๐ฎ๐ฉ
BIQSA-MOCSA
2026-11-06 19:04:01
UTC ยท
(18 minutes ago)
BIQSA FINITY TEKNOLOGI Autonomous Defense (mocsa.biqsa.app): unsolicited automated HTTP enumeration from 45.138.12.216 (AS-HOSTING, External Network) probing for environment-configuration files (.env-style) โ ~1 request over ~2s, all rejected (HTTP 4 ...
show more
BIQSA FINITY TEKNOLOGI Autonomous Defense (mocsa.biqsa.app): unsolicited automated HTTP enumeration from 45.138.12.216 (AS-HOSTING, External Network) probing for environment-configuration files (.env-style) โ ~1 request over ~2s, all rejected (HTTP 404/405), zero breach, no data exposed. Attempt neutralized at network perimeter. Signed ML-DSA-87 Checkpoint CP-1793974041-3872-6458526D (Root 6458526d...). Public Verifier: https://mocsa.biqsa.app/verifier-sdk
show less
Hacking
Web App Attack
๐ท๐บ
dnsbd.tech
2026-11-06 19:02:01
UTC ยท
(20 minutes ago)
nftables: Port scan (TCP:443) [srv1]
Port Scan
Hacking
๐บ๐ธ
[email protected]
2026-11-06 18:12:29
UTC ยท
(1 hour ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-11-06T18:12:28Z
Brute-Force
Anonymous
2026-11-06 16:52:53
UTC ยท
(2 hours ago)
Reported from Nginx log analysis 11. Log: 45.138.12.216 - - [06/Nov/2026:xx:xx:xx 0100] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "-" "LT Lithuania ...
show more
Reported from Nginx log analysis 11. Log: 45.138.12.216 - - [06/Nov/2026:xx:xx:xx 0100] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "-" "LT Lithuania -" "AS218785" "Tc Datacenter Limited"
show less
Port Scan
Brute-Force
SSH
๐ณ๐ฑ
tmiland
2026-11-06 16:10:56
UTC ยท
(3 hours ago)
(nginx_444) Nginx 444 45.138.12.216 (LT/Lithuania/-): 5 in the last 3600 secs; IP: 45.138.12.216; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.138.12.216 - - [06/Nov/2026:16:29:21 +0100] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 ...
show more
(nginx_444) Nginx 444 45.138.12.216 (LT/Lithuania/-): 5 in the last 3600 secs; IP: 45.138.12.216; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.138.12.216 - - [06/Nov/2026:16:29:21 +0100] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 45.138.12.216 - - [06/Nov/2026:17:09:18 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 45.138.12.216 - - [06/Nov/2026:17:09:29 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 45.138.12.216 - - [06/Nov/2026:17:09:29 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 45.138.12.216 - - [06/Nov/2026:17:10:51 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win6
show less
Brute-Force
๐บ๐ธ
[email protected]
2026-11-06 15:57:57
UTC ยท
(3 hours ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-11-06T15:57:57Z
Brute-Force
๐บ๐ธ
JonathanYoung2161
2026-11-06 15:50:52
UTC ยท
(3 hours ago)
dartspad.simplifiedmedia.net 45.138.12.216 - - [06/Nov/2026:09:44:27 -0600] "GET /.env HTTP/2.0" 403 2486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
discgolfpad.simplifiedmedi ...
show more
dartspad.simplifiedmedia.net 45.138.12.216 - - [06/Nov/2026:09:44:27 -0600] "GET /.env HTTP/2.0" 403 2486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
discgolfpad.simplifiedmedia.net 45.138.12.216 - - [06/Nov/2026:09:50:49 -0600] "GET /.env HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
sideoutpad.simplifiedmedia.net 45.138.12.216 - - [06/Nov/2026:09:50:49 -0600] "GET /.env HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ป๐ฎ
Axel
2026-11-06 15:50:19
UTC ยท
(3 hours ago)
WAF/ModSecurity blocked 2 malicious request(s) (HTTP 403) from this IP. Activity: blocked sensitive path x2. Latest: 2026-11-06T15:50:19Z.
Hacking
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-11-06 15:40:14
UTC ยท
(3 hours ago)
(modsec_attack) srv101 ModSecurity attack 45.138.12.216 (HK/Hong Kong/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
Anonymous
2026-11-06 15:36:56
UTC ยท
(3 hours ago)
Scan for .env Files at 2026-11-06T15:36:56+00:00
Web App Attack
๐ต๐ฑ
gandaflux
2026-11-06 15:30:16
UTC ยท
(3 hours ago)
45.138.12.216 [redacted-domain] - [06/Nov/2026:15:55:49 +0100] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
45.138.12.216 [redacted-domain] - [06/No ...
show more
45.138.12.216 [redacted-domain] - [06/Nov/2026:15:55:49 +0100] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
45.138.12.216 [redacted-domain] - [06/Nov/2026:16:23:33 +0100] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
45.138.12.216 honeydash.pl - [06/Nov/2026:16:30:14 +0100] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
show less
Web App Attack
๐ต๐ฑ
Tsumugi Kotobuki
2026-11-06 15:29:43
UTC ยท
(3 hours ago)
Web Scan (L7) | Paths: /.env | Codes: 444(1x) | F2B/angie-path-trap@2026-11-06T15:29:43Z
Bad Web Bot
Web App Attack
๐ป๐ฎ
Axel
2026-11-06 15:28:41
UTC ยท
(3 hours ago)
WAF/ModSecurity blocked 1 malicious request(s) (HTTP 403) from this IP. Activity: blocked sensitive path x1. Latest: 2026-11-06T15:28:41Z.
Hacking
Web App Attack
๐น๐ท
Detmach
2026-11-06 15:20:43
UTC ยท
(4 hours ago)
Security attack detected. Multiple failed attempts from 45.138.12.216. IP banned for 1440 minutes at 06.11.2026 18:20:02. Failed attempts: 1
Brute-Force
๐ต๐ฑ
MatStef132
2026-11-06 15:17:58
UTC ยท
(4 hours ago)
MatShield L7: blocked on a protected site (secret-path-probe)
DDoS Attack