185.41.248.11

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36

[08/Oct/2026:16:30:35 +0300] -- 185.41.248.11 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /sitemap.aspx.gz HTTP/1.1

Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp

Apr 2 13:43:01 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:185.41.248.11\] ...

Apr 2 13:07:04 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:185.41.248.11\] ...

Apr 2 10:04:05 WHD8 dovecot: imap-login: Disconnected \(auth failed, 4 attempts in 70 secs\): user=\<[email protected]\>, method=PLAIN, rip=185.41.248.11, lip=10.64.89.208, TLS: Disconnected, session=\<uEmFxvi+YuW5KfgL\> ...

Mar 22 23:19:26 serwer sshd\[1648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.41.248.11 user=admin Mar 22 23:19:28 serwer sshd\[1648\]: Failed password for admin from 185.41.248.11 port 49719 ssh ... show more Mar 22 23:19:26 serwer sshd\[1648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.41.248.11 user=admin Mar 22 23:19:28 serwer sshd\[1648\]: Failed password for admin from 185.41.248.11 port 49719 ssh2 Mar 22 23:19:35 serwer sshd\[1662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.41.248.11 user=admin ... show less

Credential Stuffing

Scanning random ports - tries to find possible vulnerable services

Mar 17 15:29:04 jump sshd[3017955]: Invalid user admin from 185.41.248.11 port 57977 Mar 17 15:29:04 jump sshd[3017955]: Failed none for invalid user admin from 185.41.248.11 port 57977 ssh2 Mar 17 15:29:10 jump sshd[3017959]: Invalid user admin from ... show more Mar 17 15:29:04 jump sshd[3017955]: Invalid user admin from 185.41.248.11 port 57977 Mar 17 15:29:04 jump sshd[3017955]: Failed none for invalid user admin from 185.41.248.11 port 57977 ssh2 Mar 17 15:29:10 jump sshd[3017959]: Invalid user admin from 185.41.248.11 port 58934 ... show less

Mar 17 12:34:52 master sshd[21399]: Did not receive identification string from 185.41.248.11 Mar 17 12:34:55 master sshd[21402]: Failed none for invalid user admin from 185.41.248.11 port 50352 ssh2 Mar 17 12:35:00 master sshd[21404]: Failed password ... show more Mar 17 12:34:52 master sshd[21399]: Did not receive identification string from 185.41.248.11 Mar 17 12:34:55 master sshd[21402]: Failed none for invalid user admin from 185.41.248.11 port 50352 ssh2 Mar 17 12:35:00 master sshd[21404]: Failed password for invalid user admin from 185.41.248.11 port 50708 ssh2 Mar 17 12:35:05 master sshd[21422]: Failed password for invalid user admin from 185.41.248.11 port 51263 ssh2 Mar 17 12:35:10 master sshd[21443]: Failed password for invalid user admin from 185.41.248.11 port 51861 ssh2 Mar 17 12:35:15 master sshd[21445]: Failed password for invalid user admin from 185.41.248.11 port 52458 ssh2 Mar 17 12:35:20 master sshd[21449]: Failed password for invalid user admin from 185.41.248.11 port 53019 ssh2 Mar 17 12:35:25 master sshd[21451]: Failed password for invalid user admin from 185.41.248.11 port 53529 ssh2 Mar 17 12:35:30 master sshd[21455]: Failed password for invalid user admin from 185.41.248.11 port 54210 ssh2 show less

2021-03-02 23:11:03,104 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:03 2021-03-02 23:11:03,140 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:03 2021-03-02 23:11:03,263 ... show more 2021-03-02 23:11:03,104 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:03 2021-03-02 23:11:03,140 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:03 2021-03-02 23:11:03,263 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:03 2021-03-02 23:11:03,297 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:03 2021-03-02 23:11:09,453 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:09 2021-03-02 23:11:09,560 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:09 2021-03-02 23:11:12,306 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:11 2021-03-02 23:11:12,307 fail2ban.filter [28319]: INFO [ssh] Found 185.41.248.11 - 2021-03-02 23:11:11 2021-03-02 23:11:18,227 fail2ban.filter [28319]: INFO [ssh] Found 185........ ------------------------------- show less