This IP address has been reported a total of
9
times from
9 distinct
sources.
136.119.191.203 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Italy
with 2
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
8
times;
Brute-Force
3
times;
Bad Web Bot
2
times;
Hacking
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sent 30+ rapid HTTP GET requests enumerating .php/webshell paths on a public WordPress site (mostly ...
show moreSent 30+ rapid HTTP GET requests enumerating .php/webshell paths on a public WordPress site (mostly 404s, /wp-mail.php returned 500) using an automated Go-http-client/2.0 user-agent.
Target: HTTP path enumeration on a public WordPress site (.php/webshell scan, Go-http-client/2.0)
Seen: 2026-10-16 01:50 EDT
- 2026-10-16 01:50:01โ01:50:06 EDT โ 30+ rapid HTTP GET requests from 136.119.191.203 to a public WordPress site probing webshell/vulnerable PHP paths (/php8.php, /000.php, /file.php, /wp-mail.php, /ioxi-o.php, /wp-editor.php, /wp-setting.php, /dex.php, /abcd.php, /goods.php); most returned 404, /wp-admin/* 403, /wp-mail.php 500
- All probes used UA 'Go-http-client/2.0' โ automated enumeration rather than real human traffic
show less
(y3) Failed access -byebye- from 136.119.191.203 (US/United States/203.191.119.136.bc.googleusercont ...
show more(y3) Failed access -byebye- from 136.119.191.203 (US/United States/203.191.119.136.bc.googleusercontent.com): (CF_ENABLE)
show less
probing for exposed files and admin pages: 10 attempts within 1 minute, seen by CrowdSec (reported b ...
show moreprobing for exposed files and admin pages: 10 attempts within 1 minute, seen by CrowdSec (reported by RemotePower)
show less
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