforce across multiple security engines. These findings are further corroborated by an AbuseIPDB confidence score of 100% based on 241 external reports. Likely motive: Automated web application attack and scanning.
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP 151.115.63.219 generated a local ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP 151.115.63.219 generated a local hit via a Python/3.10 aiohttp/3.14.5 user-agent issuing a POST request to the root endpoint / on api.majikah.solutions, triggering a rate-limit rule. This behavior aligns with an active external reputation of 100% abuse confidence backed by 118 total reports, with the most recent external report occurring just hours prior on 2026-11-09T18:47:24.000Z. Likely motive: Automated web application scanning and scripted bot activity.
show less
[AI Threat Score: 65/100 via Gemini] [AbuseIPDB Score: 39] IP 104.28.212.147 triggered a rate-limit ...
show more[AI Threat Score: 65/100 via Gemini] [AbuseIPDB Score: 39] IP 104.28.212.147 triggered a rate-limit rule via a single GET request to / on api.majikah.solutions using a standard Safari user-agent. Despite the sparse local traffic, external CrowdSec telemetry and AbuseIPDB reports confirm an active malicious background, tagging the datacenter and proxy IP with scanning, brute-force, crawling, and web application exploitation behaviors across MITRE techniques. Likely motive: Automated reconnaissance and scanning
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 34.87.8.240 targeted the ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 34.87.8.240 targeted the endpoint GET /api/proc/self/environ on api.majikah.solutions, triggering critical process-file-probe and proc-environ rules. This activity aligns with CrowdSec CTI telemetry indicating HTTP exploit, scan, crawl, and brute force behaviors associated with MITRE techniques T1595 and T1190. Additionally, the IP has accumulated 26 external reports with a 100% Abuse Confidence Score. Likely motive: System reconnaissance and environment variable harvesting
show less
[AI Threat Score: 95/100 via Groq] [AbuseIPDB Score: 100] The local log shows a single GET request t ...
show more[AI Threat Score: 95/100 via Groq] [AbuseIPDB Score: 100] The local log shows a single GET request to the root path (/) of api.majikah.solutions, flagged by the rate‑limit rule. AbuseIPDB reports a 100% confidence score with 146 recent external reports, the latest two minutes after the local hit, indicating an active abusive source. Combined, this pattern matches a bad web bot conducting generic web‑app traffic. Likely motive: Automated bad web bot performing generic GET requests to web application endpoints.
show less
[AI Threat Score: 88/100 via Gemini] [AbuseIPDB Score: 87] IP 35.201.159.151 targeted api.majikah.so ...
show more[AI Threat Score: 88/100 via Gemini] [AbuseIPDB Score: 87] IP 35.201.159.151 targeted api.majikah.solutions with browser impersonation and path enumeration under reconnaissance tags. CrowdSec corroborates this activity with a malicious reputation, flagging HTTP scanning, crawling, exploits, and DoS behaviors under MITRE T1595, T1190, and T1498. AbuseIPDB records 15 external reports with an 87 percent confidence score. Likely motive: Automated vulnerability scanning and web application reconnaissance.
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP 193.47.62.168 executed 2 GET req ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP 193.47.62.168 executed 2 GET requests targeting the root endpoint on api.majikah.solutions, triggering rate-limit rules. This local activity is reinforced by an AbuseIPDB score of 100% with 1407 total reports, alongside extensive CrowdSec behaviors including http:scan, generic:fingerprint, and http:exploit, plus VirusTotal detections by 11 engines. This strong cross-vendor corroboration confirms malicious intent. Likely motive: Automated web application scanning and exploitation
show less
[AI Threat Score: 63/100 via Gemini] [AbuseIPDB Score: 63] The IP address 136.114.166.160 executed a ...
show more[AI Threat Score: 63/100 via Gemini] [AbuseIPDB Score: 63] The IP address 136.114.166.160 executed a single request to the root endpoint GET / on api.majikah.solutions utilizing a CMS-Checker user-agent string. This activity triggered local rate-limiting rules and aligns with 10 external abuse reports received up to 2026-11-08T19:13:49.000Z, resulting in an Abuse Confidence Score of 63%. Likely motive: Automated reconnaissance and scanning using a CMS-checking user-agent.
