๐ซ๐ฎ
habs
2026-09-21 04:16:19
(29 minutes ago)
45.138.12.51 - - [21/Sep/2026:07:16:18 +0300] "GET /assets../.git/config HTTP/1.1" 200 1345 "-" "l9e ...
show more
45.138.12.51 - - [21/Sep/2026:07:16:18 +0300] "GET /assets../.git/config HTTP/1.1" 200 1345 "-" "l9explore/1.2.2"
...
show less
Web App Attack
๐ณ๐ฑ
Mr. Sky
2026-09-21 04:13:00
(33 minutes ago)
Git repository probing detected against a public web server.
20 suspicious requests
19 critical req ...
show more
Git repository probing detected against a public web server.
20 suspicious requests
19 critical requests
Observed requests:
GET /.env_sample
GET /app/.git/config
GET /wp-config.php.bak
GET /.vscode/sftp.json
Risk level: CRITICAL
Reference: STI-20260921-061300-45-138-12-51
show less
FTP Brute-Force
Brute-Force
๐ฉ๐ช
Bedios GmbH
2026-09-21 04:12:53
(33 minutes ago)
Login credentials theft attempt
Hacking
๐ฉ๐ช
AetherFox
2026-09-21 04:10:15
(36 minutes ago)
AetherFox VoidGuard detected: [Mon Sep 21 04:10:14.676895 2026] [authz_core:error] [pid 3389096:tid ...
show more
AetherFox VoidGuard detected: [Mon Sep 21 04:10:14.676895 2026] [authz_core:error] [pid 3389096:tid 3389147] [client 45.138.12.51:60564] AH01630: client denied by server configuration: proxy:http://[MASKED]/
[Mon Sep 21 04:10:14.676997 2026] [authz_core:error] [pid 3389096:tid 3389147] [client 45.138.12.51:60564] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Mon Sep 21 04:10:14.720422 2026] [authz_core:error] [pid 3389095:tid 3389106] [client 45.138.12.51:60568] AH01630: client denied by server configuration: proxy:http://[MASKED]/admin/.git/config
[Mon Sep 21 04:10:14.720498 2026] [authz_core:error] [pid 3389095:tid 3389106] [client 45.138.12.51:60568] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Mon Sep 21 04:10:14.761730 2026] [authz_core:error] [pid 3389095:tid 3389110] [client 45.138.12.51:60570] AH01630: client denied by server configuration: proxy:http://[MASKED]/laravel/.env
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
SysAdmin Dylan
2026-09-21 04:09:54
(36 minutes ago)
(mod_security) mod_security (id:210492) triggered by 45.138.12.51 (GB/United Kingdom/-): 10 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 45.138.12.51 (GB/United Kingdom/-): 10 in the last 3600 secs
show less
Brute-Force
๐ณ๐ฑ
0xffffffff
2026-09-21 04:08:09
(38 minutes ago)
[2026-09-21 07:08:07.395486] [authz_core:error] [pid 496986:tid 131437558699712] [client 45.138.12.5 ...
show more
[2026-09-21 07:08:07.395486] [authz_core:error] [pid 496986:tid 131437558699712] [client 45.138.12.51:48380] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-09-21 07:08:07.461051] [authz_core:error] [pid 496987:tid 131437063825088] [client 45.138.12.51:48382] AH01630: client denied by server configuration: /var/www/*/.env.dist , error_notes:wrong-host , URI:'/.env.dist'
[2026-09-21 07:08:07.461051] [authz_core:error] [pid 496987:tid 131437063825088] [client 45.138.12.51:48382] AH01630: client denied by server configuration: /var/www/*/.env.dist , error_notes:wrong-host , URI:'/.env.dist'
[2026-09-21 07:08:07.525863] [authz_core:error] [pid 496986:tid 131437642626752] [client 45.138.12.51:48392] AH01630: client denied by server configuration: /var/www/*/.env.prod , error_notes:wrong-host , URI:'/.env.prod'
[2026-09-21 07:08:07.525863] [authz_core:error] [pid 496986:tid 131437642626752] [client 45.138.12.51:48392] AH01630: client denied by server configuratio
show less
Web App Attack
Bad Web Bot
๐ซ๐ท
javierin
2026-09-21 04:03:22
(42 minutes ago)
45.138.12.51 - 141.94.247.85 - - [21/Sep/2026:04:03:18 +0000] "GET /server/.git/config HTTP/1.1" 200 ...
