This IP address has been reported a total of
19
times from
18 distinct
sources.
136.108.168.99 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
United States of America
with 4
reports;
France
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
15
times;
Brute-Force
7
times;
Hacking
6
times;
Bad Web Bot
2
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"ClientAddr":"136.108.168.99:56031","ClientHost":"136.108.168.99","ClientPort":"56031","ClientUsern ...
show more{"ClientAddr":"136.108.168.99:56031","ClientHost":"136.108.168.99","ClientPort":"56031","ClientUsername":"-","DownstreamContentSize":416,"DownstreamStatus":403,"Duration":377856858,"OriginContentSize":416,"OriginDuration":375159643,"OriginStatus":403,"Overhead":2697215,"RequestAddr":"www.cleveradmin.de","RequestContentSize":489,"RequestCount":1893395,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-10-08T13:34:16.756540688+02:00","StartUTC":"2026-10-08T11:34:16.756540688Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-10-08T13:34:17+02:00"}
{"ClientAddr":"136.108.168.99:56031","ClientHost":"136.108.168.9
...
show less
Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ...
show moreAutomated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-includes/wlwmanifest.xml -> 404 UA=""; GET /xmlrpc.php?rsd -> 404 UA=""; GET /blog/wp-includes/wlwmanifest.xml -> 404 UA=""; GET /web/wp-includes/wlwmanifest.xml -> 404 UA=""; GET /wordpress/wp-includes/wlwmanifest.xml -> 404 UA=""
show less