🇨🇦
1gz
2026-11-13 03:43:04
UTC ·
(17 hours ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/vranesira-dhe-reshje-debore-parashikimi-i-motit-per-fundjaven/758387/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/vranesira-dhe-reshje-debore-parashikimi-i-motit-per-fundjaven/758387/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
stechusa
2026-11-11 19:40:09
UTC ·
(2 days ago)
[Askari] | country=SG | ASN=Alibaba (US) Technology Co., Ltd. | Behavior: Inhuman browsing speed, Rotating user agents, Targeting specific pages
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-11-11 19:40:08
UTC ·
(2 days ago)
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key ZLczOKl8... shared by 57 IPs: 47.82.48.8, 47.82.50.204, 47.82.52.154, 47.82.49.226, 47.82.15.84 | Average 0.25s between page loads (5 pages in 1.0s) | 5 different user-agents from same IP ...
show more
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key ZLczOKl8... shared by 57 IPs: 47.82.48.8, 47.82.50.204, 47.82.52.154, 47.82.49.226, 47.82.15.84 | Average 0.25s between page loads (5 pages in 1.0s) | 5 different user-agents from same IP in last 13 requests
show less
Bad Web Bot
DDoS Attack
🇨🇭
backslash
2026-11-10 21:36:00
UTC ·
(2 days ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇦
1gz
2026-11-08 04:54:31
UTC ·
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/lajmi.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.3 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/lajmi.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
aranguren.org
2026-11-05 17:32:36
UTC ·
(1 week ago)
47.82.48.240 - - [05/Nov/2026:19:18:16 +1100] "GET /squid-reports/2026Apr20-2026Apr24/2604_a880_400_d1_0_4_4a88_a001/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 S ...
show more
47.82.48.240 - - [05/Nov/2026:19:18:16 +1100] "GET /squid-reports/2026Apr20-2026Apr24/2604_a880_400_d1_0_4_4a88_a001/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
47.82.48.240 - - [06/Nov/2026:04:14:43 +1100] "GET /squid-reports/2025Sep29-2025Oct03/206_166_251_193/d206_166_251_193.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
47.82.48.240 - - [06/Nov/2026:04:32:35 +1100] "GET /squid-reports/2025Sep29-2025Oct05/167_172_47_74/167_172_47_74.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇺🇸
1gz
2026-11-05 03:36:17
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/perplasen-dy-trena-ne-new-york-24-te-plagosur/610526/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/perplasen-dy-trena-ne-new-york-24-te-plagosur/610526/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-02 19:21:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 47.82.48.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:21:27.475948 2026] [security2:error] [pid 27690:tid 27690] [client 47.82.48.240:56806] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 47.82.48.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:21:27.475948 2026] [security2:error] [pid 27690:tid 27690] [client 47.82.48.240:56806] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||persnicketyinc.com|F|2"] [data ".persnicketyinc.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "persnicketyinc.com"] [uri "/ask-etiquette-masters-divorced-parents-wedding-invitations/www.persnicketyinc.com"] [unique_id "aujit9RzaasB7ZOSZOHQnwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Entalpi.net
2026-10-31 15:57:37
UTC ·
(1 week ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇨🇦
soundboxxx.com
2026-10-29 20:30:35
UTC ·
(2 weeks ago)
47.82.48.240 X 1
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-24 02:35:23
UTC ·
(2 weeks ago)
47.82.48.240 X 4
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-22 07:48:28
UTC ·
(3 weeks ago)
47.82.48.240 X 11
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-20 05:32:22
UTC ·
(3 weeks ago)
47.82.48.240 X 3
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇩🇪
FeG Deutschland
2026-09-23 01:08:45
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇩🇪
Vegascosmetics
2026-09-16 08:53:49
UTC ·
(1 month ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848el/Geral/ChangeCulture)
Hacking
Bad Web Bot
Web App Attack