This IP address has been reported a total of
22
times from
17 distinct
sources.
136.87.149.149 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 10
reports;
Switzerland
with 3
reports;
Germany
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
17
times;
Bad Web Bot
10
times;
Brute-Force
9
times;
Hacking
4
times;
Exploited Host
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning
show less
7.522 requests with url.path */wp-includes/wlwmanifest.xml
5.258 requests with url.path //xmlrpc.p ...
show more7.522 requests with url.path */wp-includes/wlwmanifest.xml
5.258 requests with url.path //xmlrpc.php
show less
Repeated requests for suspicious nonexistent URLs, for example: //web/wp-includes/wlwmanifest.xml (H ...
show moreRepeated requests for suspicious nonexistent URLs, for example: //web/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36")
show less
(mod_security) mod_security (id:225170) triggered by 136.87.149.149 (149.149.87.136.bc.googleusercon ...
show more(mod_security) mod_security (id:225170) triggered by 136.87.149.149 (149.149.87.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:16:24.817078 2026] [security2:error] [pid 22707:tid 22707] [client 136.87.149.149:54289] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dpcfab.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dpcfab.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atHraEzknhPh_JZE7fbUBgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning
show less
Automated report (2026-10-16T22:07:56+13:00). Caught probing for webshells/backdoors. Host might be ...
show moreAutomated report (2026-10-16T22:07:56+13:00). Caught probing for webshells/backdoors. Host might be compromised.
show less
Automated report (2026-10-16T22:07:55+13:00). Caught probing for webshells/backdoors. Host might be ...
show moreAutomated report (2026-10-16T22:07:55+13:00). Caught probing for webshells/backdoors. Host might be compromised.
show less
http-probing - IP: 136.87.149.149 - time="2026-10-16T11:03:21+02:00" level=info msg="(555f66b4f6a74 ...
show morehttp-probing - IP: 136.87.149.149 - time="2026-10-16T11:03:21+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 136.87.149.149 (US/396982) : 4h ban on Ip 136.87.149.149" module=db
show less
