🇩🇪
mldkyt
2026-11-14 21:51:42
UTC ·
(4 hours ago)
{"level":"info","ts":1794693102.3044026,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"47.79.15.13","remote_port":"56954","client_ip":"47.79.15.13","proto":"HTTP/2.0","method":"GET","host":"git.mldkyt.com","uri":"/lain/cc/ ...
show more
{"level":"info","ts":1794693102.3044026,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"47.79.15.13","remote_port":"56954","client_ip":"47.79.15.13","proto":"HTTP/2.0","method":"GET","host":"git.mldkyt.com","uri":"/lain/cc/src/branch/main/abrakadabra.frat/hustlecap/wordlike/adjective-Cannabis/precoracoid/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Ch-Ua":["\"Chromium\";v=\"147\", \"Google Chrome\";v=\"147\", \"Not-A.Brand\";v=\"99\""],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Site":["none"],"Priority":["u=0, i"],"Upgrade-Insecure-Requests":["1"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-User":["?
...
show less
Bad Web Bot
Web App Attack
🇺🇸
stechusa
2026-11-10 14:50:24
UTC ·
(4 days ago)
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key 9VN9z7di... shared by 47 IPs: 47.82.8.163, 47.82.50.165, 47.82.50.170, 47.79.15.0, 47.82.48.35 | Average 0.25s between page loads (5 pages in 1.0s) | 5 different user-agents from same IP i ...
show more
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key 9VN9z7di... shared by 47 IPs: 47.82.8.163, 47.82.50.165, 47.82.50.170, 47.79.15.0, 47.82.48.35 | Average 0.25s between page loads (5 pages in 1.0s) | 5 different user-agents from same IP in last 12 requests
show less
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-11-10 14:50:24
UTC ·
(4 days ago)
[Askari] | country=SG | ASN=Alibaba (US) Technology Co., Ltd. | Behavior: Inhuman browsing speed, Rotating user agents, Targeting specific pages
Bad Web Bot
DDoS Attack
🇦🇺
aranguren.org
2026-11-05 08:43:11
UTC ·
(1 week ago)
47.79.15.13 - - [05/Nov/2026:09:26:15 +1100] "GET /squid-reports/2026May25-2026May28/2001_470_1_fb5_2c0/graph.html HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ...
show more
47.79.15.13 - - [05/Nov/2026:09:26:15 +1100] "GET /squid-reports/2026May25-2026May28/2001_470_1_fb5_2c0/graph.html HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
47.79.15.13 - - [05/Nov/2026:18:05:19 +1100] "GET /squid-reports/2026Apr20-2026Apr23/113_215_189_233/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
47.79.15.13 - - [05/Nov/2026:19:43:11 +1100] "GET /squid-reports/2025Sep08-2025Sep10/84_239_46_144/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇺🇸
1gz
2026-11-05 03:38:11
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/te-shtena-me-arme-zjarri-para-spitalit-plagosen-2-persona-ne-tetove/613768/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Appl ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/te-shtena-me-arme-zjarri-para-spitalit-plagosen-2-persona-ne-tetove/613768/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Entalpi.net
2026-10-31 09:38:27
UTC ·
(2 weeks ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇨🇦
soundboxxx.com
2026-10-29 19:36:40
UTC ·
(2 weeks ago)
47.79.15.13 X 1
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-23 05:28:05
UTC ·
(3 weeks ago)
47.79.15.13 X 6
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-21 09:03:44
UTC ·
(3 weeks ago)
47.79.15.13 X 11
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-20 18:50:31
UTC ·
(3 weeks ago)
47.79.15.13 X 1
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇪🇸
librebit
2026-09-20 23:53:19
UTC ·
(1 month ago)
Brute force
Brute-Force
🇩🇪
Vegascosmetics
2026-09-08 17:13:26
UTC ·
(2 months ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848Geral/ChangeCountry)
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-08-30 00:52:42
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.goblinpot.site | URI: /backup.sql | UA: Mozil ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.goblinpot.site | URI: /backup.sql | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-08-29 20:48:34
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: grafana.definitelynotahoneypot.top | URI: /backup ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: grafana.definitelynotahoneypot.top | URI: /backup.sql | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
klaus_ph
2026-08-18 22:16:33
UTC ·
(2 months ago)
47.79.15.13 - - [18/Aug/2026:15:42:46 +0200] "GET /gnd/Record/1059847116/Details?lng=zh HTTP/1.1" 200 13512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
...
Bad Web Bot
