Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1793107251.7816634,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"45.139.104.58","remote_port":"55880","client_ip":"45.139.104.58","proto":"HTTP/1.1","method":"GET","host":"status.hiltonitems.com" ...
show more{"level":"info","ts":1793107251.7816634,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"45.139.104.58","remote_port":"55880","client_ip":"45.139.104.58","proto":"HTTP/1.1","method":"GET","host":"status.hiltonitems.com","uri":"/.env","headers":{"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"],"Connection":["Close"]}},"bytes_read":0,"user_id":"","duration":0.000071166,"size":0,"status":308,"resp_headers":{"Location":["https://status.hiltonitems.com/.env"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}}
{"level":"info","ts":1793107251.9276521,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"45.139.104.58","remote_port":"56381","client_ip":"45.139.104.58","proto":"HTTP/1.1","method":"GET","host":"status.hiltonitems.com","uri":"/.env.local","headers":{"Connection":["Close"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"]}},"bytes_read":0,"user_id":"",
...
show less
CrowdSec ban: crowdsecurity/http-probing (e.g. /.env.local); first seen 2026-10-27T00:39:21Z, last seen 2026-10-27T00:39:21Z; reported by WOPR honeypot nedry.wopr.systems
Web App Attack
Bad Web Bot
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