show less
[AI Threat Score: 14/100 via Gemini] [AbuseIPDB Score: 14] IP address 54.146.19.141 triggered a rate ...
show more[AI Threat Score: 14/100 via Gemini] [AbuseIPDB Score: 14] IP address 54.146.19.141 triggered a rate-limit rule from a single local hit requesting GET / on api.majikah.solutions using the Slackbot-LinkExpanding user-agent. AbuseIPDB shows an abuse confidence score of 14% with 2 external reports, while CrowdSec reports an unknown risk level with no flagged behaviors. Likely motive: Automated link unfurling or web scraping via a bot
show less
[AI Threat Score: 75/100 via Gemini] [AbuseIPDB Score: 41] IP 35.194.132.153 executed 8 rapid reques ...
show more[AI Threat Score: 75/100 via Gemini] [AbuseIPDB Score: 41] IP 35.194.132.153 executed 8 rapid requests against api.majikah.solutions, traversing common discovery paths such as /robots.txt, /sitemap.xml, and /sitemap_index.xml before probing specific targets including /x6ltipgzed3dsoazpgap, /graphql, /_debugbar/open, and /api/graphql. CrowdSec CTI corroborates this activity by flagging the IP as malicious with behaviors spanning HTTP scanning, crawling, brute forcing, and exploitation, supported by an AbuseIPDB confidence score of 41% from 7 external reports. Likely motive: Web application reconnaissance and exploitation probing
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP 104.248.148.169 generated 1 loca ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP 104.248.148.169 generated 1 local hit executing a GET request for /license.txt on api.majikah.solutions using the python-requests/2.27.1 user-agent, triggering rate-limiting. This aligns with historical AbuseIPDB telemetry showing 53 total external reports and a 100% abuse confidence score, with the most recent report occurring just minutes prior to the local traffic. Likely motive: Automated reconnaissance and vulnerability scanning.
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 185.218.86.7 generated a ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 185.218.86.7 generated a single local rate-limited hit to GET / on api.majikah.solutions using a standard browser user-agent. This activity is heavily corroborated by external intelligence: AbuseIPDB records 264 external reports with a 100% confidence score, CrowdSec classifies the IP as malicious with behaviors including http:scan, http:exploit, and http:dos, and VirusTotal flags it with 11 malicious engine detections. Likely motive: Automated web scanning and exploitation
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 193.122.153.190 targeted ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 193.122.153.190 targeted api.majikah.solutions with a GET request for /.git/config using a browser-impersonation user-agent. This local reconnaissance activity is corroborated by extensive global telemetry, including 237 historical reports on AbuseIPDB, a malicious reputation on CrowdSec featuring exploit and scan behaviors, and multiple engine detections on VirusTotal. Likely motive: Source code theft and repository reconnaissance
show less
[AI Threat Score: 84/100 via Gemini] [AbuseIPDB Score: 84] The IP 68.183.181.88 executed 4 requests ...
show more[AI Threat Score: 84/100 via Gemini] [AbuseIPDB Score: 84] The IP 68.183.181.88 executed 4 requests targeting web application paths on api.majikah.solutions, including //blog/robots.txt, //blog/, //wordpress/, and //wp/. This pattern demonstrates automated vulnerability scanning for common content management system directories. This activity aligns with 16 external reports and an AbuseIPDB confidence score of 84 percent. Likely motive: Automated web application vulnerability scanning and CMS discovery
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 185.218.86.26 generated 2 local hits ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 185.218.86.26 generated 2 local hits targeting GET / on api.majikah.solutions, triggering rate-limiting rules. This activity aligns with extensive external telemetry, including 939 reports on AbuseIPDB, a malicious CrowdSec reputation noting scanning, exploitation, and brute-force behaviors under MITRE techniques T1595, T1190, T1498, and T1110, and 12 malicious detections on VirusTotal. Likely motive: Automated scanning and web application exploitation
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 4.239.196.57 from Microsoft Corporat ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 4.239.196.57 from Microsoft Corporation generated a single local rate-limit hit via a GET request to / on api.majikah.solutions using a standard Chrome user-agent. This local traffic is backed by heavy external telemetry showing 30 total abuse reports, with the most recent report arriving at 2026-11-07T07:57:56.000Z, confirming an active and widespread malicious campaign. Likely motive: Automated web scraping or reconnaissance
show less
[AI Threat Score: 40/100 via Groq] [AbuseIPDB Score: 49] The IP made a single GET request to the roo ...
