🇨🇭
backslash
2026-11-10 18:42:01
UTC ·
(7 hours ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
stechusa
2026-11-10 14:14:35
UTC ·
(12 hours ago)
[Askari] | country=SG | ASN=Alibaba (US) Technology Co., Ltd. | Behavior: Inhuman browsing speed, Targeting specific pages
Bad Web Bot
DDoS Attack
🇨🇦
1gz
2026-11-10 04:46:06
UTC ·
(21 hours ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/mike-lawler-i-kerkon-qeverise-rama-te-ule-tensionet-dhe-te-ndale-forcen-ndaj-protestuesve/1069033/
UA: Mozilla/5.0 (Windows NT 10.0; ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/mike-lawler-i-kerkon-qeverise-rama-te-ule-tensionet-dhe-te-ndale-forcen-ndaj-protestuesve/1069033/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
EGP Abuse Dept
2026-11-07 04:39:01
UTC ·
(3 days ago)
Scraping webshop URLs (www.kleintweewielers.nl), likely botnet drone
Bad Web Bot
Exploited Host
🇦🇺
aranguren.org
2026-11-05 03:44:07
UTC ·
(5 days ago)
47.82.53.86 - - [05/Nov/2026:04:02:04 +1100] "GET /squid-reports/2026May25-2026May28/185_91_127_85/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 ...
show more
47.82.53.86 - - [05/Nov/2026:04:02:04 +1100] "GET /squid-reports/2026May25-2026May28/185_91_127_85/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
47.82.53.86 - - [05/Nov/2026:11:07:29 +1100] "GET /squid-reports/2025Sep22-2025Sep25/94_230_208_147/d94_230_208_147.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
47.82.53.86 - - [05/Nov/2026:14:44:06 +1100] "GET /squid-reports/2026May18-2026May21/87_236_176_241/graph.html HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇫🇷
Entalpi.net
2026-10-31 15:35:32
UTC ·
(1 week ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇩🇪
FeG Deutschland
2026-10-27 01:25:57
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇨🇦
soundboxxx.com
2026-10-23 18:54:23
UTC ·
(2 weeks ago)
47.82.53.86 X 6
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-22 23:22:05
UTC ·
(2 weeks ago)
47.82.53.86 X 4
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇦
soundboxxx.com
2026-10-20 06:34:35
UTC ·
(3 weeks ago)
47.82.53.86 X 2
DDoS Attack
FTP Brute-Force
Ping of Death
Open Proxy
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
🇨🇭
backslash
2026-09-25 00:12:28
UTC ·
(1 month ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇵🇱
Budyn
2026-09-11 04:30:22
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.teddypot.site | URI: /backup.sql | UA: Mozill ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.teddypot.site | URI: /backup.sql | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-08-30 00:35:08
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: elastic.teddypot.store | URI: /.git/HEAD | UA: Mo ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: elastic.teddypot.store | URI: /.git/HEAD | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-08-27 19:29:43
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.goblinpot.space | URI: /.git/HEAD | UA: Mo ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.goblinpot.space | URI: /.git/HEAD | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-08-25 15:52:24
UTC ·
(2 months ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848nl/Geral/ChangeCulture)
Hacking
Bad Web Bot
Web App Attack
