🇨🇦
1gz
2026-11-10 23:55:02
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/video-kur-zgjohet-rinia-bie-qeveria-studentet-proteste-para-ministrise-se-arsimit-duam-dije-jo-pallavra/1052534/
UA: Mozilla/5.0 (Wi ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/video-kur-zgjohet-rinia-bie-qeveria-studentet-proteste-para-ministrise-se-arsimit-duam-dije-jo-pallavra/1052534/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
stechusa
2026-11-10 14:42:36
UTC ·
(2 days ago)
[Askari] | country=SG | ASN=Alibaba (US) Technology Co., Ltd. | Behavior: Inhuman browsing speed, Targeting specific pages
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-11-10 14:42:36
UTC ·
(2 days ago)
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key F0uvoMDq... shared by 3 IPs: 47.82.52.119, 47.82.14.172, 47.82.51.135 | Average 0.00s between page loads (5 pages in 0.0s) | 403 on protected endpoint: /catalog/product_compare/add/product ...
show more
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key F0uvoMDq... shared by 3 IPs: 47.82.52.119, 47.82.14.172, 47.82.51.135 | Average 0.00s between page loads (5 pages in 0.0s) | 403 on protected endpoint: /catalog/product_compare/add/product/23848/uenc/aHR0cHM6Ly93d3cubGlnaHRpbmcybGln (method=GET, ModSec blocked)
show less
Bad Web Bot
DDoS Attack
🇨🇦
1gz
2026-11-10 04:38:04
UTC ·
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/pjese-e-nje-grupi-te-strukturuar-kriminal-por-jo-vetem-spak-perfundon-hetimet-con-ne-gjyq-vellain-e-deputetit-te-ps-se/812927/
UA: M ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/pjese-e-nje-grupi-te-strukturuar-kriminal-por-jo-vetem-spak-perfundon-hetimet-con-ne-gjyq-vellain-e-deputetit-te-ps-se/812927/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-11-08 01:28:30
UTC ·
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /anash/jeta-ne-toke-do-te-zhduket-elon-musk-dua-te-vds-ne-mars/776719/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /anash/jeta-ne-toke-do-te-zhduket-elon-musk-dua-te-vds-ne-mars/776719/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
aranguren.org
2026-11-05 11:01:05
UTC ·
(1 week ago)
47.82.51.135 - - [05/Nov/2026:16:32:07 +1100] "GET /squid-reports/2026Apr06-2026Apr12/2001_41d0_33a_a00_40f/graph.html HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537 ...
show more
47.82.51.135 - - [05/Nov/2026:16:32:07 +1100] "GET /squid-reports/2026Apr06-2026Apr12/2001_41d0_33a_a00_40f/graph.html HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
47.82.51.135 - - [05/Nov/2026:19:24:02 +1100] "GET /squid-reports/2026May25-2026May26/195_96_139_127/graph.html HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
47.82.51.135 - - [05/Nov/2026:22:01:04 +1100] "GET /squid-reports/2026Apr20-2026Apr26/122_58_162_162/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇫🇷
Entalpi.net
2026-11-01 05:12:36
UTC ·
(1 week ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇩🇪
FeG Deutschland
2026-10-26 20:48:52
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇨🇦
soundboxxx.com
2026-10-24 03:39:27
UTC ·
(2 weeks ago)
47.82.51.135 X 3
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-22 21:23:25
UTC ·
(3 weeks ago)
47.82.51.135 X 6
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-20 18:55:38
UTC ·
(3 weeks ago)
47.82.51.135 X 1
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇩🇪
Vegascosmetics
2026-09-08 01:34:41
UTC ·
(2 months ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848es/Geral/ChangeCulture)
Hacking
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-09-02 12:09:56
UTC ·
(2 months ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848fr/Geral/ChangeCountry)
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-08-31 08:11:22
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.dont-eat-the-pudding.online | URI: /.env | UA: ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.dont-eat-the-pudding.online | URI: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
klaus_ph
2026-08-18 20:24:27
UTC ·
(2 months ago)
47.82.51.135 - - [18/Aug/2026:14:52:33 +0200] "GET /gnd/Help/Home?_=1786859362&topic=search HTTP/1.1" 200 7782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
...
Bad Web Bot
