๐ฆ๐น
nomzamo
2025-01-21 04:05:48
(1 year ago)
Fail2Ban reported: nginx-badbots
Brute-Force
Bad Web Bot
SSH
๐ฆ๐น
nomzamo
2025-01-12 09:11:04
(1 year ago)
Fail2Ban detected a suspicious IP: 13.48.85.239 - Triggered by nginx-badbots jail
Brute-Force
๐ฎ๐น
gabry gabry
2024-03-11 13:15:00
(2 years ago)
Web App Attack
Web App Attack
Anonymous
2024-03-11 07:42:02
(2 years ago)
Unauthorized SSH login attempts
Brute-Force
SSH
๐ฆ๐บ
paulshipley.com.au
2024-03-11 07:37:27
(2 years ago)
levellapromotions.com.au:443 13.48.85.239 - - [11/Mar/2024:18:36:38 +1100] "GET /particles.min.js HT ...
show more
levellapromotions.com.au:443 13.48.85.239 - - [11/Mar/2024:18:36:38 +1100] "GET /particles.min.js HTTP/1.1" 404 103924 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
levellapromotions.com.au:443 13.48.85.239 - - [11/Mar/2024:18:36:38 +1100] "GET /uael-particles.min.js HTTP/1.1" 404 109242 "-" "Mozilla/5.0 (Linux; Android 11; SM-A217F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Mobile Safari/537.36"
levellapromotions.com.au:443 13.48.85.239 - - [11/Mar/2024:18:36:38 +1100] "GET /wp-emoji-release.min.js HTTP/1.1" 404 103924 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Safari/537.36 OPR/85.0.4341.79"
levellapromotions.com.au:443 13.48.85.239 - - [11/Mar/2024:18:36:58 +1100] "GET /uael-particles.min.js HTTP/1.1" 404 106820 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022;
...
show less
Web App Attack
Anonymous
2024-03-11 05:52:23
(2 years ago)
13.48.85.239 - - [11/Mar/2024:13:52:01 +0800] "GET /main.js HTTP/1.1" 404 265 "-" "Mozilla/5.0 (Maci ...
show more
13.48.85.239 - - [11/Mar/2024:13:52:01 +0800] "GET /main.js HTTP/1.1" 404 265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Edg/87.0.664.60" "-"
13.48.85.239 - - [11/Mar/2024:13:52:01 +0800] "GET //code.jquery.com/jquery-3.7.0.min.js HTTP/1.1" 404 265 "-" "Mozilla/5.0 (compatible; Konqueror/4.4; Linux) KHTML/4.4.1 (like Gecko) Fedora/4.4.1-1.fc12" "-"
13.48.85.239 - - [11/Mar/2024:13:52:22 +0800] "GET /main.js HTTP/1.1" 404 265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html)" "-"
...
show less
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2024-03-11 05:48:49
(2 years ago)
iaki.com.au:443 13.48.85.239 - - [11/Mar/2024:16:47:40 +1100] "GET /default.js HTTP/1.1" 404 54627 " ...
show more
iaki.com.au:443 13.48.85.239 - - [11/Mar/2024:16:47:40 +1100] "GET /default.js HTTP/1.1" 404 54627 "-" "Mozilla/5.0 (X11; Linux i686; rv:43.0) Gecko/20100101 Firefox/43.0"
iaki.com.au:443 13.48.85.239 - - [11/Mar/2024:16:47:42 +1100] "GET /uael-particles.min.js HTTP/1.1" 404 54643 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/534.24 (KHTML, like Gecko) Ubuntu/10.10 Chromium/12.0.703.0 Chrome/12.0.703.0 Safari/534.24"
iaki.com.au:443 13.48.85.239 - - [11/Mar/2024:16:47:42 +1100] "GET /particles.min.js HTTP/1.1" 404 54642 "-" "Mozilla/5.0 (Android 4.2; rv:19.0) Gecko/20121129 Firefox/19.0"
iaki.com.au:443 13.48.85.239 - - [11/Mar/2024:16:48:03 +1100] "GET /default.js HTTP/1.1" 404 54620 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_8; en-US) AppleWebKit/532.8 (KHTML, like Gecko) Chrome/4.0.302.2 Safari/532.8"
iaki.com.au:443 13.48.85.239 - - [11/Mar/2024:16:48:03 +1100] "GET /particles.min.js HTTP/1.1" 404 54638 "-" "Mozilla/5.0 (X11; Linux i686; rv:46.0) Gecko/20100101 Firefox/
...
show less
Web App Attack
๐ฉ๐ช
Stefan Dreher
2024-03-11 05:40:36
(2 years ago)
13.48.85.239 - - [11/Mar/2024:06:40:34 +0100] "GET //oss.maxcdn.com/libs/respond.js/1.4.2/respond.mi ...
show more
13.48.85.239 - - [11/Mar/2024:06:40:34 +0100] "GET //oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
13.48.85.239 - - [11/Mar/2024:06:40:34 +0100] "GET /bootstrap.min.js HTTP/1.1" 404 188 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.4 (KHTML like Gecko) Chrome/22.0.1229.56 Safari/537.4"
13.48.85.239 - - [11/Mar/2024:06:40:34 +0100] "GET /ie10-viewport-bug-workaround.js HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Linux; Android 9; SM-G950F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.85 Mobile Safari/537.36"
13.48.85.239 - - [11/Mar/2024:06:40:34 +0100] "GET /jquery-1.11.3.min.js HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Linux; Android 7.1.1; BBB100-1 Build/NMF26F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36"
13.48.85.239 - - [11/Mar/2024:06:40:35 +0100] "GET /manifest.js HTTP/1.1" 404 125 "-" "Mozilla/5.0 (Macintosh; Intel Mac
show less
Hacking
Brute-Force
๐ฆ๐บ
Bay13
2024-03-11 05:07:31
(2 years ago)
f2b http-redirect
Hacking
Web App Attack
๐ฆ๐บ
FEWA
2024-03-11 04:50:57
(2 years ago)
Fail2Ban Ban Triggered
Hacking
Bad Web Bot
Web App Attack
๐ฟ๐ฆ
Birdflew
2024-03-11 04:48:18
(2 years ago)
Port scanning
Hacking
๐ฉ๐ช
iNetWorker
2024-03-11 04:30:07
(2 years ago)
firewall-block, port(s): 80/tcp, 443/tcp
Port Scan
๐ฉ๐ช
ghostwarriors
2024-03-11 04:20:02
(2 years ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2024-03-11 04:17:58
(2 years ago)
(CT) IP 13.48.85.239 (SE/Sweden/ec2-13-48-85-239.eu-north-1.compute.amazonaws.com) found to have 436 ...
show more
(CT) IP 13.48.85.239 (SE/Sweden/ec2-13-48-85-239.eu-north-1.compute.amazonaws.com) found to have 436 connections
show less
DDoS Attack
๐ฉ๐ช
rh24
2024-03-11 04:03:14
(2 years ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.48.85.239 (SE/Swe ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.48.85.239 (SE/Sweden/ec2-13-48-85-239.eu-north-1.compute.amazonaws.com)
show less
Bad Web Bot