Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 136.85.101.130
This IP address has been reported a total of
22
times from
22 distinct
sources.
136.85.101.130 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 18
reports;
Netherlands
with 2
reports;
Czechia
with 1
report.
The most common categories in these recent reports were:
Web App Attack
13
times;
Brute-Force
8
times;
Hacking
5
times;
Bad Web Bot
5
times;
SQL Injection
1
time;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Bot / scanning and/or hacking attempts: GET /.env.dev HTTP/2.0, GET /actuator/env HTTP/2.0, GET /con ...
show moreBot / scanning and/or hacking attempts: GET /.env.dev HTTP/2.0, GET /actuator/env HTTP/2.0, GET /configuration.php.bak HTTP/2.0, GET /telescope/requests HTTP/2.0, GET /actuator/configprops HTTP/2.0, GET /_debugbar/open HTTP/2.0, GET /_ignition/health-check HTTP/2.0, POST /graphql HTTP/2.0, GET /wp-config.old HTTP/2.0, GET /config/application.properties HTTP/2.0, GET /bootstrap.properties HTTP/2.0, GET /storage/.env HTTP/2.0, GET /application.yml HTTP/2.0, GET /wp-config.php.swp HTTP/2.0, GET /application.properties HTTP/2.0, GET /wp/.env HTTP/2.0, GET /horizon/api/stats HTTP/2.0, GET /config/secrets.yml HTTP/2.0, GET /wp-config.php~ HTTP/2.0, GET /bootstrap.yml HTTP/2.0, GET /config.php.bak HTTP/2.0, GET /signup HTTP/2.0, GET /.env.swp HTTP/2.0
show less
Hacking
Web App Attack
Anonymous
136.85.101.130 - - [21/Sep/2026:05:38:08 +0200] "GET /userfiles?path=../../../.env HTTP/2.0" 403 272 ...
show more136.85.101.130 - - [21/Sep/2026:05:38:08 +0200] "GET /userfiles?path=../../../.env HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
show less
Fail2ban automatic report for plesk-apache-badbot: 136.85.101.130 - - [21/Sep/2026:02:13:14 +0200] G ...
show moreFail2ban automatic report for plesk-apache-badbot: 136.85.101.130 - - [21/Sep/2026:02:13:14 +0200] GET /.aws/config [DOMAIN_REMOVED] 404 6519 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +[DOMAIN_REMOVED]
show less
{"level":"info","ts":1789949253.5392692,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1789949253.5392692,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.85.101.130","remote_port":"60336","client_ip":"136.85.101.130","proto":"HTTP/2.0","method":"GET","host":"status.plusforta.de","uri":"/.aws/credentials","headers":{"User-Agent":["Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"],"Accept-Encoding":["gzip"],"Accept":["*/*"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.plusforta.de","ech":false}},"bytes_read":0,"user_id":"","duration":0.00011498,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1789949253.5571198,"logger":"http.log.access.log1","msg":"handled request","r
...
show less
