🇨🇦
1gz
2026-11-12 23:22:05
UTC ·
(21 hours ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /kosove/zyrtari-i-dyshuar-per-kercenimin-me-arme-ndaj-djalit-te-donika-kadaj-bujupit/1094244/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /kosove/zyrtari-i-dyshuar-per-kercenimin-me-arme-ndaj-djalit-te-donika-kadaj-bujupit/1094244/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-11-12 06:09:20
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/hoxha-per-sulmet-kibernetike-ne-france-shqiperia-e-kupton-kete-kercenim-nga-pervoja-e-saj/1097287/
UA: Mozilla/5.0 (Macintosh; Intel ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/hoxha-per-sulmet-kibernetike-ne-france-shqiperia-e-kupton-kete-kercenim-nga-pervoja-e-saj/1097287/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
gary
2026-11-10 15:16:00
UTC ·
(3 days ago)
Aggressively crawling code from a self-hosted Gitea instance
2026/11/10 23:15:11 HTTPRequest [I] router: completed GET /user/login?redirect_to=%2Fgary%2Fsing-box%2Fcompare%2Fv1.5.0-beta.4...v1.12.0-alpha.10 for 47.82.52.78:0, 200 OK in 2.6ms @ auth/ ...
show more
Aggressively crawling code from a self-hosted Gitea instance
2026/11/10 23:15:11 HTTPRequest [I] router: completed GET /user/login?redirect_to=%2Fgary%2Fsing-box%2Fcompare%2Fv1.5.0-beta.4...v1.12.0-alpha.10 for 47.82.52.78:0, 200 OK in 2.6ms @ auth/auth.go:276(auth.SignIn)
show less
DDoS Attack
Bad Web Bot
🇺🇸
stechusa
2026-11-10 13:25:33
UTC ·
(3 days ago)
[Askari] | country=SG | ASN=Alibaba (US) Technology Co., Ltd. | Behavior: Rotating user agents, Targeting specific pages, Inhuman browsing speed
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-11-10 13:25:33
UTC ·
(3 days ago)
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | AbuseIPDB=30% | form_key aAq768mc... shared by 4 IPs: 47.82.51.88, 47.82.52.78, 47.79.15.2, 47.82.53.33 | Average 0.00s between page loads (5 pages in 0.0s) | 5 different user-agents from same IP i ...
show more
country=SG | ASN=Alibaba (US) Technology Co., Ltd. | AbuseIPDB=30% | form_key aAq768mc... shared by 4 IPs: 47.82.51.88, 47.82.52.78, 47.79.15.2, 47.82.53.33 | Average 0.00s between page loads (5 pages in 0.0s) | 5 different user-agents from same IP in last 12 requests
show less
Bad Web Bot
DDoS Attack
🇨🇦
1gz
2026-11-09 01:30:20
UTC ·
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /sport/silvinjo-ndeshja-me-angline-per-tu-shijuar/775947/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /sport/silvinjo-ndeshja-me-angline-per-tu-shijuar/775947/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-11-08 02:49:10
UTC ·
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/marreveshja-me-italine-per-emigrantet-te-merkuren-viziton-kampin-e-gjadrit-ish-kryeministri-italian-matteo-renzi/776792/
UA: Mozilla ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/marreveshja-me-italine-per-emigrantet-te-merkuren-viziton-kampin-e-gjadrit-ish-kryeministri-italian-matteo-renzi/776792/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Entalpi.net
2026-11-06 14:41:37
UTC ·
(1 week ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇦🇺
aranguren.org
2026-11-05 00:58:24
UTC ·
(1 week ago)
47.82.52.78 - - [05/Nov/2026:04:29:09 +1100] "GET /squid-reports/2026Jun01-2026Jun07/59_82_83_22/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
47.82. ...
show more
47.82.52.78 - - [05/Nov/2026:04:29:09 +1100] "GET /squid-reports/2026Jun01-2026Jun07/59_82_83_22/graph.html HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
47.82.52.78 - - [05/Nov/2026:05:36:30 +1100] "GET /squid-reports/2026Apr06-2026Apr12/106_63_26_149/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
47.82.52.78 - - [05/Nov/2026:11:58:23 +1100] "GET /squid-reports/2025Sep15-2025Sep17/185_220_101_103/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇫🇷
Entalpi.net
2026-10-31 03:17:01
UTC ·
(1 week ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇨🇦
soundboxxx.com
2026-10-22 22:25:36
UTC ·
(3 weeks ago)
47.82.52.78 X 6
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-21 00:21:35
UTC ·
(3 weeks ago)
47.82.52.78 X 6
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-20 18:33:35
UTC ·
(3 weeks ago)
47.82.52.78 X 6
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇩🇪
FeG Deutschland
2026-10-01 08:59:26
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇩🇪
Vegascosmetics
2026-09-10 05:30:37
UTC ·
(2 months ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848da/Geral/ChooseCountrie)
Hacking
Bad Web Bot
Web App Attack
