This IP address has been reported a total of
55
times from
48 distinct
sources.
136.113.54.200 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 11
reports;
United States of America
with 10
reports;
Germany
with 8
reports.
The most common categories in these recent reports were:
Web App Attack
34
times;
Bad Web Bot
22
times;
Brute-Force
17
times;
Port Scan
4
times;
Hacking
4
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.113.54.200 (US/U ...
show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.113.54.200 (US/United States/200.54.113.136.bc.googleusercontent.com)
show less
Fail2ban automatic report for plesk-apache-badbot: 136.113.54.200 - - [07/Oct/2026:21:54:43 +0200] G ...
show moreFail2ban automatic report for plesk-apache-badbot: 136.113.54.200 - - [07/Oct/2026:21:54:43 +0200] GET /.htpasswd [DOMAIN_REMOVED] 403 146 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@[DOMAIN_REMOVED])
show less
[07/Oct/2026:22:17:35 +0300] -- 136.113.54.200 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more[07/Oct/2026:22:17:35 +0300] -- 136.113.54.200 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /assets/manifest.json HTTP/1.1
show less
[ti-17al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-17al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.113.54.200 - - [07/Oct/2026:21:16:28 +0200] "GET /.ssh/id_rsa HTTP/2.0" 410 499 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
136.113.54.200 - - [07/Oct/2026:21:16:28 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 403 535 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Bad Web Bot
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /index.php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_ ...
show moreBot / scanning and/or hacking attempts: GET /index.php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_fil, GET /index.php HTTP/2.0, [128/127] schedule: stream 255, GET /index.php?-d+allow_url_inc, [124/123] done: stream 245, GET /index.php?sense_version=%40%40, POST /index.php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_fi, GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/2.0, POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_, GET /api/data/..%2f..%2f.env HTTP/2.0, POST /php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_, GET /@fs/root/.aws/credentials?raw?? HTTP/2.0, POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%, POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_
show less
