This IP address has been reported a total of
24
times from
14 distinct
sources.
192.249.114.230 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 6
reports;
Belgium
with 4
reports;
France
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
18
times;
Bad Web Bot
16
times;
Brute-Force
8
times;
Port Scan
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.lo ...
show more[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.log via rule: /storage
show less
[fail2ban]
2026-10-12T21:29:24.957358+00:00 arson caddy[1697]: {"level":"info","ts":1791840564.95734 ...
show more[fail2ban]
2026-10-12T21:29:24.957358+00:00 arson caddy[1697]: {"level":"info","ts":1791840564.9573438,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"192.249.114.230","remote_port":"57324","client_ip":"192.249.114.230","proto":"HTTP/1.1","method":"GET","host":"cp.arson.gg","uri":"/.env","headers":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Connection":["keep-alive"],"Accept-Language":["en-US,en;q=0.9"],"Cookie":["REDACTED"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"],"Accept-Encoding":["gzip, deflate"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"cp.arson.gg","ech":false}},"bytes_read":0,"user_id":"","duration":0.000052939,"size":7,"status":467,"resp_headers":{"Content-Se
...
show less
Automated report from web, SSH and FTP server logs: 63 requests probing for exposed secrets (.env, . ...
show moreAutomated report from web, SSH and FTP server logs: 63 requests probing for exposed secrets (.env, .git, config files); 112 distinct non-existent paths requested (wordlist scanning); 118 HTTP 4xx responses. First reported 2026-10-12 07:05 UTC, last reported 2026-10-12 08:05 UTC; counts cover the current log rotation window.
show less
[fail2ban]
2026-10-11T16:50:10.953074+00:00 arson caddy[1697]: {"level":"info","ts":1791737410.95306 ...
show more[fail2ban]
2026-10-11T16:50:10.953074+00:00 arson caddy[1697]: {"level":"info","ts":1791737410.95306,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"192.249.114.230","remote_port":"34212","client_ip":"192.249.114.230","proto":"HTTP/1.1","method":"GET","host":"cp.arson.gg","uri":"/.env","headers":{"Accept-Language":["en-US,en;q=0.9"],"Cookie":["REDACTED"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"],"Accept-Encoding":["gzip, deflate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Connection":["keep-alive"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"cp.arson.gg","ech":false}},"bytes_read":0,"user_id":"","duration":0.000039935,"size":7,"status":467,"resp_headers":{"X-Frame-Options":["DENY"],"Referrer-Policy":[
...
show less
