JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.66.181.0

136.66.181.0 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 99%: ?

99%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	0.181.66.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.66.181.0

Whois 136.66.181.0

IP Abuse Reports for 136.66.181.0:

This IP address has been reported a total of 17 times from 17 distinct sources. 136.66.181.0 was first reported on July 21st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-07-21 17:05:31 (1 day ago)	Too many Status 40X (18)	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-07-21 16:50:29 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-21 16:37:58 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-21 16:36:07 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-21 16:33:54 (1 day ago)	CrowdSec: lrob/wp-xmlrpc-bf \| req: //xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ... show more CrowdSec: lrob/wp-xmlrpc-bf \| req: //xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 show less	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-07-21 16:32:11 (1 day ago)	Bad_requests	Bad Web Bot
🇩🇪 maxpower	2026-07-21 16:27:06 (1 day ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.66.181.0 (US/United States/0.181.66.136.bc ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.66.181.0 (US/United States/0.181.66.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.66.181.0 - - [21/Jul/2026:18:27:02 +0200] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 1416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" host=kleos81.com show less	Port Scan
🇮🇹 VHosting	2026-07-21 16:25:03 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 16:22:48 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 136.66.181.0 (0.181.66.136.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 136.66.181.0 (0.181.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 12:22:41.513890 2026] [security2:error] [pid 9053:tid 9053] [client 136.66.181.0:62533] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.kaylamaclaincounseling.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kaylamaclaincounseling.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "al-c0SGDHlMHB2105F7LCgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TAY	2026-07-21 16:20:24 (1 day ago)	136.66.181.0 - - [22/Jul/2026:00:20:23 +0800] "POST //xmlrpc.php HTTP/1.1" 200 623 "-" "Mozilla/5.0 ... show more 136.66.181.0 - - [22/Jul/2026:00:20:23 +0800] "POST //xmlrpc.php HTTP/1.1" 200 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.66.181.0 - - [22/Jul/2026:00:20:23 +0800] "POST //xmlrpc.php HTTP/1.1" 200 4431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.66.181.0 - - [22/Jul/2026:00:20:23 +0800] "POST //xmlrpc.php HTTP/1.1" 200 4431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Brute-Force
Anonymous	2026-07-21 16:18:37 (1 day ago)	136.66.181.0 - - [21/Jul/2026:18:18:34 +0200] "POST //xmlrpc.php HTTP/1.1" 200 796 "-" "Mozilla/5.0 ... show more 136.66.181.0 - - [21/Jul/2026:18:18:34 +0200] "POST //xmlrpc.php HTTP/1.1" 200 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.66.181.0 - - [21/Jul/2026:18:18:35 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.66.181.0 - - [21/Jul/2026:18:18:35 +0200] "POST //xmlrpc.php HTTP/1.1" 200 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.66.181.0 - - [21/Jul/2026:18:18:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.66.181.0 - - [21/Jul/2026:18:18:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0 ... show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-21 16:18:19 (1 day ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)	Hacking
🇧🇬 HighWay	2026-07-21 16:17:13 (1 day ago)	136.66.181.0 - - [21/Jul/2026:16:17:10 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 ... show more 136.66.181.0 - - [21/Jul/2026:16:17:10 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.66.181.0 - - [21/Jul/2026:16:17:10 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.66.181.0 - - [21/Jul/2026:16:17:11 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-21 16:16:44 (1 day ago)	Web vulnerability probing: //wp-includes/wlwmanifest.xml	Web App Attack
🇺🇸 Charlesiv	2026-07-21 16:00:15 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 396982 (Goog ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 396982 (Google LLC) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-21T15:20:35Z Ray ID: a1eb30c319c3757f UA: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com) show less	Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.108.231.34

🇷🇴 92.118.39.233

🇲🇾 49.124.152.174

🇮🇳 45.113.65.25

🇨🇳 1.83.125.50

🇮🇪 212.129.77.233

🇯🇵 212.87.194.103

🇳🇱 209.85.208.78

🇹🇼 198.235.24.101

🇮🇳 195.250.20.75

🇳🇱 193.176.31.155

🇺🇸 167.99.153.4

🇸🇦 167.86.169.26

🇺🇸 159.203.189.120

🇺🇸 147.185.132.122

🇷🇴 92.118.39.205

🇷🇺 77.88.47.21

🇺🇸 47.251.191.237

🇳🇱 45.148.10.141

🇺🇸 45.79.214.237