This IP address has been reported a total of
51
times from
13 distinct
sources.
172.69.138.16 was first reported on
March 11th 2021 , and the most recent report was
5 days ago United States of America
with 5
reports;
Belarus
with 4
reports;
Belgium
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
9
times;
Port Scan
8
times;
Bad Web Bot
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇯🇵
S.O.B.A. Dev.
2026-10-06 17:25:24
(5 days ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇧🇪
madeit
2026-10-01 11:55:17
(1 week ago)
Web App Attack
🇫🇷
dynamix
2026-09-23 13:27:20
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-09-22 13:57:42
(2 weeks ago)
Web App Attack
2026-09-20 19:56:40
(3 weeks ago)
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; ...
show more
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.138.16 - - [20/Sep/2026:19:56:33 +0000] "GET /.env.dev HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [20/Sep/2026:19:56:34 +0000] "GET /.env.stage HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [20/Sep/2026:19:56:34 +0000] "GET /.env.docker HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [20/Sep/2026:19:56:35 +0000] "GET /.env.preprod HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [20/Sep/2026:19:56:35 +0000] "GET /.env.dist HTTP/1.1"
show less
Port Scan
🇵🇱
Jacqb
2026-09-18 09:28:05
(3 weeks ago)
Adres potencjalnie niebezpieczny
Brute-Force
Web App Attack
Bad Web Bot
🇯🇵
S.O.B.A. Dev.
2026-09-16 09:14:05
(3 weeks ago)
Persistent port scanning or vulnerability scanning
Port Scan
2026-09-12 06:28:05
(1 month ago)
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; ...
show more
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:06:27:58 +0000] "GET /public/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:06:27:59 +0000] "GET /backend/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:06:28:00 +0000] "GET /frontend/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:06:28:00 +0000] "GET /core/app/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:06:28:01 +0000] "GET /application/.env HTTP/1.1"
show less
Port Scan
2026-09-12 03:29:16
(1 month ago)
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; ...
show more
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:03:29:09 +0000] "GET /deploy/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:03:29:10 +0000] "GET /dist/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:03:29:11 +0000] "GET /html/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:03:29:12 +0000] "GET /dev/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [12/Sep/2026:03:29:12 +0000] "GET /laravel/.env HTTP/1.1"
show less
Port Scan
2026-09-03 03:26:12
(1 month ago)
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; ...
show more
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.138.16 - - [03/Sep/2026:03:26:05 +0000] "GET /bootstrap/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [03/Sep/2026:03:26:05 +0000] "GET /storage/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [03/Sep/2026:03:26:06 +0000] "GET /var/www/html/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [03/Sep/2026:03:26:06 +0000] "GET /release/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [03/Sep/2026:03:26:07 +0000] "GET /shared/.env HTTP/1.1"
show less
Port Scan
2026-09-02 19:33:30
(1 month ago)
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; ...
show more
(caddyscan) Scanner path probe from 172.69.138.16 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.138.16 - - [02/Sep/2026:19:33:24 +0000] "GET /uploads/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [02/Sep/2026:19:33:25 +0000] "GET /scripts/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [02/Sep/2026:19:33:25 +0000] "GET /local/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [02/Sep/2026:19:33:26 +0000] "GET /panel/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.138.16 - - [02/Sep/2026:19:33:26 +0000] "GET /crm/.env HTTP/1.1"
show less
Port Scan
🇯🇵
S.O.B.A. Dev.
2026-08-31 17:17:37
(1 month ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇧🇪
madeit
2026-08-24 11:39:45
(1 month ago)
Web App Attack
🇧🇾
lns.bz
2026-08-21 11:13:53
(1 month ago)
Too many 404 requests [BY]
Web App Attack
🇧🇾
lns.bz
2026-08-18 01:49:53
(1 month ago)
Too many 404 requests [BY]
Web App Attack
Showing 1 to
15
of 51 reports
