This IP address has been reported a total of
18
times from
18 distinct
sources.
136.70.22.230 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
Netherlands
with 4
reports;
Australia
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
12
times;
Brute-Force
8
times;
Bad Web Bot
4
times;
Hacking
3
times;
Port Scan
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
13.783 requests with url.path */wp-includes/wlwmanifest.xml
10.786 requests with url.path //xmlrpc ...
show more13.783 requests with url.path */wp-includes/wlwmanifest.xml
10.786 requests with url.path //xmlrpc.php
10.725 requests with url.path */xmlrpc.php
show less
136.70.22.230 - - [06/Oct/2026:14:19:15 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 403 446 "-" "Mozilla/5 ...
show more136.70.22.230 - - [06/Oct/2026:14:19:15 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 403 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Port Scan
Brute-Force
Anonymous
Oct 6 14:16:50 mail2 Nextcloud[19801]: {"reqId":"asTmso5k9tTa1su62i8cAAAAAE8","level":1,"time":"202 ...
show moreOct 6 14:16:50 mail2 Nextcloud[19801]: {"reqId":"asTmso5k9tTa1su62i8cAAAAAE8","level":1,"time":"2026-10-06T12:16:50+00:00","remoteAddr":"136.70.22.230","user":"--","app":"core","method":"GET","url":"//wp-includes/ID3/license.txt","scriptName":"/index.php","message":"Trusted domain error. \"136.70.22.230\" tried to access using \"mail2.akcurate.de\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36","version":"32.0.9.2","data":{"app":"core"}}
Oct 6 14:16:50 mail2 Nextcloud[15365]: {"reqId":"asTmso5k9tTa1su62i8cAQAAAE0","level":1,"time":"2026-10-06T12:16:50+00:00","remoteAddr":"136.70.22.230","user":"--","app":"core","method":"GET","url":"//feed/","scriptName":"/index.php","message":"Trusted domain error. \"136.70.22.230\" tried to access using \"mail2.akcurate.de\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.
...
show less
WordPress attack-tool calls | method: GET | path: //xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; W ...
show moreWordPress attack-tool calls | method: GET | path: //xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | 2026-10-06 11:42 UTC
show less
