This IP address has been reported a total of
173
times from
142 distinct
sources.
136.70.165.31 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 43
reports;
United States of America
with 32
reports;
Netherlands
with 18
reports.
The most common categories in these recent reports were:
Web App Attack
147
times;
Bad Web Bot
53
times;
Brute-Force
39
times;
Hacking
33
times;
Port Scan
7
times;
Other
20
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[cb17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apach ...
show more[cb17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 136.70.165.31 - - [26/Oct/2026:11:01:58 +0100] "GET /.git/config HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/121.0.0.0"
136.70.165.31 - - [26/Oct/2026:11:01:59 +0100] "GET /.git/credentials HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/121.0.0.0"
136.70.165.31 - - [26/Oct/2026:11:01:59 +0100] "GET /.git-credentials HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/121.0.0.0"
136.70.165.31 - - [26/Oct/2026:11:02:00 +0100] "G
...
show less
Bad Web Bot
Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 136.70.165.31 (US/United States/31.165. ...
show more(mod_security) mod_security triggered on hostname [redacted] 136.70.165.31 (US/United States/31.165.70.136.bc.googleusercontent.com)
show less
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked ...
show moreBusted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-10-26 07:11 UTC.
show less
Web App Attack
Anonymous
IP matched detection query 20 more in short time bad rqs.
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show moreWeb scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
404 burst: 20 hits in 5 min, URI /secrets.yml, Ref , UA Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ...
show more404 burst: 20 hits in 5 min, URI /secrets.yml, Ref , UA Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 Edg/137.0.0.0
show less
Automated requests against a hosted website: 130 requests between 06:00 and 06:59 UTC; 42 probes for ...
show moreAutomated requests against a hosted website: 130 requests between 06:00 and 06:59 UTC; 42 probes for exposed secrets/config files (/.git/credentials, /.git/configf, /.env). Reported automatically.
show less