🇩🇪
jbcrn
2026-08-24 00:00:10
(7 hours ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /fiard. User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
Web App Attack
🇵🇹
Information Security
2026-08-23 15:02:58
(15 hours ago)
Web App Attack
Web App Attack
🇩🇪
AetherFox
2026-08-23 13:07:35
(17 hours ago)
AetherFox VoidGuard detected: [Sun Aug 23 15:06:31.346855 2026] [authz_core:error] [pid 181268:tid 1 ...
show more
AetherFox VoidGuard detected: [Sun Aug 23 15:06:31.346855 2026] [authz_core:error] [pid 181268:tid 181281] [client 47.79.206.205:56616] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Sun Aug 23 15:06:31.348856 2026] [authz_core:error] [pid 181268:tid 181281] [client 47.79.206.205:56616] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Sun Aug 23 15:07:22.489467 2026] [authz_core:error] [pid 177295:tid 177343] [client 47.79.206.205:47794] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Sun Aug 23 15:07:22.489763 2026] [authz_core:error] [pid 177295:tid 177343] [client 47.79.206.205:47794] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Sun Aug 23 15:07:34.712387 2026] [authz_core:erro
...
show less
Bad Web Bot
Web App Attack
🇩🇪
AetherFox
2026-08-22 15:02:23
(1 day ago)
AetherFox VoidGuard detected: [Sat Aug 22 17:01:40.678532 2026] [authz_core:error] [pid 161957:tid 1 ...
show more
AetherFox VoidGuard detected: [Sat Aug 22 17:01:40.678532 2026] [authz_core:error] [pid 161957:tid 161984] [client 47.79.206.205:44040] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Sat Aug 22 17:01:40.678832 2026] [authz_core:error] [pid 161957:tid 161984] [client 47.79.206.205:44040] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Sat Aug 22 17:01:52.722098 2026] [authz_core:error] [pid 161956:tid 161996] [client 47.79.206.205:52786] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Sat Aug 22 17:01:52.722373 2026] [authz_core:error] [pid 161956:tid 161996] [client 47.79.206.205:52786] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Sat Aug 22 17:02:23.366418 2026] [authz_core:erro
...
show less
Bad Web Bot
Web App Attack
🇵🇹
Information Security
2026-08-22 07:01:56
(1 day ago)
Web App Attack
Web App Attack
🇩🇪
AetherFox
2026-08-22 01:07:09
(2 days ago)
AetherFox VoidGuard detected: [Sat Aug 22 03:06:29.880622 2026] [authz_core:error] [pid 161956:tid 1 ...
show more
AetherFox VoidGuard detected: [Sat Aug 22 03:06:29.880622 2026] [authz_core:error] [pid 161956:tid 162004] [client 47.79.206.205:42460] AH01630: client denied by server configuration: proxy:https://[MASKED]/csv_export.php, referer: https://www.google.com/
[Sat Aug 22 03:06:29.882351 2026] [authz_core:error] [pid 161956:tid 162004] [client 47.79.206.205:42460] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Sat Aug 22 03:07:04.480775 2026] [authz_core:error] [pid 161956:tid 161989] [client 47.79.206.205:45072] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Sat Aug 22 03:07:04.480998 2026] [authz_core:error] [pid 161956:tid 161989] [client 47.79.206.205:45072] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Sat Aug 22 03:07:08.468672 2026] [authz_core:error]
...
show less
Bad Web Bot
Web App Attack
🇩🇪
AetherFox
2026-08-21 09:08:53
(2 days ago)
AetherFox VoidGuard detected: [Fri Aug 21 11:07:28.186158 2026] [authz_core:error] [pid 147571:tid 1 ...
show more
AetherFox VoidGuard detected: [Fri Aug 21 11:07:28.186158 2026] [authz_core:error] [pid 147571:tid 147615] [client 47.79.206.205:48150] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Fri Aug 21 11:08:15.101431 2026] [authz_core:error] [pid 147571:tid 147621] [client 47.79.206.205:60636] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Fri Aug 21 11:08:15.102464 2026] [authz_core:error] [pid 147571:tid 147621] [client 47.79.206.205:60636] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html, referer: https://www.google.com/
[Fri Aug 21 11:08:52.969048 2026] [authz_core:error] [pid 147572:tid 147598] [client 47.79.206.205:34710] AH01630: client denied by server configuration: proxy:https://[MASKED]/view_all_set.php, referer: https://www.google.com/
[Fri Aug 21 11:08:52.971665 2026] [authz_core:erro
...
show less
Bad Web Bot
Web App Attack
🇵🇹
Information Security
2026-08-20 16:08:00
(3 days ago)
Web App Attack
Web App Attack
🇺🇸
1gz
2026-08-17 03:56:55
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/maqedonci
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇹
Information Security
2026-08-16 14:20:33
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
1gz
2026-08-15 17:02:21
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/youssouf
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
1gz
2026-08-15 07:12:37
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/green
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-08 16:13:26
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 47.79.206.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.206.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 12:13:21.998970 2026] [security2:error] [pid 719585:tid 719585] [client 47.79.206.205:25486] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kbalan.com|F|2"] [data ".kbalan.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kbalan.com"] [uri "/books/perfect-stranger/www.kbalan.com"] [unique_id "andVoY8PU25wpryVpNtEtQAAAAY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
1gz
2026-08-08 06:35:30
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇷🇺
Mga Admin
2026-08-07 23:08:48
(2 weeks ago)
47.79.206.205 - - [08/Aug/2026:06:08:47 +0700] "GET /yurii/ABEL HTTP/1.1" 404 196 "https://www.googl ...
show more
47.79.206.205 - - [08/Aug/2026:06:08:47 +0700] "GET /yurii/ABEL HTTP/1.1" 404 196 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36"
...
show less
Web App Attack