JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.66.109.77

136.66.109.77 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 86%: ?

86%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	77.109.66.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.66.109.77

Whois 136.66.109.77

IP Abuse Reports for 136.66.109.77:

This IP address has been reported a total of 14 times from 14 distinct sources. 136.66.109.77 was first reported on August 23rd 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-08-24 04:31:06 (3 hours ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack
🇧🇪 cmbplf	2026-08-23 20:49:39 (11 hours ago)	6.899 requests with url.path //xmlrpc.php 826 requests with url.path */wp-includes/wlwmanifest.xml	Brute-Force Bad Web Bot
🇺🇸 mnsf	2026-08-23 18:05:24 (14 hours ago)	Abuse Detected (23)	Brute-Force Web App Attack
Anonymous	2026-08-23 17:45:05 (14 hours ago)	Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //xmlrpc.php?rsd HTTP/1.1	Hacking Web App Attack
🇭🇰 Mehmet_The_Script_Kiddie	2026-08-23 17:44:05 (14 hours ago)	AUTOMATED REPORT: Suspicous path traversal: //wp-includes/wlwmanifest.xml	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-23 17:43:30 (14 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 maxpower	2026-08-23 17:42:56 (14 hours ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 136.66.109.77 (US/United States/77.109.66.136. ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 136.66.109.77 (US/United States/77.109.66.136.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/08/23 19:42:53 [error] 1094948#1094948: 2914998 access forbidden by rule, client: 136.66.109.77, server: lucadipa.accademiam.com, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "lucadipa.com" 2026/08/23 19:42:53 [error] 1094948#1094948: 2914998 access forbidden by rule, client: 136.66.109.77, server: lucadipa.accademiam.com, request: "GET //?author=1 HTTP/1.1", host: "lucadipa.com" 2026/08/23 19:42:53 [error] 1094948#1094948: 2914998 access forbidden by rule, client: 136.66.109.77, server: lucadipa.accademiam.com, request: "GET //?author=2 HTTP/1.1", host: "lucadipa.com" show less	Port Scan
🇮🇹 VHosting	2026-08-23 17:40:07 (14 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 17:36:15 (14 hours ago)	(mod_security) mod_security (id:225170) triggered by 136.66.109.77 (77.109.66.136.bc.googleuserconte ... show more (mod_security) mod_security (id:225170) triggered by 136.66.109.77 (77.109.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 13:36:10.635706 2026] [security2:error] [pid 6626:tid 6626] [client 136.66.109.77:51472] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|major33.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "major33.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aosvisd_15um2XxIh8eCFQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-23 17:35:47 (14 hours ago)	[redacted] 136.66.109.77 - - [23/Aug/2026:19:35:34 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ... show more [redacted] 136.66.109.77 - - [23/Aug/2026:19:35:34 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 136.66.109.77 - - [23/Aug/2026:19:35:35 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 136.66.109.77 - - [23/Aug/2026:19:35:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 136.66.109.77 - - [23/Aug/2026:19:35:38 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 136.66.109.77 - - [23/Aug/2026:19:35:39 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Moz ... show less	Hacking Web App Attack
🇨🇦 Anytech	2026-08-23 17:24:16 (14 hours ago)	Blocked by Conn-Monitor: http-bad-user-agent	Web App Attack Bad Web Bot
🇫🇮 as211431.net	2026-08-23 17:14:31 (15 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 abivia	2026-08-23 17:08:37 (15 hours ago)	Abivia WAF trigger: Rule scamAgents: Missing/bogus user agent agent: mozilla/5.0 (compatible; cms-ch ... show more Abivia WAF trigger: Rule scamAgents: Missing/bogus user agent agent: mozilla/5.0 (compatible; cms-checker/1.0; +https://example.com) show less	Hacking Web App Attack
🇩🇪 filstal.org	2026-08-23 17:07:50 (15 hours ago)	Bad bot activity detected (automated scraping/probing).	Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.223

🇳🇱 142.93.143.8

🇨🇳 123.163.52.74

🇭🇰 114.111.53.214

🇮🇳 106.51.20.178

🇺🇿 84.54.72.11

🇺🇸 216.218.206.69

🇹🇼 198.235.24.72

🇺🇸 195.184.76.29

🇺🇸 195.184.76.23

🇰🇷 118.36.77.35

🇺🇸 91.230.168.251

🇫🇷 91.196.152.174

🇫🇷 91.196.152.139

🇨🇦 85.217.149.42

🇮🇩 36.93.65.93

🇬🇧 35.203.210.233

🇺🇸 20.65.193.129

🇺🇸 2602:80d:1008::8a

🇱🇹 213.176.26.144