This IP address has been reported a total of
16
times from
14 distinct
sources.
136.66.47.157 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show moreMalicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: //wp-json/wp/v2/users/ | 2026-08-26 07:20 UTC
show less
[26/Aug/2026:10:17:16 +0300] -- 136.66.47.157 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp- ...
show more[26/Aug/2026:10:17:16 +0300] -- 136.66.47.157 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-includes/ID3/license.txt HTTP/1.1
show less
(nginxWPSCANNER) nginx WordPress scanner detected from 136.66.47.157 (US/United States/Oregon/The Da ...
show more(nginxWPSCANNER) nginx WordPress scanner detected from 136.66.47.157 (US/United States/Oregon/The Dalles/157.47.66.136.bc.googleusercontent.com)
show less
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show moreMalicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: //xmlrpc.php | query: rsd | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | 2026-08-26 07:01 UTC
show less
{"ClientAddr":"136.66.47.157:55491","ClientHost":"136.66.47.157","ClientPort":"55491","ClientUsernam ...
show more{"ClientAddr":"136.66.47.157:55491","ClientHost":"136.66.47.157","ClientPort":"55491","ClientUsername":"-","DownstreamContentSize":24487,"DownstreamStatus":200,"Duration":13099780,"OriginContentSize":24487,"OriginDuration":13017562,"OriginStatus":200,"Overhead":82218,"RequestAddr":"io.vdkln.com","RequestContentSize":0,"RequestCount":147804,"RequestHost":"io.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-includes/ID3/license.txt","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"n8n@docker","ServiceAddr":"172.18.0.39:5678","ServiceName":"n8n@docker","ServiceURL":"http://172.18.0.39:5678","StartLocal":"2026-08-26T06:58:16.37655179Z","StartUTC":"2026-08-26T06:58:16.37655179Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-08-26T06:58:16Z"}
{"ClientAddr":"136.66.47.157:55214","ClientHost":"136.66.47.157","ClientPort":"55214","ClientUsername":"-
...
show less
Web App Attack
Showing 1 to
15
of 16 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