[AI Threat Score: 78/100 via Gemini] [AbuseIPDB Score: 78] The IP 172.236.112.76 generated a single ...
show more[AI Threat Score: 78/100 via Gemini] [AbuseIPDB Score: 78] The IP 172.236.112.76 generated a single local hit accessing GET / on api.majikah.solutions using a standard Chrome user-agent, triggering a rate-limit rule. Historical AbuseIPDB telemetry shows a high abuse confidence score of 78% with 108 total external reports, the most recent occurring approximately one hour prior to the local activity. Likely motive: Automated web scraping or crawling by a misconfigured or aggressive bot.
show less
[AI Threat Score: 73/100 via Gemini] [AbuseIPDB Score: 73] The IP 34.169.173.186 generated 2 local h ...
show more[AI Threat Score: 73/100 via Gemini] [AbuseIPDB Score: 73] The IP 34.169.173.186 generated 2 local hits targeting GET / on api.majikah.solutions with a rate-limit trigger. External AbuseIPDB telemetry shows 12 reports with an abuse confidence score of 73%, and the most recent report occurred on 2026-10-16T10:20:29.000Z. Likely motive: Automated scraping or probing via web bot
show less
[AI Threat Score: 65/100 via Gemini] [AbuseIPDB Score: 14] IP 34.207.140.43 executed repeated reconn ...
show more[AI Threat Score: 65/100 via Gemini] [AbuseIPDB Score: 14] IP 34.207.140.43 executed repeated reconnaissance requests against majikah.solutions, accessing GET / three times and GET /privacy once using browser impersonation headers. CrowdSec CTI confirms malicious behaviors including http:scan, http:exploit, and http:crawl associated with MITRE technique T1595. Combined with 15 external AbuseIPDB reports, this activity demonstrates automated web scanning and application probing. Likely motive: Automated web application scanning and reconnaissance
show less
[AI Threat Score: 25/100 via Gemini] [AbuseIPDB Score: 24] IP 104.236.201.119 generated 2 local hits ...
show more[AI Threat Score: 25/100 via Gemini] [AbuseIPDB Score: 24] IP 104.236.201.119 generated 2 local hits against api.majikah.solutions requesting GET / and GET /favicon.ico, triggering rate-limiting rules. Historical telemetry shows 3 external reports on AbuseIPDB with a confidence score of 24%, while CrowdSec flags the IP with an http:scan behavior. Likely motive: Automated web scanning
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] This IP targeted the endpoint GET /.git ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] This IP targeted the endpoint GET /.git/config on api.majikah.solutions, triggering source-control and git-metadata detection rules. Historical AbuseIPDB telemetry confirms 65 total external reports with an abuse confidence score of 100%, and CrowdSec independently corroborates this malicious activity with a known reputation and HTTP scanning behavior. Likely motive: Source control enumeration
show less
[AI Threat Score: 83/100 via Gemini] [AbuseIPDB Score: 83] The IP address 2a01:4f8:c014:b22b::1 perf ...
show more[AI Threat Score: 83/100 via Gemini] [AbuseIPDB Score: 83] The IP address 2a01:4f8:c014:b22b::1 performed a GET request to the root endpoint / on api.majikah.solutions, triggering a rate-limit rule. Historical AbuseIPDB telemetry records 32 external reports with an abuse confidence score of 83%, confirming ongoing malicious behavior up to October 14, 2026. Likely motive: Automated web scraping or scraping abuse
show less
[AI Threat Score: 95/100 via Gemini] [AbuseIPDB Score: 100] The IP address 146.70.40.70 generated 2 ...
show more[AI Threat Score: 95/100 via Gemini] [AbuseIPDB Score: 100] The IP address 146.70.40.70 generated 2 local hits targeting GET / on api.majikah.solutions, triggering rate-limit rules. Historical telemetry shows 1,294 external reports with an Abuse Confidence Score of 100%, indicating widespread automated scanning. Likely motive: Automated web scraping and reconnaissance
show less
[AI Threat Score: 85/100 via Gemini] [AbuseIPDB Score: 100] The IP 66.132.195.97, associated with Ce ...
show more[AI Threat Score: 85/100 via Gemini] [AbuseIPDB Score: 100] The IP 66.132.195.97, associated with CensysInspect, generated 1 local hit requesting GET / on api.majikah.solutions using a known bot user-agent and triggering a rate-limit. Historical AbuseIPDB telemetry shows 2470 external reports with a 100% abuse confidence score, the most recent external report occurring just minutes after the local observation. Likely motive: Automated reconnaissance and scanning by an internet-wide survey bot.
