🇨🇦
1gz
2026-11-12 03:39:02
UTC ·
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /kosove/raporti-mjekesor-per-sanduloviqin-bia-e-rrahu-keq-iu-thye-brinja-e-shtate/612072/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_ ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /kosove/raporti-mjekesor-per-sanduloviqin-bia-e-rrahu-keq-iu-thye-brinja-e-shtate/612072/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
stechusa
2026-11-10 13:21:33
UTC ·
(4 days ago)
[Askari] | country=SG | ASN=Alibaba (US) Technology Co., Ltd. | Behavior: Targeting specific pages, Inhuman browsing speed
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-11-10 13:21:32
UTC ·
(4 days ago)
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | AbuseIPDB=36% | form_key 1ueh3Mll... shared by 3 IPs: 47.82.15.106, 47.82.14.129, 47.79.11.47 | Average 0.25s between page loads (5 pages in 1.0s) | 403 on protected endpoint: /catalog/product_comp ...
show more
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | AbuseIPDB=36% | form_key 1ueh3Mll... shared by 3 IPs: 47.82.15.106, 47.82.14.129, 47.79.11.47 | Average 0.25s between page loads (5 pages in 1.0s) | 403 on protected endpoint: /catalog/product_compare/add/product/55289/uenc/aHR0cHM6Ly93d3cubGlnaHRpbmcybGln (method=GET, ModSec blocked)
show less
Bad Web Bot
DDoS Attack
🇩🇪
FeG Deutschland
2026-11-09 21:27:25
UTC ·
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇨🇦
1gz
2026-11-09 02:33:18
UTC ·
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /sport/si-eshte-te-jesh-trajner-i-cristiano-ronaldos-andrea-pirlo-tregon-pervojen-me-menaxhimin-e-cr7-ne-juventus/598692/
UA: Mozilla/5.0 ( ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /sport/si-eshte-te-jesh-trajner-i-cristiano-ronaldos-andrea-pirlo-tregon-pervojen-me-menaxhimin-e-cr7-ne-juventus/598692/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
aranguren.org
2026-11-06 01:56:00
UTC ·
(1 week ago)
47.79.11.47 - - [05/Nov/2026:07:30:02 +1100] "GET /squid-reports/2026Jun15-2026Jun20/2401_d002_3902_700_d92a_48dd_f4d9_95d3/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145. ...
show more
47.79.11.47 - - [05/Nov/2026:07:30:02 +1100] "GET /squid-reports/2026Jun15-2026Jun20/2401_d002_3902_700_d92a_48dd_f4d9_95d3/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
47.79.11.47 - - [05/Nov/2026:23:28:56 +1100] "GET /squid-reports/2026Apr27-2026Apr29/185_243_5_246/graph.html HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
47.79.11.47 - - [06/Nov/2026:12:56:00 +1100] "GET /squid-reports/2025Nov24-2025Nov27/59_82_83_57/d59_82_83_57.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇩🇪
FeG Deutschland
2026-11-02 01:24:29
UTC ·
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇫🇷
Entalpi.net
2026-11-01 20:03:50
UTC ·
(1 week ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇨🇦
soundboxxx.com
2026-10-29 22:42:50
UTC ·
(2 weeks ago)
47.79.11.47 X 1
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-24 04:23:22
UTC ·
(3 weeks ago)
47.79.11.47 X 7
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-21 22:35:29
UTC ·
(3 weeks ago)
47.79.11.47 X 6
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇩🇪
Vegascosmetics
2026-09-17 16:09:35
UTC ·
(1 month ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (63, Abuse: 57)
Hacking
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-08-31 18:30:18
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.astropot.tech | URI: /backup.sql | UA: Moz ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.astropot.tech | URI: /backup.sql | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
mrcrassi
2026-08-28 18:39:21
UTC ·
(2 months ago)
Triggered Cloudflare WAF (botFight) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /Produtos/Detalhe/4/KDZ-Quad
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ...
show more
Triggered Cloudflare WAF (botFight) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /Produtos/Detalhe/4/KDZ-Quad
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
klaus_ph
2026-08-18 22:23:43
UTC ·
(2 months ago)
47.79.11.47 - - [18/Aug/2026:15:45:54 +0200] "GET /gnd/Record/116914262/Cite?lng=ga HTTP/1.1" 200 10401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
...
Bad Web Bot
