This IP address has been reported a total of
19
times from
18 distinct
sources.
136.85.60.18 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Poland
with 12
reports;
Netherlands
with 3
reports;
Czechia
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
15
times;
Bad Web Bot
8
times;
Hacking
6
times;
Brute-Force
5
times;
Port Scan
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-bad-user-agent, http-path-traversal-probing, http-probing, http-sensitive-files. 19 matching log events between 2026-10-19T22:12:20Z and 22:12:22Z (UTC). Sample requests: GET /@fs/proc/self/environ?import&raw?? -> 301; GET /_nuxt/../.env -> 301; GET /@fs/proc/self/environ/?import&raw& -> 404; GET /_image?href=/../../../.env -> 301; GET /.env.development?raw -> 404; GET /.ghost/analytics/api/.env -> 301; GET /.env?import&url&inline -> 301; GET /.env.local?raw -> 404; GET /manifest.json -> 404; GET /assets/manifest.json -> 404; GET /dist/manifest.json -> 404; GET /static/manifest.json -> 404; GET /webpack-stats.json/ -> 404; GET /asset-manifest.json/ -> 404; POST /_next -> 404; GET /vq7b59smkvbq9e3r6qx5/ -> 404; POST /graphql -> 404; GET /v82glfva9h91xqhyeg18/ -> 404
show less
ketovoila.pl web app secret/repository scan: hits=372; unique_paths=136; sample_paths=/....//....//. ...
show moreketovoila.pl web app secret/repository scan: hits=372; unique_paths=136; sample_paths=/....//....//....//..../.env,/.//.env,/.docker/secrets.json; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"; window=2026-10-19T17:10:38Z..2026-10-19T17:10:41Z HTTP methods: GET (338),POST (34).
show less
166 hits/scans since midnight. Automated enumeration attempting path traversal (proc/self/environ, k ...
show more166 hits/scans since midnight. Automated enumeration attempting path traversal (proc/self/environ, kubernetes secrets, parent directory tricks) and probing for login panels, cloud/firebase configurations, and vulnerable endpoint parameters. Blocked by firewall. The report covers the period from midnight.
show less
2026-10-19 13:44:31,970 fail2ban.actions [3458767]: NOTICE [nginx-botsearch] Ban 136.85.60.1 ...
show more2026-10-19 13:44:31,970 fail2ban.actions [3458767]: NOTICE [nginx-botsearch] Ban 136.85.60.18
2026-10-19 17:49:03,112 fail2ban.actions [3458767]: NOTICE [nginx-botsearch] Ban 136.85.60.18
show less
Automated Wazuh observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing ...
show moreAutomated Wazuh observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching Wazuh alert(s) between 2026-10-19T15:29:59+02:00 and 2026-10-19T15:29:59+02:00.
show less
