185.47.93.219

Brute force

Fail2Ban: 185.47.93.219 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36

L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /18-velo-route | query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /18-velo-route | query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Taille-XL-L/Famille-Addict-Crosshill-Metrix show less

🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27

(mod_security) mod_security (id:225170) triggered by 185.47.93.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 10:25:50.422502 2025] [security2:error] [pid 9325:tid 9325] [client 185.47.93.219:5964] ModS ... show more (mod_security) mod_security (id:225170) triggered by 185.47.93.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 10:25:50.422502 2025] [security2:error] [pid 9325:tid 9325] [client 185.47.93.219:5964] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/282424"] [unique_id "aRSm_qJTqTLFqATokv8l6gAAAAM"] show less

list.rtbh.com.tr report: tcp/0

list.rtbh.com.tr report: tcp/0

list.rtbh.com.tr report: tcp/0

Webpage scraping

2025/06/18 19:06:38 [error] 58257#846704: *10117141 access forbidden by rule, client: 185.47.93.219, server: git.ksol.io, request: "GET /karolyi/py3-validate-email/src/commit/4420df2eb9de087173d2ca1394fdaa20b85aa9d6/MANIFEST.in HTTP/1.1", host: "git. ... show more 2025/06/18 19:06:38 [error] 58257#846704: *10117141 access forbidden by rule, client: 185.47.93.219, server: git.ksol.io, request: "GET /karolyi/py3-validate-email/src/commit/4420df2eb9de087173d2ca1394fdaa20b85aa9d6/MANIFEST.in HTTP/1.1", host: "git.ksol.io" ... show less

(mod_security) mod_security (id:225170) triggered by 185.47.93.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 10 00:42:14.658370 2024] [security2:error] [pid 12135] [client 185.47.93.219:26077] [client 185 ... show more (mod_security) mod_security (id:225170) triggered by 185.47.93.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 10 00:42:14.658370 2024] [security2:error] [pid 12135] [client 185.47.93.219:26077] [client 185.47.93.219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/337373"] [unique_id "Zo4RJqfB4b_xrxJkeC5LkwAAABQ"] show less