🇩🇪
mldkyt
2026-11-15 04:34:33
UTC ·
(15 minutes ago)
{"level":"info","ts":1794717272.8110845,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"47.82.50.188","remote_port":"57896","client_ip":"47.82.50.188","proto":"HTTP/2.0","method":"GET","host":"git.mldkyt.com","uri":"/mld/Ai ...
show more
{"level":"info","ts":1794717272.8110845,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"47.82.50.188","remote_port":"57896","client_ip":"47.82.50.188","proto":"HTTP/2.0","method":"GET","host":"git.mldkyt.com","uri":"/mld/Ai/pulls/abrakadabra.nonplane-exarchist/gue/vegeteness/probathing/fleeceless-cytode/","headers":{"Accept-Language":["en-US"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"Accept-Encoding":["gzip, deflate, br"],"Sec-Ch-Ua":["\"Chromium\";v=\"151\", \"Google Chrome\";v=\"151\", \"Not-A.Brand\";v=\"99\""],"Priority":["u=0, i"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Upgrade-Insecure-Requests":["1"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Dest"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-13 17:45:04
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇺🇸
stechusa
2026-11-10 14:24:22
UTC ·
(4 days ago)
[Askari] | country=SG | ASN=Alibaba (US) Technology Co., Ltd. | Behavior: Inhuman browsing speed, Targeting specific pages
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-11-10 14:24:22
UTC ·
(4 days ago)
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key 4jD3pTiN... shared by 2 IPs: 47.82.50.188, 47.82.55.178 | Average 0.25s between page loads (5 pages in 1.0s) | 403 on protected endpoint: /catalog/product_compare/add/product/52976/uenc/aH ...
show more
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key 4jD3pTiN... shared by 2 IPs: 47.82.50.188, 47.82.55.178 | Average 0.25s between page loads (5 pages in 1.0s) | 403 on protected endpoint: /catalog/product_compare/add/product/52976/uenc/aHR0cHM6Ly93d3cubGlnaHRpbmcybGln (method=GET, ModSec blocked)
show less
Bad Web Bot
DDoS Attack
🇦🇺
aranguren.org
2026-11-05 06:56:14
UTC ·
(1 week ago)
47.82.50.188 - - [05/Nov/2026:09:06:21 +1100] "GET /squid-reports/2026Apr27-2026Apr29/157_245_77_56/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
47. ...
show more
47.82.50.188 - - [05/Nov/2026:09:06:21 +1100] "GET /squid-reports/2026Apr27-2026Apr29/157_245_77_56/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
47.82.50.188 - - [05/Nov/2026:09:54:34 +1100] "GET /squid-reports/2026May04-2026May07/113_215_189_40/graph.html HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
47.82.50.188 - - [05/Nov/2026:17:56:14 +1100] "GET /squid-reports/2026May04-2026May10/106_63_26_141/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇺🇸
1gz
2026-11-05 04:04:28
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/rama-ne-buxhetin-e-2024-mbi-231-mije-nxenes-perfitojne-libra-falas/590245/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Apple ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/rama-ne-buxhetin-e-2024-mbi-231-mije-nxenes-perfitojne-libra-falas/590245/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Entalpi.net
2026-11-01 03:31:46
UTC ·
(2 weeks ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇨🇦
soundboxxx.com
2026-10-23 00:08:40
UTC ·
(3 weeks ago)
47.82.50.188 X 7
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-22 10:30:09
UTC ·
(3 weeks ago)
47.82.50.188 X 11
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-20 06:24:01
UTC ·
(3 weeks ago)
47.82.50.188 X 2
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇩🇪
Vegascosmetics
2026-09-15 17:51:05
UTC ·
(1 month ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848es/Geral/ChangeCulture)
Hacking
Bad Web Bot
Web App Attack
2026-09-05 04:30:40
UTC ·
(2 months ago)
Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Magento Session ID ...
show more
Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Magento Session ID Parameter Blocked: /communications/networks/switchers.html?___SID=8f02c822953f4261e68b5c7f4a91cae4U&mode=grid | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇵🇱
Budyn
2026-08-31 00:46:40
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: telemetry.teddypot.website | URI: /backup.sql | U ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: telemetry.teddypot.website | URI: /backup.sql | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-08-29 17:34:51
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: apm.definitelynotahoneypot.top | URI: /backup.sql ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: apm.definitelynotahoneypot.top | URI: /backup.sql | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
klaus_ph
2026-08-19 09:09:57
UTC ·
(2 months ago)
47.82.50.188 - - [19/Aug/2026:00:23:22 +0200] "GET /gnd/Record/133927172/Cite?lng=fi HTTP/1.1" 200 10197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
...
Bad Web Bot
