🇺🇸
stechusa
2026-11-11 06:21:32
UTC ·
(3 days ago)
[Askari] | country=SG | ASN=Alibaba (US) Technology Co., Ltd. | Behavior: Inhuman browsing speed, Targeting specific pages
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-11-11 06:21:32
UTC ·
(3 days ago)
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key 9VN9z7di... shared by 48 IPs: 47.82.54.225, 47.82.8.111, 47.82.53.198, 47.82.14.25, 47.82.49.212 | Average 0.00s between page loads (5 pages in 0.0s) | 20 requests with zero static assets ...
show more
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | form_key 9VN9z7di... shared by 48 IPs: 47.82.54.225, 47.82.8.111, 47.82.53.198, 47.82.14.25, 47.82.49.212 | Average 0.00s between page loads (5 pages in 0.0s) | 20 requests with zero static assets (CSS/JS/images) - likely not a real browser
show less
Bad Web Bot
DDoS Attack
🇨🇦
1gz
2026-11-09 04:26:15
UTC ·
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lifestyle/besohet-se-sjell-para-per-2024-cfare-duhet-te-keni-patjeter-ne-tavolinen-e-nates-se-vitit-te-ri/608938/
UA: Mozilla/5.0 (Windows ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lifestyle/besohet-se-sjell-para-per-2024-cfare-duhet-te-keni-patjeter-ne-tavolinen-e-nates-se-vitit-te-ri/608938/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-11-08 23:53:13
UTC ·
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /sport/klubet-e-liges-premier-kerkojne-hetim-tjeter-per-financat-e-manchester-cityt/1087782/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /sport/klubet-e-liges-premier-kerkojne-hetim-tjeter-per-financat-e-manchester-cityt/1087782/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
aranguren.org
2026-11-05 00:12:12
UTC ·
(1 week ago)
47.82.51.30 - - [05/Nov/2026:06:37:03 +1100] "GET /squid-reports/2025Nov10-2025Nov14/45_83_104_137/d45_83_104_137.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safa ...
show more
47.82.51.30 - - [05/Nov/2026:06:37:03 +1100] "GET /squid-reports/2025Nov10-2025Nov14/45_83_104_137/d45_83_104_137.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
47.82.51.30 - - [05/Nov/2026:09:21:58 +1100] "GET /squid-reports/2026Apr20-2026Apr23/91_193_6_135/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
47.82.51.30 - - [05/Nov/2026:11:12:11 +1100] "GET /squid-reports/2026Apr20-2026Apr26/158_173_152_158/graph.html HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇫🇷
Entalpi.net
2026-11-01 05:20:20
UTC ·
(1 week ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇩🇪
klaus_ph
2026-10-29 15:28:53
UTC ·
(2 weeks ago)
[Thu Oct 29 02:44:25.037907 2026] [ssl:info] [pid 1666517] [client 47.82.51.30:49140] AH01964: Connection to child 3 established (server fit.vufindnet.de:443)
...
Hacking
🇨🇦
soundboxxx.com
2026-10-22 22:16:19
UTC ·
(3 weeks ago)
47.82.51.30 X 7
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-21 01:28:26
UTC ·
(3 weeks ago)
47.82.51.30 X 10
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-20 06:42:12
UTC ·
(3 weeks ago)
47.82.51.30 X 3
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇩🇪
FeG Deutschland
2026-10-18 21:45:45
UTC ·
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇨🇦
arsonist
2026-09-09 23:00:46
UTC ·
(2 months ago)
This IP accessed the path /Latte_Feline/Byrd/src/branch/campaign-whitelist/.envrc, which is banned. Powered by ListenCaddy
Bad Web Bot
Web App Attack
2026-09-05 02:30:20
UTC ·
(2 months ago)
Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Magento Session ID ...
show more
Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Magento Session ID Parameter Blocked: /brands/f5-networks.html?___SID=ca6caef72f7395005da7700af03122cbU | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇵🇱
Budyn
2026-09-01 00:32:23
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: kibana.astropot.space | URI: /.git/HEAD | UA: Moz ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: kibana.astropot.space | URI: /.git/HEAD | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-08-25 19:27:16
UTC ·
(2 months ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848Geral/ChangeCountry)
Hacking
Bad Web Bot
Web App Attack
