This IP address has been reported a total of
10
times from
9 distinct
sources.
136.116.138.1 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Turkey
with 5
reports;
Belgium
with 2
reports;
United Kingdom of Great Britain and Northern Ireland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
7
times;
Bad Web Bot
3
times;
Brute-Force
3
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-blocked by Seczar SecureOps — WAF — SQL Injection Attack Burst (10 events in 10min) at 2026-10- ...
show moreAuto-blocked by Seczar SecureOps — WAF — SQL Injection Attack Burst (10 events in 10min) at 2026-10-19 15:08
show less
Security attack detected. Multiple failed attempts from 136.116.138.1. IP banned for 1440 minutes at ...
show moreSecurity attack detected. Multiple failed attempts from 136.116.138.1. IP banned for 1440 minutes at 19.10.2026 16:18:16. Failed attempts: 1
show less
Web attack blocked by WAF: GET /wp-admin/.env, GET /.npmrc, GET /.dev.vars (Direct access to sensiti ...
show moreWeb attack blocked by WAF: GET /wp-admin/.env, GET /.npmrc, GET /.dev.vars (Direct access to sensitive file or dotfile; [RBL] Dirb like fuzzing).
[19/Oct/2026:15:19:50 +0300] "GET /wp-admin/.env HTTP/1.1" UA="Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" -> Direct access to sensitive file or dotfile
[19/Oct/2026:15:19:50 +0300] "GET /.npmrc HTTP/1.1" UA="Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" -> [RBL] Dirb like fuzzing; Hidden file access
[19/Oct/2026:15:19:50 +0300] "GET /.dev.vars HTTP/1.1" UA="Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/d" -> Hidden file access
show less
