IP Address: 45.138.12.14

[arem1] 2026-09-27 18:30:03, Client: 45.138.12.14, Protocol: 6, Unauthorized activity to HTTP: GET /.git/config

Automated web attack: 454 reqs, 276 paths probed, 410 returned 404; probed: 83 .env, 61 other, 43 .json, 19 .php, 19 secret, 17 .yml, 6 .git, 6 cloud-cred, 5 script, 4 .sql, 4 config, 4 ssh-key, 2 .jsp, 2 backup, 1 log

ipban 3.1.0 - 5152

Automated web attack: 157 reqs, 153 paths probed, 141 returned 404; probed: 55 .env, 43 other, 19 .php, 14 .yml, 7 .json, 7 script, 3 cloud-cred, 2 secret, 1 backup, 1 config, 1 log

Automated web scanning: 10 reqs, 6 paths probed, 8 returned 404; probed: 6 other

Automated web attack: 4 reqs, 3 paths probed, 3 returned 404; probed: 2 other, 1 .git

ipbanpro 5.1.0

HTTP vulnerability scan

ipban 1.9.0 - Suspicious url /.env (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36)

HTTP vulnerability scan

ipban 1.9.0 - Suspicious url /wp-config (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36)

fail2ban

ipban 1.9.0 - Suspicious url /.git/HEAD (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36)

ipban 2.0.1