This IP address has been reported a total of
23
times from
23 distinct
sources.
136.111.52.194 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
21.660 requests with url.path //xmlrpc.php
21.643 requests with url.path */xmlrpc.php
10.537 requ ...
show more21.660 requests with url.path //xmlrpc.php
21.643 requests with url.path */xmlrpc.php
10.537 requests with url.path */wp-includes/wlwmanifest.xml
show less
Automated report from Atlas Development (atlas-development.net) edge protection. Systematic path enu ...
show moreAutomated report from Atlas Development (atlas-development.net) edge protection. Systematic path enumeration detected: 4 distinct endpoints probed within 10 minutes, cycling through common CMS install-path guesses. Sample: GET /blog/wp-includes/wlwmanifest.xml (404) GET /xmlrpc.php (404) GET /feed (404) GET /wp-includes/id3/license.txt (404)
show less
(wordpress) Failed wordpress login from 136.111.52.194 (US/United States/194.52.111.136.bc.googleuse ...
show more(wordpress) Failed wordpress login from 136.111.52.194 (US/United States/194.52.111.136.bc.googleusercontent.com)
show less
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN WordPress Scanner Performing Multiple Reque ...
show moreWazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML) detectado de 136.111.52.194
show less
http-probing - IP: 136.111.52.194 - time="2026-09-13T15:35:05+02:00" level=info msg="(555f66b4f6a74 ...
show morehttp-probing - IP: 136.111.52.194 - time="2026-09-13T15:35:05+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 136.111.52.194 (US/396982) : 4h ban on Ip 136.111.52.194" module=db
show less
(xmlrpc) Failed xmlrpc access from 136.111.52.194 (US/United States/194.52.111.136.bc.googleusercont ...
show more(xmlrpc) Failed xmlrpc access from 136.111.52.194 (US/United States/194.52.111.136.bc.googleusercontent.com): 5 in the last 3600 secs (0-122)
show less
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 136.111.52.194, Reason ...
show moreCluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 136.111.52.194, Reason:[(manifest) WordPress wlwmanifest.xml Attack 136.111.52.194 (US/United States/194.52.111.136.bc.googleusercontent.com): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show moreAsking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-13 13:29 UTC
show less