5.133.201.247

Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5 | 2026-10-28 16:19 UTC

Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123 | 2026-10-25 05:09 UTC

Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E14 | 2026-10-24 00:37 UTC

(mod_security) mod_security triggered on hostname [redacted] 5.133.201.247 (SE/Sweden/-)

Triggered Cloudflare WAF (firewallCustom) from SE. Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3 • Generated by: github.com/ ... show more Triggered Cloudflare WAF (firewallCustom) from SE. Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less

Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3

Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safar ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1 show less

Fail2Ban - NGINX Honeypot - Botnet

This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: / | 2026-09-23 20:14 UTC show less

herrmann - searching for vulnerable scripts: llms.txt 2026/09/23 08:16:20

Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-16 05:19 UTC

Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /llms.txt | 2026-09-15 10:45 UTC

Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-14 10:00 UTC

Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /robots.txt | 2026-09-14 06:08 UTC

(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 5.133.201.247 (SE/Sweden/-): 1 in the last 3600 secs (0-195)