show more
45.138.12.51 - 141.94.247.85 - - [21/Sep/2026:04:03:18 +0000] "GET /server/.git/config HTTP/1.1" 200 0 "-" "l9explore/1.2.2"
45.138.12.51 - 141.94.247.85 - - [21/Sep/2026:04:03:19 +0000] "GET /data/.git/config HTTP/1.1" 200 0 "-" "l9explore/1.2.2"
45.138.12.51 - 141.94.247.85 - - [21/Sep/2026:04:03:19 +0000] "GET /admin/.git/config HTTP/1.1" 200 0 "-" "l9explore/1.2.2"
45.138.12.51 - 141.94.247.85 - - [21/Sep/2026:04:03:20 +0000] "GET /cms/.git/config HTTP/1.1" 200 0 "-" "l9explore/1.2.2"
45.138.12.51 - 141.94.247.85 - - [21/Sep/2026:04:03:20 +0000] "GET /config/.git/config HTTP/1.1" 200 0 "-" "l9explore/1.2.2"
45.138.12.51 - 141.94.247.85 - - [21/Sep/2026:04:03:20 +0000] "GET /media../.git/config HTTP/1.1" 200 0 "-" "l9explore/1.2.2"
45.138.12.51 - 141.94.247.85 - - [21/Sep/2026:04:03:21 +0000] "GET /app/.git/config HTTP/1.1" 200 0 "-" "l9explore/1.2.2"
45.138.12.51 - 141.94.247.85 - - [21/Sep/2026:04:03:21 +0000] "GET /core/.git/config HTTP/1.1" 200 0 "-" "l9explore/1.2.2"
45.138.12.
...
show less
Hacking
Web App Attack
Anonymous
2026-09-21 04:02:35
(43 minutes ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
Anonymous
2026-09-21 03:52:12
(54 minutes ago)
Reported from Nginx log analysis 16. Log: 45.138.12.51 - - [21/Sep/2026:xx:xx:xx 0200] "GET / HTTP/ ...
show more
Reported from Nginx log analysis 16. Log: 45.138.12.51 - - [21/Sep/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "-" "-" "LT Lithuania -" "AS218785" "Tc Datacenter Limited"
show less
Port Scan
Brute-Force
SSH
Anonymous
2026-09-21 03:48:15
(58 minutes ago)
45.138.12.51 - - [21/Sep/2026:03:48:14 +0000] "\x16\x03\x01" 400 432 "-" "-"
...
Bad Web Bot
Web App Attack
๐จ๐ญ
Elysium Security
2026-09-21 03:35:42
(1 hour ago)
Mass scanning for Web CVE
Web App Attack
Anonymous
2026-09-21 03:25:15
(1 hour ago)
DNS Compromise
DDoS Attack
๐ณ๐ฑ
Alt255
2026-09-21 03:24:46
(1 hour ago)
[ti-hoogstraov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Exampl ...
show more
[ti-hoogstraov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 45.138.12.51 - - \[21/Sep/2026:05:24:28 +0200\] "GET /settings/.env HTTP/1.1" 404 7189 "-" "l9explore/1.2.2"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
bescared
2026-09-21 03:23:00
(1 hour ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
๐ธ๐ช
EmK530
2026-09-21 03:16:16
(1 hour ago)
URL flagged by RegEx: /dev/.git/config
Web App Attack