This IP address has been reported a total of
14
times from
14 distinct
sources.
136.119.232.148 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1792655021.7246084,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792655021.7246084,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.119.232.148","remote_port":"54363","client_ip":"136.119.232.148","proto":"HTTP/1.1","method":"GET","host":"status.doggingonthe.net","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"],"Accept-Language":["en-US,en;q=0.5"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"],"Keep-Alive":["300"],"Connection":["keep-alive"]}},"bytes_read":0,"user_id":"","duration":0.000071527,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.doggingonthe.net/"],"Content-Type":[]}}
{"level":"info","ts":1792655021.9890232,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.119.232.148","remote_port":"51561","client_ip":"136.119.232.148","proto":"HTTP/1.1","method":"GET","ho
...
show less
(mod_security) mod_security (id:210410) triggered by 136.119.232.148 (US/United States/148.232.119.1 ...
show more(mod_security) mod_security (id:210410) triggered by 136.119.232.148 (US/United States/148.232.119.136.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Attack traffic from this IP.
Target: Paths //*/wp-includes/wlwmanifest.xml and //xmlrpc.php?rsd Word ...
show moreAttack traffic from this IP.
Target: Paths //*/wp-includes/wlwmanifest.xml and //xmlrpc.php?rsd WordPress enumeration
Seen: 2026-10-22 03:53 EDT
- 2026-10-22 03:53:04-03:53:07: ~20 rapid GET requests across distinct WordPress paths - //site/wp-includes/wlwmanifest.xml, //wp/wp-includes/wlwmanifest.xml, //2019/wp-includes/..., //xmlrpc.php?rsd, //wp-content/..., / - all HTTP/1.1 502
- Requests carried an Android SM-G892A browser User-Agent and targeted host kimberlymackdesign.com
- The multi-path enumeration is confirmed reconnaissance even though the honeypot backend returned 502 (down)
show less
http-probing - IP: 136.119.232.148 - time="2026-10-22T09:38:33+02:00" level=info msg="(555f66b4f6a7 ...
show morehttp-probing - IP: 136.119.232.148 - time="2026-10-22T09:38:33+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 136.119.232.148 (US/396982) : 4h ban on Ip 136.119.232.148" module=db
show less
Web App Attack
Showing 1 to
14
of 14 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