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 85.217.149.15 executed a ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 85.217.149.15 executed a request to the root endpoint of api.majikah.solutions using the custom User-Agent 'ModatScanner/1.2 (+https://modat.io/)', triggering a local rate-limit rule. This behavior aligns with massive historical abuse, evidenced by 2399 external reports on AbuseIPDB and an Abuse Confidence Score of 100%, with the most recent external report occurring just minutes prior. Likely motive: Automated web crawling and data scraping
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 205.185.127.246 generated 4 local re ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 205.185.127.246 generated 4 local requests on api.majikah.solutions, including probes for CMS-specific paths such as /plugins/editors/jce/jce.xml and /administrator/components/com_jce/ which triggered an admin-probe rule. This activity is corroborated by 250 external AbuseIPDB reports and CrowdSec classification indicating malicious behaviors including web scanning and exploitation attempts. Likely motive: CMS vulnerability scanning and exploitation
show less
[AI Threat Score: 90/100 via Gemini] [AbuseIPDB Score: 90] The IP 170.64.185.221 made a single reque ...
show more[AI Threat Score: 90/100 via Gemini] [AbuseIPDB Score: 90] The IP 170.64.185.221 made a single request to the endpoint GET /blog using a browser impersonation user-agent. This activity triggered local rule classifications for malicious-request, repeated-reconnaissance, and browser-minimal headers. Combined with an AbuseIPDB reputation showing an 90 percent confidence score and 16 external reports, the traffic demonstrates automated probing behavior. Likely motive: Automated web reconnaissance and bot probing
show less
[AI Threat Score: 95/100 via Gemini] [AbuseIPDB Score: 100] IP 170.64.160.127 generated 2 local hits ...
show more[AI Threat Score: 95/100 via Gemini] [AbuseIPDB Score: 100] IP 170.64.160.127 generated 2 local hits targeting GET / and GET /blog on api.majikah.solutions, triggering rate limits. CrowdSec CTI flags the IP with http:scan and http:exploit behaviors mapped to MITRE T1595 and T1190. Combined with a 100% AbuseIPDB confidence score and 24 external reports, this demonstrates active web scanning and application attack behavior. Likely motive: Automated vulnerability scanning and web application probing
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 146.70.194.222 generated ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 146.70.194.222 generated 2 local hits targeting GET / on api.majikah.solutions using a standard Chrome user-agent, triggering rate-limit rules. Historical telemetry shows a 100% Abuse Confidence Score with 1499 external reports, most recently active on 2026-10-14T15:43:59.000Z. Likely motive: Automated web scraping or crawling
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 104.30.167.164 executed 3 rapid requ ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 104.30.167.164 executed 3 rapid requests across multiple subdomains using a Cloudflare security-center user-agent header impersonation. Requests targeted GET /identity, GET /id, and HEAD / across signature.majikah.solutions, id.majikah.solutions, and slink.majikah.solutions, triggering rules for repeated and aggressive reconnaissance. AbuseIPDB records confirm 898 external reports with a 100% confidence score, culminating in recent malicious activity. Likely motive: Automated reconnaissance and web application probing.
show less
[AI Threat Score: 75/100 via Groq] [AbuseIPDB Score: 100] The local log shows a single GET / request ...
show more[AI Threat Score: 75/100 via Groq] [AbuseIPDB Score: 100] The local log shows a single GET / request to api.majikah.solutions flagged with a rate‑limit tag, indicating a high‑frequency automated client. AbuseIPDB reports a 100% confidence score with 33 recent external reports, confirming the IP is a known bad web bot. Likely motive: Automated web bot generating rapid GET requests that trigger rate‑limit defenses.
show less
[AI Threat Score: 50/100 via Groq] [AbuseIPDB Score: 66] The IP made a single GET request to the roo ...
show more[AI Threat Score: 50/100 via Groq] [AbuseIPDB Score: 66] The IP made a single GET request to the root (/) of api.majikah.solutions, flagged by a rate‑limit rule. The user‑agent identifies as NetcraftSurveyAgent, a known automated crawler. Combined with a 66 % AbuseIPDB confidence score and 16 recent external reports, the pattern reflects a low‑volume bad web bot activity. Likely motive: Automated web crawling causing rate‑limit violations
show less
[AI Threat Score: 75/100 via Groq] [AbuseIPDB Score: 100] The IP made two rapid GET requests to '/' ...
show more[AI Threat Score: 75/100 via Groq] [AbuseIPDB Score: 100] The IP made two rapid GET requests to '/' and '/favicon.ico' on api.majikah.solutions within 11 seconds, triggering the rate-limit rule. Both requests used a standard browser UA, indicating automated probing rather than targeted exploitation. Combined with a 100% AbuseIPDB confidence score and 251 recent external reports, the pattern matches a bad web bot. Likely motive: Automated web crawling/bot activity targeting the site
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 188.166.250.153 targeted api.majikah ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 188.166.250.153 targeted api.majikah.solutions via GET /license.txt using a python-requests user-agent, triggering a rate-limit rule on a single local hit. This activity aligns with high-volume external telemetry showing 25 total reports, with the most recent external report occurring just minutes prior at 2026-10-13T10:46:35.000Z. Likely motive: Automated reconnaissance
show less
[AI Threat Score: 65/100 via Gemini] [AbuseIPDB Score: 60] The IP 58.251.94.154 generated 4 local re ...
show more[AI Threat Score: 65/100 via Gemini] [AbuseIPDB Score: 60] The IP 58.251.94.154 generated 4 local requests targeting GET / on majikah.solutions using browser impersonation headers. This activity was tagged with repeated reconnaissance and malicious request behaviors, aligning with 67 external AbuseIPDB reports and an abuse confidence score of 60%. Likely motive: Automated web scraping and malicious bot reconnaissance.
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 159.223.236.5 performed requests aga ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 159.223.236.5 performed requests against majikah.solutions, targeting GET /new and GET /_ignition/execute-solution, with browser impersonation headers and repeated reconnaissance tags. AbuseIPDB records 74 external reports with a 100% abuse confidence score, culminating in activity concurrent with local traffic. Likely motive: Framework vulnerability exploitation and web application attack
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP address 168.144.161.58 executed a GE ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP address 168.144.161.58 executed a GET request to /blog on slink.majikah.solutions while utilizing browser impersonation headers. This activity corresponds with 55 recent external abuse reports and a 100% AbuseIPDB confidence score, confirming active involvement in automated malicious campaigns. Likely motive: Automated reconnaissance and web scraping
show less
[AI Threat Score: 75/100 via Gemini] [AbuseIPDB Score: 60] IP 34.3.108.199 generated 2 local hits ag ...
show more[AI Threat Score: 75/100 via Gemini] [AbuseIPDB Score: 60] IP 34.3.108.199 generated 2 local hits against api.majikah.solutions using GET and POST requests to the root endpoint '/', triggering rate-limiting rules. External threat intelligence from CrowdSec flags this IP as malicious with high confidence and behaviors involving http:scan and http:exploit under MITRE techniques T1595 and T1190. Combined with 12 recent external reports on AbuseIPDB and a 60 percent confidence score, the activity indicates coordinated web scanning and application attack attempts. Likely motive: Automated vulnerability scanning and web application exploitation
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 170.64.205.245 generated ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 170.64.205.245 generated local hits targeting GET /blog and GET /identity/_ignition/execute-solution using browser impersonation headers. This behavior aligns with automated exploitation of Laravel Ignition vulnerabilities combined with external abuse tracking reporting 57 recent hostile reports and a 100% confidence score. Likely motive: Web application vulnerability exploitation and reconnaissance
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP address 34.101.220.1 generated 41 lo ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP address 34.101.220.1 generated 41 local hits with 247 historical AbuseIPDB reports and an absolute 100% confidence score. The traffic employs browser impersonation headers to perform aggressive reconnaissance and path enumeration, explicitly targeting sensitive configuration endpoints including multiple requests to /actuator/env and /actuator/configprops on majikah.solutions. Likely motive: Web application attack and automated reconnaissance targeting exposed actuator endpoints.
show less
[AI Threat Score: 96/100 via Gemini] [AbuseIPDB Score: 96] The IP address 2602:80d:1008::89 generate ...
show more[AI Threat Score: 96/100 via Gemini] [AbuseIPDB Score: 96] The IP address 2602:80d:1008::89 generated a local hit requesting GET / on api.majikah.solutions using the CensysInspect/1.1 user-agent, triggering rate-limit controls. Historical AbuseIPDB telemetry confirms 135 external reports with the last report occurring on 2026-10-12, yielding a high abuse confidence score of 96%. Likely motive: Automated security scanning and asset discovery
show less
Bad Web BotWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.