show more[AI Threat Score: 40/100 via Groq] [AbuseIPDB Score: 49] The IP made a single GET request to the root of api.majikah.solutions, flagged by our rate‑limit rule. AbuseIPDB shows a 49 % confidence score with 7 recent reports, the latest minutes after the local hit. CrowdSec reports no risk, so the evidence points to a low‑skill bad web bot performing generic web‑app probing. Likely motive: Automated web crawling or scanning for CMS vulnerabilities
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] This Google datacenter IP targeted api. ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] This Google datacenter IP targeted api.majikah.solutions with GET and POST requests to the root endpoint accompanied by rate-limit triggers. External telemetry shows 69 reports on AbuseIPDB and a malicious CrowdSec reputation featuring behaviors like http:scan, http:bruteforce, http:dos, http:exploit, and http:crawl alongside MITRE techniques T1190, T1498, T1595, and T1110. VirusTotal also detected malicious and suspicious activity. Likely motive: Automated scanning and web application exploitation
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 34.85.113.50 generated 9 local hits ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 34.85.113.50 generated 9 local hits spanning reconnaissance requests like /robots.txt and /sitemap.xml, custom debug paths, GraphQL endpoints, and a critical attempt at /api/fs/read which triggered the proc-environ rule. This traffic is corroborated by an AbuseIPDB confidence score of 100 percent with 26 external reports, as well as CrowdSec classifying the IP as malicious with behaviors including http:scan, http:crawl, and http:exploit. Likely motive: Reconnaissance and exploitation of sensitive application endpoints.
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 169.40.142.177 generated 1 local hit ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 169.40.142.177 generated 1 local hit requesting GET / on api.majikah.solutions, triggering a rate-limit rule using a standard Chrome User-Agent. This activity correlates with 1551 external abuse reports on AbuseIPDB, with the most recent external report occurring on 2026-11-06T14:41:17.000Z. Likely motive: Automated web scraping and traffic flooding by a malicious automated script.
show less
[AI Threat Score: 15/100 via Gemini] [AbuseIPDB Score: 15] IP 171.96.86.103 triggered a rate-limit r ...
show more[AI Threat Score: 15/100 via Gemini] [AbuseIPDB Score: 15] IP 171.96.86.103 triggered a rate-limit rule with a single local hit requesting GET / on api.majikah.solutions using a standard browser user-agent. AbuseIPDB shows an abuse confidence score of 15% with 2 total external reports, while CrowdSec reports an unknown reputation and no malicious behaviors. Likely motive: Automated web crawling or background scanning activity
show less
[AI Threat Score: 64/100 via Gemini] [AbuseIPDB Score: 64] The IP 35.194.24.216 submitted a single r ...
show more[AI Threat Score: 64/100 via Gemini] [AbuseIPDB Score: 64] The IP 35.194.24.216 submitted a single request to GET / on api.majikah.solutions using the CMS-Checker/1.0 user-agent, triggering a rate-limit rule. External telemetry confirms 10 recent reports culminating shortly after this local hit with an Abuse Confidence Score of 64%. Likely motive: Automated reconnaissance and content management system enumeration.
show less
[AI Threat Score: 80/100 via Groq] [AbuseIPDB Score: 100] The local log shows a single GET request f ...
show more[AI Threat Score: 80/100 via Groq] [AbuseIPDB Score: 100] The local log shows a single GET request from 66.63.168.104 to /.well-known/security.txt on api.majikah.solutions at 2026-11-04T08:41:18Z, flagged by a rate‑limit rule. AbuseIPDB reports a 100 % confidence score with 48 external reports, the latest on 2026-11-06, indicating recent widespread activity from this IP. The pattern matches automated security‑txt discovery typical of bad web bots. Likely motive: Automated discovery of security.txt for reconnaissance
show less
Bad Web BotWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.