๐ฉ๐ช
1gz
2025-09-28 03:19:31
(1 year ago)
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /auth/register
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.65 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2025-09-27 18:20:15
(1 year ago)
Multiple web server 400 error codes from same source ip
Web App Attack
๐ฉ๐ช
Skyrider
2025-09-22 02:37:43
(1 year ago)
103.253.27.92 - - [22/Sep/2025:04:37:40 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 ...
show more
103.253.27.92 - - [22/Sep/2025:04:37:40 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.61 Safari/537.36"
103.253.27.92 - - [22/Sep/2025:04:37:40 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.70 Safari/537.36"
103.253.27.92 - - [22/Sep/2025:04:37:41 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36"
103.253.27.92 - - [22/Sep/2025:04:37:42 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36"
103.253.27.92 - - [22/Sep/2025:04:37:43 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.102 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Study Bitcoin ๐ค
2025-09-18 03:12:31
(1 year ago)
Port probe to tcp/888 (cd database)
[srv130]
Port Scan
๐ฉ๐ช
1gz
2025-09-16 08:41:26
(1 year ago)
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /auth/login
UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.62 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
Skyrider
2025-09-14 21:42:10
(1 year ago)
103.253.27.92 - - [14/Sep/2025:23:41:57 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 ...
show more
103.253.27.92 - - [14/Sep/2025:23:41:57 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36"
103.253.27.92 - - [14/Sep/2025:23:41:58 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.87 Safari/537.36"
103.253.27.92 - - [14/Sep/2025:23:41:59 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36"
103.253.27.92 - - [14/Sep/2025:23:42:09 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36"
103.253.27.92 - - [14/Sep/2025:23:42:10 +0200] "GET /register.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.168 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
exxos
2025-09-09 01:03:01
(1 year ago)
Attacks with Bad user agents
Hacking
๐ฉ๐ช
1gz
2025-09-06 05:17:07
(1 year ago)
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /auth/register
UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2025-09-02 16:03:36
(1 year ago)
Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ...
show more
Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER
show less
Brute-Force
SSH
๐บ๐ธ
Rayulcifer
2025-04-23 10:20:13
(1 year ago)
103.253.27.92 - - [23/Apr/2025:05:20:06 -0500] "CONNECT evergem.com.au:443:443 HTTP/1.1" 400 492 "-" ...
show more
103.253.27.92 - - [23/Apr/2025:05:20:06 -0500] "CONNECT evergem.com.au:443:443 HTTP/1.1" 400 492 "-" "-"
103.253.27.92 - - [23/Apr/2025:05:20:12 -0500] "CONNECT evergem.com.au:443:443 HTTP/1.1" 400 492 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
๐บ๐ธ
Rayulcifer
2025-04-22 10:08:41
(1 year ago)
103.253.27.92 - - [22/Apr/2025:05:08:35 -0500] "CONNECT bizz777.com:443:443 HTTP/1.1" 400 492 "-" "- ...
show more
103.253.27.92 - - [22/Apr/2025:05:08:35 -0500] "CONNECT bizz777.com:443:443 HTTP/1.1" 400 492 "-" "-"
103.253.27.92 - - [22/Apr/2025:05:08:41 -0500] "CONNECT fai.uisu.ac.id:443:443 HTTP/1.1" 400 492 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
๐บ๐ธ
Rayulcifer
2025-04-21 10:08:32
(1 year ago)
103.253.27.92 - - [21/Apr/2025:05:08:31 -0500] "CONNECT 925worksuite.com:443:443 HTTP/1.1" 400 492 " ...
show more
103.253.27.92 - - [21/Apr/2025:05:08:31 -0500] "CONNECT 925worksuite.com:443:443 HTTP/1.1" 400 492 "-" "-"
103.253.27.92 - - [21/Apr/2025:05:08:31 -0500] "CONNECT 925worksuite.com:443:443 HTTP/1.1" 400 492 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
๐บ๐ธ
Rayulcifer
2025-04-20 10:08:19
(1 year ago)
103.253.27.92 - - [20/Apr/2025:05:08:09 -0500] "CONNECT www.smatemon.sch.id:443:443 HTTP/1.1" 400 49 ...
show more
103.253.27.92 - - [20/Apr/2025:05:08:09 -0500] "CONNECT www.smatemon.sch.id:443:443 HTTP/1.1" 400 492 "-" "-"
103.253.27.92 - - [20/Apr/2025:05:08:18 -0500] "CONNECT www.smatemon.sch.id:443:443 HTTP/1.1" 400 492 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH