This IP address has been reported a total of
39
times from
31 distinct
sources.
136.70.208.1 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 12
reports;
Germany
with 9
reports;
Czechia
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
30
times;
Hacking
12
times;
Brute-Force
8
times;
Bad Web Bot
8
times;
Port Scan
4
times;
Other
7
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-13.
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.70.208.1 (US/United States/1.208. ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.70.208.1 (US/United States/1.208.70.136.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
{"level":"info","ts":1791948404.523647,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more{"level":"info","ts":1791948404.523647,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.70.208.1","remote_port":"58700","client_ip":"136.70.208.1","proto":"HTTP/2.0","method":"GET","host":"status.vanleeuwen.co","uri":"/@fs/root/.env?raw??","headers":{"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"Accept":["*/*"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.vanleeuwen.co","ech":false}},"bytes_read":0,"user_id":"","duration":0.000211623,"size":0,"status":429,"resp_headers":{"Retry-After
...
show less
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.70.208.1 (US/Uni ...
show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.70.208.1 (US/United States/District of Columbia/Washington/1.208.70.136.bc.googleusercontent.com)
show less
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
Anonymous
Bot / scanning and/or hacking attempts: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/2. ...
show moreBot / scanning and/or hacking attempts: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/2.0, GET /build/manifest.json HTTP/2.0, GET /files../.env HTTP/2.0, GET /.env HTTP/2.0, GET /dist../.env HTTP/2.0, POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend, [26/25] done: stream 51, GET /wp-content/plugins/elementor-pro/, GET /wp-content/plugins/elementor/assets/js/frontend-modules.mi, GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min, [12/12] read: stream 0, , POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_, GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d
show less
Hacking
Web App Attack
Anonymous
[server.tmg.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/@fs/.env | ...
show more[server.tmg.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/@fs/.env | /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt | /@fs/.env
show less
(PERMBLOCK) 136.70.208.1 (US/United States/District of Columbia/Washington/1.208.70.136.bc.googleuse ...
show more(PERMBLOCK) 136.70.208.1 (US/United States/District of Columbia/Washington/1.208.70.136.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
