This IP address has been reported a total of
76
times from
58 distinct
sources.
136.116.133.206 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 20
reports;
Germany
with 18
reports;
Netherlands
with 8
reports.
The most common categories in these recent reports were:
Web App Attack
57
times;
Bad Web Bot
34
times;
Brute-Force
29
times;
Hacking
7
times;
SQL Injection
6
times;
Other
10
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Clou ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Cloud secrets probing, Directory traversal
show less
Bad Web Bot
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /api/env HTTP/2.0, GET /api/settings HTTP/2.0, [33/32] s ...
show moreBot / scanning and/or hacking attempts: GET /api/env HTTP/2.0, GET /api/settings HTTP/2.0, [33/32] schedule: stream 65, GET /actuator/loggers, GET /media../.env HTTP/2.0, GET /api/v2/settings HTTP/2.0, GET /api/config HTTP/2.0, GET /health HTTP/2.0, GET /__vite_rsc_findSourceMapURL?filename=file%3A%2F%2F%2Froot%, GET /public/plugins/grafana-clock-panel/../../../../../../../.., GET /credentials.js HTTP/2.0, GET /sw.js HTTP/2.0, GET /api/v1/env HTTP/2.0, GET /__/firebase/init.json HTTP/2.0, GET /_image?href=/../../../.env HTTP/2.0, GET /config.json.js HTTP/2.0, GET /config.js HTTP/2.0, GET /swagger.json HTTP/2.0, GET /.env.js HTTP/2.0, GET /config.json HTTP/2.0, [133/129] schedule: stream 265, GET /api/v1/models, GET /actuator/loggers HTTP/2.0, GET /_astro/pages/index.astro.mjs.map HTTP/2.0, GET /@fs/.env?raw?? HTTP/2.0
show less
[FriOct0908:09:07.6230582026][security2:error][pid2317256:tid2317296][client136.116.133.206:0]ModSec ...
show more[FriOct0908:09:07.6230582026][security2:error][pid2317256:tid2317296][client136.116.133.206:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"verticalti.ch\"][uri\"/graphql\"][unique_id\"asiFAzrdrUmH3rvnJqf1IgAAABM\"]\,referer:https://verticalti.ch
show less
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /.env.js via rule: regex ...
show more[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /.env.js via rule: regex:/^\/\.env/i
show less
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show moreAttempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
