This IP address has been reported a total of
31
times from
22 distinct
sources.
8.228.14.74 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1781073272.8072422,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1781073272.8072422,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"8.228.14.74","remote_port":"37936","client_ip":"8.228.14.74","proto":"HTTP/1.1","method":"GET","host":"update.zupdate.rqponmlkjilkjilkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/.env.example","headers":{"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.5(0x17000523) NetType/WIFI Language/zh_CN"]}},"bytes_read":0,"user_id":"","duration":0.000092566,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://update.zupdate.rqponmlkjilkjilkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/.env.example"]}}
{"level":"info","ts":1781073272.8115504,"logger":"http.log.access.log1","msg":"handled requ
...
show less
DDoS Attack
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /api/v1/.env HTTP/1.1, GET /v3/.env HTTP/1.1, GET /.env ...
show moreBot / scanning and/or hacking attempts: GET /api/v1/.env HTTP/1.1, GET /v3/.env HTTP/1.1, GET /.env HTTP/1.1, GET /.env.qa HTTP/1.1, GET /app/.env.prod HTTP/1.1, GET /app/.env.staging HTTP/1.1, GET /app/backend/.env HTTP/1.1, GET /frontend/.env.staging HTTP/1.1, GET /api/.env.production HTTP/1.1, GET /env HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.prod HTTP/1.1, GET /app/.env.dev HTTP/1.1, GET /wp/.env HTTP/1.1, GET /api/.env.old HTTP/1.1, GET /api/.env.staging HTTP/1.1, GET /.env.development HTTP/1.1, GET /www/.env HTTP/1.1, GET /.env.staging HTTP/1.1
show less
148 attacks on env grabbing URLs, too many concurrent requests:
GET /.env.example HTTP/1.1
GET /env. ...
show more148 attacks on env grabbing URLs, too many concurrent requests:
GET /.env.example HTTP/1.1
GET /env.bak HTTP/1.1
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less