This IP address has been reported a total of
6
times from
6 distinct
sources.
136.113.187.20 was first reported on
October 21st 2026 , and the most recent report was
4 days ago Germany
with 1
report;
France
with 1
report;
United Kingdom of Great Britain and Northern Ireland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
3
times;
Hacking
2
times;
Port Scan
2
times;
Brute-Force
1
time;
VPN IP
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-21 19:27:23
(4 days ago)
Blocked by ModSec and CSF
Port Scan
🇫🇷
masterguru
2026-10-21 19:27:06
(4 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)
Hacking
🇲🇹
Malta
2026-10-21 19:25:24
(4 days ago)
136.113.187.20 - - [21/Oct/2026:21:25:24 +0200] "GET /?author=1 HTTP/1.1" "Mozilla/5.0 (Windows NT 1 ...
show more
136.113.187.20 - - [21/Oct/2026:21:25:24 +0200] "GET /?author=1 HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Hacking
Web App Attack
VPN IP
🇮🇹
VHosting
2026-10-21 19:25:04
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
maxpower
2026-10-21 19:24:58
(4 days ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.113.187.20 (US/United States/20.187.113.13 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.113.187.20 (US/United States/20.187.113.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.113.187.20 - - [21/Oct/2026:21:24:54 +0200] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 1362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" host=emmeimpiantimilano.it
show less
Port Scan
🇺🇸
IndigoRidge
2026-10-21 19:24:09
(4 days ago)
136.113.187.20 - - [21/Oct/2026:15:24:03 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 487 ...
show more
136.113.187.20 - - [21/Oct/2026:15:24:03 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 4872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
136.113.187.20 - - [21/Oct/2026:15:24:04 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 5496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
136.113.187.20 - - [21/Oct/2026:15:24:05 -0400] "GET //?author=1 HTTP/1.1" 301 4748 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
136.113.187.20 - - [21/Oct/2026:15:24:06 -0400] "GET //?author=2 HTTP/1.1" 301 4756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
136.113.187.20 - - [21/Oct/2026:15:24:07 -0400] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 13110 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi
...
show less
Web App Attack
Showing 1 to
6
of 6 reports
