This IP address has been reported a total of
9
times from
9 distinct
sources.
136.113.54.166 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 4
reports;
Switzerland
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Brute-Force
3
times;
Hacking
3
times;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Single-source CMS scanner (CMS-Checker UA) enumerated XML-RPC, wp-json users, author IDs and wlwmani ...
show moreSingle-source CMS scanner (CMS-Checker UA) enumerated XML-RPC, wp-json users, author IDs and wlwmanifest against the web service.
Target: WordPress xmlrpc.php, wp-json users, author enumeration
Seen: 2026-10-18 11:10 EDT
- 2026-10-18 11:10:27 POST //xmlrpc.php HTTP/2.0 status 403 from 136.113.54.166, UA 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36'
- 2026-10-18 11:10:28 GET //wp-json/wp/v2/users/ HTTP/2.0 status 401 from 136.113.54.166
- 2026-10-18 11:10:28 GET //?author=1 and //?author=2 HTTP/2.0 status 500 from 136.113.54.166
- 2026-10-18 11:10:27 GET //wp-includes/wlwmanifest.xml HTTP/2.0 status 301 from 136.113.54.166
show less
(wordpress) Failed wordpress login from 136.113.54.166 (US/United States/166.54.113.136.bc.googleuse ...
show more(wordpress) Failed wordpress login from 136.113.54.166 (US/United States/166.54.113.136.bc.googleusercontent.com)
show less
(xmlrpc) Apache: Failed xmlrpc access from 136.113.54.166 (US/United States/166.54.113.136.bc.google ...
show more(xmlrpc) Apache: Failed xmlrpc access from 136.113.54.166 (US/United States/166.54.113.136.bc.googleusercontent.com): 10 in the last 3600 secs (0-201)
show less
[SunOct1817:07:34.7957752026][security2:error][pid3203847:tid3203912][client136.113.54.166:0]ModSecu ...
show more[SunOct1817:07:34.7957752026][security2:error][pid3203847:tid3203912][client136.113.54.166:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.support-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"atTgtnLe9LfIwZyWbLSqGQAAAMg\"]
show less
