🇩🇪
palzer.IT
2026-10-28 12:45:20
(9 hours ago)
Report for plesk-apache-badbot: 47.128.49.172 - - [22/Oct/2026:09:01:11 +0200] GET / [DOMAIN_REMOVED] 301 162 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOM ...
show more
Report for plesk-apache-badbot: 47.128.49.172 - - [22/Oct/2026:09:01:11 +0200] GET / [DOMAIN_REMOVED] 301 162 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED])
show less
Bad Web Bot
🇩🇪
palzer.IT
2026-10-17 02:53:47
(1 week ago)
Report for plesk-apache-badbot: 47.128.49.172 - - [17/Oct/2026:04:53:45 +0200] GET /nordic-walking/ [DOMAIN_REMOVED] 200 36260 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spi ...
show more
Report for plesk-apache-badbot: 47.128.49.172 - - [17/Oct/2026:04:53:45 +0200] GET /nordic-walking/ [DOMAIN_REMOVED] 200 36260 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED])
show less
Bad Web Bot
🇩🇪
palzer.IT
2026-09-19 11:16:57
(1 month ago)
Fail2ban automatic report for plesk-apache-badbot: 47.128.49.172 - - [19/Sep/2026:13:16:36 +0200] GET / [DOMAIN_REMOVED] 200 41089 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; ...
show more
Fail2ban automatic report for plesk-apache-badbot: 47.128.49.172 - - [19/Sep/2026:13:16:36 +0200] GET / [DOMAIN_REMOVED] 200 41089 - Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED])
show less
Bad Web Bot
🇩🇪
Phenix Info
2026-06-19 11:48:41
(4 months ago)
SmallGuard.fr/Prestashop Bad Bots
Web App Attack
🇦🇺
MAGIC
2026-04-17 01:27:06
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇪🇸
librebit
2026-02-26 07:23:58
(8 months ago)
Brute force
Brute-Force
🇫🇷
bigorre.org
2026-02-22 15:19:57
(8 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
2026-01-08 15:26:20
(9 months ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇫🇷
Sklurk
2025-12-25 10:05:23
(10 months ago)
Web App Attack
Web App Attack
🇺🇸
fortypoundhead
2025-12-25 06:35:23
(10 months ago)
Banned IP Address
Hacking
Web App Attack
🇫🇷
bigorre.org
2025-12-13 15:01:28
(10 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇮🇩
hermawan
2025-12-10 17:47:18
(10 months ago)
[Thu Dec 11 00:46:45.748857 2025] [security2:error] [pid 95771:tid 140653368354496] [client 47.128.49.172:31166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/corerule ...
show more
[Thu Dec 11 00:46:45.748857 2025] [security2:error] [pid 95771:tid 140653368354496] [client 47.128.49.172:31166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story"] [unique_id "aTmyBUswTiuQ3-Mx0q3eNAADQhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[95796] [IGCcnFw/t4g] [aTmyBUswTiuQ3-Mx0q3eNAADQhg] keep_alive=[1] [2025-12-11
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-12-10 09:24:11
(10 months ago)
[Wed Dec 10 16:23:05.190092 2025] [security2:error] [pid 784277:tid 140600771864256] [client 47.128.49.172:53396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/corerul ...
show more
[Wed Dec 10 16:23:05.190092 2025] [security2:error] [pid 784277:tid 140600771864256] [client 47.128.49.172:53396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan"] [unique_id "aTk7-U5Buhv2TgSGgiWHBAABUwQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[784283] [VT1ZkxXVGkg] [aTk7-U5Buhv2TgSGgiWHBAABUwQ] keep_aliv
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-14 05:53:51
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.49.172 (ec2-47-128-49-172.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 00:53:47.573761 2025] [security2:error] ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.49.172 (ec2-47-128-49-172.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 00:53:47.573761 2025] [security2:error] [pid 31134:tid 31134] [client 47.128.49.172:56302] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.med-engineering.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/Blog1News.com"] [unique_id "aRbD66ODJj6EEH-DOdQXIAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
NotCool
2025-11-12 18:07:54
(11 months ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.49.172 (ec2-47-128-49-172.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs
Bad Web Bot
