Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1794021402.5433936,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"45.138.12.172","remote_port":"40771","client_ip":"45.138.12.172","proto":"HTTP/2.0","method":"GET","host":"git.joshseveros.cloud", ...
show more{"level":"info","ts":1794021402.5433936,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"45.138.12.172","remote_port":"40771","client_ip":"45.138.12.172","proto":"HTTP/2.0","method":"GET","host":"git.joshseveros.cloud","uri":"/actuator/health","headers":{"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Dest":["empty"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua":["\"Not/A)Brand\";v=\"8\", \"Chromium\";v=\"148\", \"Google Chrome\";v=\"148\""],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept":["*/*"],"Priority":["u=4, i"],"Accept-Encoding":["gzip,deflate,br"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"],"Accept-Language":["fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-Mode":["cors"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"git.joshseveros.cloud"}},"bytes_read":0,"user_id":"","duration":0.01132012,"size":11,"status":404,"resp_headers":{"Server":["Cadd
...
show less
{"level":"info","ts":1794018845.4423594,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"45.138.12.172","remote_port":"35935","client_ip":"45.138.12.172","proto":"HTTP/2.0","method":"GET","host":"git.joshseveros.cloud", ...
show more{"level":"info","ts":1794018845.4423594,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"45.138.12.172","remote_port":"35935","client_ip":"45.138.12.172","proto":"HTTP/2.0","method":"GET","host":"git.joshseveros.cloud","uri":"/.git/config","headers":{"Accept-Language":["fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-Mode":["cors"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept":["*/*"],"Sec-Fetch-Dest":["empty"],"Accept-Encoding":["gzip,deflate,br"],"Priority":["u=4, i"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"],"Sec-Ch-Ua":["\"Not/A)Brand\";v=\"8\", \"Chromium\";v=\"148\", \"Google Chrome\";v=\"148\""],"Sec-Ch-Ua-Mobile":["?0"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"git.joshseveros.cloud"}},"bytes_read":0,"user_id":"","duration":0.006521962,"size":11,"status":404,"resp_headers":{"X-Frame-Options":
...
show less
{"level":"info","ts":1794018314.057643,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"45.138.12.172","remote_port":"15359","client_ip":"45.138.12.172","proto":"HTTP/2.0","method":"GET","host":"freds-status.stehlik.co. ...
show more{"level":"info","ts":1794018314.057643,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"45.138.12.172","remote_port":"15359","client_ip":"45.138.12.172","proto":"HTTP/2.0","method":"GET","host":"freds-status.stehlik.co.uk","uri":"/api/secrets","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Language":["fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-User":["?1"],"Priority":["u=0, i"],"Sec-Fetch-Site":["same-origin"],"Cache-Control":["max-age=0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"],"Referer":["https://freds-status.stehlik.co.uk/"],"Accept-Encoding":["gzip,deflate,br"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua":["\"Not/A)Br
...
show less
DDoS Attack
Web App Attack
Anonymous
45.138.12.172 - - [07/Nov/2026:02:20:31 +0000] "GET /wp-content/.env HTTP/2.0" 404 6562 "https://forum.magicball.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
45.138.12.172 - - ...
show more45.138.12.172 - - [07/Nov/2026:02:20:31 +0000] "GET /wp-content/.env HTTP/2.0" 404 6562 "https://forum.magicball.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
45.138.12.172 - - [07/Nov/2026:02:20:42 +0000] "GET /wp-content/uploads/.env HTTP/2.0" 404 6384 "https://forum.magicball.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
45.138.12.172 - - [07/Nov/
...
show less