This IP address has been reported a total of
30
times from
26 distinct
sources.
5.249.179.48 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 7
reports;
Germany
with 5
reports;
United States of America
with 4
reports.
The most common categories in these recent reports were:
Web App Attack
23
times;
Hacking
11
times;
Brute-Force
9
times;
Bad Web Bot
7
times;
Port Scan
2
times;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-18.
show less
Web App Attack
SSH
Hacking
Anonymous
5.249.179.48 - - [19/Oct/2026:17:07:10 -0300] "GET /.env HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Windows ...
show more5.249.179.48 - - [19/Oct/2026:17:07:10 -0300] "GET /.env HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
5.249.179.48 - - [19/Oct/2026:17:07:10 -0300] "GET /.env.local HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
{"level":"info","ts":1792401630.1905324,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792401630.1905324,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"5.249.179.48","remote_port":"53167","client_ip":"5.249.179.48","proto":"HTTP/2.0","method":"GET","host":"status.cnil.fr","uri":"/db.sql","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Google Chrome\";v=\"152\", \"Not.A/Brand\";v=\"99\""],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Site":["none"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Mobile":["?0"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Dest":["document"],"Accept-Language":["fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7"],"Accept-Encoding":["gzip, deflate, br"]},"tls":{"resumed":false,"version":772,"cipher_suite":48
...
show less
2026-10-19T08:58:37+01:00 NAS [Mon Oct 19 08:58:37.433054 2026] [proxy_fcgi:error] [pid 4147:tid 418 ...
show more2026-10-19T08:58:37+01:00 NAS [Mon Oct 19 08:58:37.433054 2026] [proxy_fcgi:error] [pid 4147:tid 4189] [client 5.249.179.48:33240] AH01071: Got error 'Primary script unknown'
...
show less
