π©πͺ
AetherFox
2026-08-27 23:00:17
(5 hours ago)
AetherFox VoidGuard detected: [Fri Aug 28 01:00:15.020725 2026] [authz_core:error] [pid 241698:tid 2 ...
show more
AetherFox VoidGuard detected: [Fri Aug 28 01:00:15.020725 2026] [authz_core:error] [pid 241698:tid 241712] [client 47.79.200.201:16560] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Fri Aug 28 01:00:15.020938 2026] [authz_core:error] [pid 241698:tid 241712] [client 47.79.200.201:16560] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Fri Aug 28 01:00:17.274247 2026] [authz_core:error] [pid 241698:tid 241715] [client 47.79.200.201:16564] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Fri Aug 28 01:00:17.274496 2026] [authz_core:error] [pid 241698:tid 241715] [client 47.79.200.201:16564] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Fri Aug 28 01:00:17.762732 2026] [authz_core:erro
...
show less
Bad Web Bot
Web App Attack
π©πͺ
jbcrn
2026-08-27 16:01:09
(12 hours ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /purposelessly-trass. User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
Web App Attack
π΅πΉ
Information Security
2026-08-27 08:06:50
(20 hours ago)
Web App Attack
Web App Attack
π¨π
flaus
2026-08-26 23:07:02
(1 day ago)
$f2bV_matches
Hacking
Bad Web Bot
Web App Attack
π©πͺ
jbcrn
2026-08-25 18:00:26
(2 days ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.unemployed-skinch. User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
Web App Attack
π©πͺ
AetherFox
2026-08-24 23:01:42
(3 days ago)
AetherFox VoidGuard detected: [Tue Aug 25 01:00:13.492155 2026] [authz_core:error] [pid 196746:tid 1 ...
show more
AetherFox VoidGuard detected: [Tue Aug 25 01:00:13.492155 2026] [authz_core:error] [pid 196746:tid 196771] [client 47.79.200.201:48222] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Tue Aug 25 01:01:19.689075 2026] [authz_core:error] [pid 196776:tid 196781] [client 47.79.200.201:1462] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Tue Aug 25 01:01:19.690981 2026] [authz_core:error] [pid 196776:tid 196781] [client 47.79.200.201:1462] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Tue Aug 25 01:01:42.009683 2026] [authz_core:error] [pid 196746:tid 196764] [client 47.79.200.201:34798] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Tue Aug 25 01:01:42.013847 2026] [authz_core:error]
...
show less
Bad Web Bot
Web App Attack
πΊπΈ
gui-ying233
2026-08-24 19:01:36
(3 days ago)
Mozilla/5.0 (Linux; Android 11; RMX3581 Build/RP1A.201005.001) AppleWebKit/537.36 (KHTML, like Gecko ...
show more
Mozilla/5.0 (Linux; Android 11; RMX3581 Build/RP1A.201005.001) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.6834.163 Mobile Safari/537.36
show less
Bad Web Bot
π΅πΉ
Information Security
2026-08-24 16:06:22
(3 days ago)
Web App Attack
Web App Attack
π©πͺ
jbcrn
2026-08-23 21:01:39
(4 days ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /rurality. User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
Web App Attack
π΅πΉ
Information Security
2026-08-22 17:07:26
(5 days ago)
Web App Attack
Web App Attack
π©πͺ
AetherFox
2026-08-22 14:03:50
(5 days ago)
AetherFox VoidGuard detected: [Sat Aug 22 16:02:36.173520 2026] [authz_core:error] [pid 161957:tid 1 ...
show more
AetherFox VoidGuard detected: [Sat Aug 22 16:02:36.173520 2026] [authz_core:error] [pid 161957:tid 161966] [client 47.79.200.201:50470] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Sat Aug 22 16:02:58.390235 2026] [authz_core:error] [pid 161956:tid 161986] [client 47.79.200.201:36678] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Sat Aug 22 16:02:58.390498 2026] [authz_core:error] [pid 161956:tid 161986] [client 47.79.200.201:36678] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Sat Aug 22 16:03:49.978296 2026] [authz_core:error] [pid 161957:tid 161968] [client 47.79.200.201:51912] AH01630: client denied by server configuration: proxy:https://[MASKED]/excel_xml_export.php, referer: https://www.google.com/
[Sat Aug 22 16:03:49.979686 2026] [authz_core:
...
show less
Bad Web Bot
Web App Attack
π©πͺ
AetherFox
2026-08-21 13:05:01
(6 days ago)
AetherFox VoidGuard detected: [Fri Aug 21 15:03:31.671501 2026] [authz_core:error] [pid 147572:tid 1 ...
show more
AetherFox VoidGuard detected: [Fri Aug 21 15:03:31.671501 2026] [authz_core:error] [pid 147572:tid 147587] [client 47.79.200.201:12996] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Fri Aug 21 15:04:02.834058 2026] [authz_core:error] [pid 147571:tid 147611] [client 47.79.200.201:62058] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Fri Aug 21 15:04:02.836005 2026] [authz_core:error] [pid 147571:tid 147611] [client 47.79.200.201:62058] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Fri Aug 21 15:05:01.149958 2026] [authz_core:error] [pid 147571:tid 147610] [client 47.79.200.201:23938] AH01630: client denied by server configuration: proxy:https://[MASKED]/excel_xml_export.php, referer: https://www.google.com/
[Fri Aug 21 15:05:01.150204 2026] [authz_core:
...
show less
Bad Web Bot
Web App Attack
π΅πΉ
Information Security
2026-08-21 00:05:48
(1 week ago)
Web App Attack
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-20 22:06:59
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 47.79.200.201 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.200.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 18:06:52.727208 2026] [security2:error] [pid 28223:tid 28223] [client 47.79.200.201:8200] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.iheldt.net|F|2"] [data ".davidamram.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.iheldt.net"] [uri "/www.davidamram.com"] [unique_id "aod6fPnBjsvRkkM2UNIqmAAAAAg"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
1gz
2026-08-17 05:17:53
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/leagues
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot