This IP address has been reported a total of
29
times from
20 distinct
sources.
136.116.123.48 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 11
reports;
Sweden
with 7
reports;
Finland
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
24
times;
Brute-Force
13
times;
Bad Web Bot
10
times;
Hacking
5
times;
DDoS Attack
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":"2026-10-11T13:39:22Z","logger":"http.log.access.log2","msg":"handled request", ...
show more{"level":"info","ts":"2026-10-11T13:39:22Z","logger":"http.log.access.log2","msg":"handled request","request":{"remote_ip":"136.116.123.48","remote_port":"43832","client_ip":"136.116.123.48","proto":"HTTP/2.0","method":"GET","host":"cloud.botwork.se","uri":"/z9x8c7v6b5-debug-trigger-cloud.botwork.se","headers":{"User-Agent":["Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"],"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"cloud.botwork.se","ech":false}},"bytes_read":0,"user_id":"","duration":0.097975742,"size":1744,"status":404,"resp_headers":{"Via":["1.1 Caddy"],"Content-Length":["1744"],"X-Robots-Tag":["noindex, nofollow"],"Feature-Policy":["autoplay 'self';
...
show less
{"level":"info","ts":"2026-10-11T05:14:44Z","logger":"http.log.access.log8","msg":"handled request", ...
show more{"level":"info","ts":"2026-10-11T05:14:44Z","logger":"http.log.access.log8","msg":"handled request","request":{"remote_ip":"136.116.123.48","remote_port":"34610","client_ip":"136.116.123.48","proto":"HTTP/2.0","method":"GET","host":"authentik.botwork.se","uri":"/377e544jl435gicic0f2","headers":{"Accept":["*/*"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"authentik.botwork.se","ech":false}},"bytes_read":0,"user_id":"","duration":0.168688323,"size":5560,"status":404,"resp_headers":{"Content-Language":["en"],"X-Powered-By":["authentik"],"Strict-Transport-Security":["max-age=31536000"],"Server":[
...
show less
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /.env::$DATA?raw HTTP/2.0, GET /api/orders/..%2f..%2fpro ...
show moreBot / scanning and/or hacking attempts: GET /.env::$DATA?raw HTTP/2.0, GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0, GET /web/.env HTTP/2.0, GET /.env.production::$DATA?raw HTTP/2.0, GET /services/.env HTTP/2.0, GET /bot/.env HTTP/2.0, GET /api/data/..%2f..%2f.env HTTP/2.0, GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/2.0, GET /privatekey.key HTTP/2.0, GET /_nuxt/../.env HTTP/2.0, GET /api/orders/..%2f..%2f.env HTTP/2.0, GET /serverless.yaml HTTP/2.0, GET /.ssh/known_hosts HTTP/2.0, GET /@fs/src/.env?raw?? HTTP/2.0, GET /ai/.env HTTP/2.0, GET /id_rsa HTTP/2.0, GET /.profile HTTP/2.0, GET /api/orders/..%2fadmin/config.json HTTP/2.0, GET /.env.local::$DATA?raw HTTP/2.0, GET /@fs/root/.env?raw?? HTTP/2.0, GET /var/.env HTTP/2.0, GET /config/env/aws_credentials.env HTTP/2.0, GET /.bash_profile HTTP/2.0, GET /values.yaml HTTP/2.0
show less
(mod_security) mod_security triggered on hostname [redacted] 136.116.123.48 (US/United States/48.123 ...
show more(mod_security) mod_security triggered on hostname [redacted] 136.116.123.48 (US/United States/48.123.116.136.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, Bad ...
show moreFlagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, BadPath=23,8, Rate=20, Diversity=19,8.
show less
