๐ฉ๐ช
sfmet-admin
2026-09-21 20:49:52
(1 minute ago)
45.138.12.6 - - [21/Sep/2026:20:49:51 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (X1 ...
show more
45.138.12.6 - - [21/Sep/2026:20:49:51 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-21 20:48:46
(3 minutes ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐ซ๐ท
baphomet
2026-09-21 20:46:20
(5 minutes ago)
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show more
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-09-21T20:46:20Z sensor=fail2ban role=web-canary
src=45.138.12.6
show less
Web App Attack
๐ช๐ธ
robotstxt
2026-09-21 20:46:08
(5 minutes ago)
45.138.12.6 - - [21/Sep/2026:20:43:45 +0000] "GET /.git/config HTTP/1.1" 403 15772 "https://durky.ne ...
show more
45.138.12.6 - - [21/Sep/2026:20:43:45 +0000] "GET /.git/config HTTP/1.1" 403 15772 "https://durky.net/.git/config" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "-" edge="45.138.12.6"
45.138.12.6 - - [21/Sep/2026:20:43:46 +0000] "GET /.git/config HTTP/1.1" 403 15772 "https://durky.net/.git/config" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "-" edge="45.138.12.6"
45.138.12.6 - - [21/Sep/2026:20:43:46 +0000] "GET /.git/config HTTP/1.1" 403 15772 "https://durky.net/.git/config" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "-" edge="45.138.12.6"
45.138.12.6 - - [21/Sep/2026:20:45:40 +0000] "GET /.git/config HTTP/1.1" 403 15772 "https://www.ilusionoptica.net/.git/config" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "-" edge="45.138.12.6"
45.138.12.6 - - [21/
...
show less
Web App Attack
Anonymous
2026-09-21 20:44:30
(7 minutes ago)
(caddyscan) Scanner path probe from 45.138.12.6 (GB/United Kingdom/-): 5 in the last 3600 secs; Port ...
show more
(caddyscan) Scanner path probe from 45.138.12.6 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 404 218 45.138.12.6 - - [21/Sep/2026:20:43:24 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 404 218 45.138.12.6 - - [21/Sep/2026:20:43:24 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 45.138.12.6 - - [21/Sep/2026:20:44:23 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 45.138.12.6 - - [21/Sep/2026:20:44:23 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 45.138.12.6 - - [21/Sep/2026:20:44:28 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
๐ธ๐ช
eagle
2026-09-21 20:42:39
(9 minutes ago)
45.138.12.6 - - [21/Sep/2026:20:42:38 +0000] "GET /.git/config HTTP/1.1" 404 184 "-" "Mozilla/5.0 (X ...
show more
45.138.12.6 - - [21/Sep/2026:20:42:38 +0000] "GET /.git/config HTTP/1.1" 404 184 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฏ๐ต
ki3
2026-09-21 20:40:48
(11 minutes ago)
Fail2Ban: Web App Attacks and Forum Spam 45.138.12.6 1790023248.0(JST)
Web Spam
Bad Web Bot
Web App Attack
๐ฉ๐ช
TheDjRider
2026-09-21 20:40:41
(11 minutes ago)
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ...
show more
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-09-21T20:40:38.684116728Z. Context: http_status=404
show less
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-21 20:39:53
(11 minutes ago)
cloudlinux2 fail2ban: 2026-09-21 21:49:50,684 fail2ban.filter [1598]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-21 21:49:50,684 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.101.76.213 - 2026-09-21 21:49:50cloudlinux2 fail2ban: 2026-09-21 21:49:59,807 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.93.40.82 - 2026-09-21 21:49:59cloudlinux2 fail2ban: 2026-09-21 21:49:59,816 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.93.40.82 - 2026-09-21 21:49:59cloudlinux2 fail2ban: 2026-09-21 21:50:01,007 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 136.85.4.152 - 2026-09-21 21:50:01cloudlinux2 fail2ban: 2026-09-21 21:50:55,368 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 45.138.12.6 - 2026-09-21 21:50:55cloudlinux2 fail2ban: 2026-09-21 21:50:55,519 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 45.138.12.6 - 2026-09-21 21:50:55cloudlinux2 fail2ban: 2026-09-21 21:51:15,452 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 139.64.12.37 - 2026-09-21 21:51:15cloud
show less
Brute-Force
๐ซ๐ท
Lino Project
2026-09-21 20:38:39
(13 minutes ago)
45.138.12.6 - - [21/Sep/2026:22:38:34 +0200] "GET /.git/config HTTP/1.1" 302 5762 "-" "Mozilla/5.0 ( ...
show more
45.138.12.6 - - [21/Sep/2026:22:38:34 +0200] "GET /.git/config HTTP/1.1" 302 5762 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
45.138.12.6 - - [21/Sep/2026:22:38:36 +0200] "GET /.git/config HTTP/1.1" 302 5762 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Interceptor_HQ
2026-09-21 20:36:39
(15 minutes ago)
request_uri: /.git/config -- automatic report --
Brute-Force
Hacking
๐ณ๐ฑ
ipoac.nl
2026-09-21 20:34:13
(17 minutes ago)
-:443 45.138.12.6 - - [21/Sep/2026:22:34:11 +0200] - "GET /.git/config HTTP/1.1" 404 7394 "-" "Mozil ...
show more
-:443 45.138.12.6 - - [21/Sep/2026:22:34:11 +0200] - "GET /.git/config HTTP/1.1" 404 7394 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Bad Web Bot
๐ฉ๐ช
YF
2026-09-21 20:30:20
(21 minutes ago)
Git config exposure probe
Web App Attack
Anonymous
2026-09-21 20:30:07
(21 minutes ago)
45.138.12.6 - - [21/Sep/2026:22:30:05 +0200] "GET /.git/config HTTP/1.1" 404 11793 "-" "Mozilla/5.0 ...
show more
45.138.12.6 - - [21/Sep/2026:22:30:05 +0200] "GET /.git/config HTTP/1.1" 404 11793 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Dominik Lysiak
2026-09-21 20:26:43
(25 minutes ago)
45.138.12.6 - - [21/Sep/2026:22:26:42 +0200] "GET /.git/config HTTP/1.1" 404 273 "-" "Mozilla/5.0 (X ...
show more
45.138.12.6 - - [21/Sep/2026:22:26:42 +0200] "GET /.git/config HTTP/1.1" 404 273 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
45.138.12.6 - - [21/Sep/2026:22:26:42 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
45.138.12.6 - - [21/Sep/2026:22:26:42 +0200] "GET /.git/config HTTP/1.1" 404 273 "http://matomo.campertrader.org/.git/config" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Web App Attack