This IP address has been reported a total of
22
times from
18 distinct
sources.
136.65.249.131 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 6
reports;
France
with 3
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
17
times;
Brute-Force
5
times;
Bad Web Bot
5
times;
Hacking
5
times;
Exploited Host
2
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-21.
show less
(mod_security) mod_security (id:949110) triggered by 136.65.249.131 (US/United States/131.249.65.136 ...
show more(mod_security) mod_security (id:949110) triggered by 136.65.249.131 (US/United States/131.249.65.136.bc.googleusercontent.com): 3 in the last 3600 secs; ID: LUC
show less
Brute-Force
Bad Web Bot
Anonymous
| Multiple common web attacks from same source ip. (multiple servers)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show moreHTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.65.249.131 - - [21/Oct/2026:18:32:20 +0200] "GET /public../.env HTTP/2.0" 301 353 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
...
show less
Bad Web Bot
Web App Attack
Anonymous
Web probing (532 hits in 24h) on default-vhost,www.historischarchiefvalkenburg.nl: sensitive-path sc ...
show moreWeb probing (532 hits in 24h) on default-vhost,www.historischarchiefvalkenburg.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
Anonymous
Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Web app ...
show moreWeb application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
show less
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show moreHTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-201)
show less
