๐ธ๐ฌ
mypatricks
2026-07-10 04:20:05
(1 day ago)
49.232.91.56 | Port: 11733 | DNS: 49.232.91.56 2026-07-10T12:20:04+08:00 Asia/Shanghai | IPs res erv ...
show more
49.232.91.56 | Port: 11733 | DNS: 49.232.91.56 2026-07-10T12:20:04+08:00 Asia/Shanghai | IPs res erved list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /%e6%98%9f%e5%ba%a7%e4%b8%80%e5%91%a8/?dedf202909faaaaf0a | Ref: https://xxxxxx/%e6%98%9f%e5%ba%a7%e4%b8%80%e5%91%a8/?dedf202909faaaaf0a= | Country: CN/China/+08:00 IP City: Beijing Windows a18cc610fd72b91a-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 1
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐จ๐ฆ
1gz
2026-06-30 23:28:19
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /sport/liverpooli-kalon-ne-gjysmefinale-te-carabao-cup-shkaterron-west-hamin/604046
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐จ๐ฆ
polycoda
2026-06-28 11:28:30
(1 week ago)
๐ฅถ Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
๐บ๐ธ
kosada.com
2026-06-26 11:00:57
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ธ๐ฌ
mypatricks
2026-06-15 14:02:36
(3 weeks ago)
49.232.91.56 | Port: 12907 | DNS: 49.232.91.56 2026-06-15T22:02:35+08:00 Asia/Shanghai | IPs res erv ...
show more
49.232.91.56 | Port: 12907 | DNS: 49.232.91.56 2026-06-15T22:02:35+08:00 Asia/Shanghai | IPs res erved list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /%e5%af%92%e5%bf%83?f2f9ef2df9cec2=c9d2daabdfd0fceff9a | Ref: - | Country: CN/China/+08:00 IP City: Beijing macOS a0c21cfe8f4d4f9d-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 1
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐ธ๐ฌ
mypatricks
2026-06-14 13:39:53
(3 weeks ago)
49.232.91.56 | Port: 11058 | DNS: 49.232.91.56 2026-06-14T21:39:52+08:00 Asia/Shanghai | IPs res erv ...
show more
49.232.91.56 | Port: 11058 | DNS: 49.232.91.56 2026-06-14T21:39:52+08:00 Asia/Shanghai | IPs res erved list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /zh/%e5%88%9d%e5%ad%a6%e8%80%85%e6%8c%87%e5%8d%97/%e5%93%aa%e7%a7%8d%e9%a3%9f%e7%94%a8%e8%89%b2%e7%b4%a0%e6%9b%b4%e9%80%82%e5%90%88gumpaste/?bfbbdddbcd31fecdbfc&1777352959 | Ref: https://xxxxxx/zh/%e5%88%9d%e5%ad%a6%e8%80%85%e6%8c%87%e5%8d%97/%e5%93%aa%e7%a7%8d%e9%a3%9f%e7%94%a8%e8%89%b2%e7%b4%a0%e6%9b%b4%e9%80%82%e5%90%88gumpaste/?bfbbdddbcd31fecdbfc=&1777352959= | Country: CN/China/+08:00 IP City: Beijing macOS a0b9be529b8e0eab-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐ธ๐ฌ
mypatricks
2026-06-13 00:24:34
(4 weeks ago)
49.232.91.56 | Port: 12662 | DNS: 49.232.91.56 2026-06-13T08:24:33+08:00 Asia/Shanghai | IPs res erv ...
show more
49.232.91.56 | Port: 12662 | DNS: 49.232.91.56 2026-06-13T08:24:33+08:00 Asia/Shanghai | IPs res erved list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /%e5%af%92%e5%bf%83/?dcc2adeebb9cc99ea9e&1780964843 | Ref: https://xxxxxx/%e5%af%92%e5%bf%83/?dcc2adeebb9cc99ea9e=&1780964843= | Country: CN/China/+08:00 IP City: Beijing Windows a0acf3f4aab9d0dd-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐จ๐ฆ
polycoda
2026-06-05 11:59:07
(1 month ago)
๐ Probes for tons of inexistent files and/or PHP scripts
Hacking
Web App Attack
๐จ๐ญ
backslash
2026-06-03 16:21:00
(1 month ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
๐ฑ๐ป
garmtech.com
2026-05-26 15:09:48
(1 month ago)
IM360 WAF: Interaction with fake plugin MV:/wp-content/plugins/easy-themes-manager/script.js
Web App Attack
๐บ๐ธ
kosada.com
2026-05-19 00:29:36
(1 month ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
Anonymous
2026-05-09 05:21:09
(2 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
show less
Exploited Host
Bad Web Bot
๐ซ๐ท
bigorre.org
2026-05-02 15:08:03
(2 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
๐ธ๐ฌ
mypatricks
2026-04-21 11:10:09
(2 months ago)
49.232.91.56 | Port: 12163 | DNS: 49.232.91.56 2026-04-21T19:10:08+08:00 Asia/Singapore | IPs res er ...
show more
49.232.91.56 | Port: 12163 | DNS: 49.232.91.56 2026-04-21T19:10:08+08:00 Asia/Singapore | IPs res erved list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /cake-for-him/jose-cuervo-tequila-bottle-cake/?sort=pd.name&order=ASC&limit=50 | Ref: - | Country: CN/China/+08:00 macOS 9efbf08b6d030e3a-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 4
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐ธ๐ฌ
mypatricks
2026-04-20 11:34:56
(2 months ago)
49.232.91.56 | Port: 10508 | DNS: 49.232.91.56 2026-04-20T19:34:55+08:00 Asia/Singapore | IPs res er ...
show more
49.232.91.56 | Port: 10508 | DNS: 49.232.91.56 2026-04-20T19:34:55+08:00 Asia/Singapore | IPs res erved list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /cake-for-kids/?sort=p.sort_order&order=ASC&limit=100 | Ref: - | Country: CN/China/+08:00 macOS 9ef3d78b6f87d251-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 4
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host