JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.66.245.225

136.66.245.225 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	225.245.66.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.66.245.225

Whois 136.66.245.225

IP Abuse Reports for 136.66.245.225:

This IP address has been reported a total of 22 times from 22 distinct sources. 136.66.245.225 was first reported on August 31st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oralunal	2026-08-31 08:44:11 (1 hour ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
Anonymous	2026-08-31 08:23:37 (2 hours ago)	[redacted] 136.66.245.225 - - [31/Aug/2026:10:23:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" " ... show more [redacted] 136.66.245.225 - - [31/Aug/2026:10:23:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 136.66.245.225 - - [31/Aug/2026:10:23:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 136.66.245.225 - - [31/Aug/2026:10:23:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 136.66.245.225 - - [31/Aug/2026:10:23:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 136.66.245.225 - - [31/Aug/2026:10:23:21 +0200] "POST /xmlrpc.php HTTP/1.1" ... show less	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-08-31 08:20:06 (2 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 08:11:43 (2 hours ago)	(mod_security) mod_security (id:225170) triggered by 136.66.245.225 (225.245.66.136.bc.googleusercon ... show more (mod_security) mod_security (id:225170) triggered by 136.66.245.225 (225.245.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:11:35.655734 2026] [security2:error] [pid 421:tid 421] [client 136.66.245.225:65048] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|earthwormensemble.doublenaughtspycar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "earthwormensemble.doublenaughtspycar.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "apU3Nw5Qi6AKr-rWkI_n1QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-08-31 08:05:33 (2 hours ago)	Abuse Detected (4)	Brute-Force Web App Attack
🇩🇪 on-com	2026-08-31 08:05:27 (2 hours ago)	URL scan	Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-08-31 08:04:03 (2 hours ago)	Wordfence waf block on decarcerationnation	Web App Attack
🇷🇺 DZBOT	2026-08-31 08:02:46 (2 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇳🇱 Savvii	2026-08-31 08:01:04 (2 hours ago)	10 attempts against mh-misc-ban on ethyl	Web App Attack
🇫🇷 masterguru	2026-08-31 07:59:01 (2 hours ago)	(xmlrpc) Apache: Failed xmlrpc access from 136.66.245.225 (US/United States/225.245.66.136.bc.google ... show more (xmlrpc) Apache: Failed xmlrpc access from 136.66.245.225 (US/United States/225.245.66.136.bc.googleusercontent.com): 10 in the last 3600 secs (0-201) show less	Hacking
🇨🇭 backslash	2026-08-31 07:57:00 (2 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 yitzhaq	2026-08-31 07:56:10 (2 hours ago)	136.66.245.225 - - [31/Aug/2026:09:56:06 +0200] "GET /wp-includes/id3/license.txt/blog/wp-includes/w ... show more 136.66.245.225 - - [31/Aug/2026:09:56:06 +0200] "GET /wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 25170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 136.66.245.225 - - [31/Aug/2026:09:56:07 +0200] "GET /wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 25164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 136.66.245.225 - - [31/Aug/2026:09:56:07 +0200] "GET /wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 25200 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 136.66.245.225 - - [31/Aug/2026:09:56:07 +0200] "GET /wp-includes/id3/license.txt/wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 25158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95 show less	Web App Attack Hacking
🇩🇪 mondor.ro	2026-08-31 07:49:52 (2 hours ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 136.66.245.225, Reason ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 136.66.245.225, Reason:[(manifest) WordPress wlwmanifest.xml Attack 136.66.245.225 (US/United States/225.245.66.136.bc.googleusercontent.com): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇩🇪 big-cloud.nl	2026-08-31 07:48:24 (2 hours ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-31 07:48:19 (2 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 180.249.186.60

🇺🇸 91.230.168.254

🇳🇱 193.47.62.69

🇲🇽 189.165.67.105

🇪🇨 170.254.29.76

🇺🇸 131.215.21.16

🇭🇰 119.28.89.249

🇹🇼 114.32.68.115

🇷🇴 80.94.92.55

🇺🇸 64.62.156.40

🇭🇰 58.152.42.212

🇳🇱 45.148.10.141

🇨🇳 39.165.226.62

🇷🇺 5.44.170.152

🇧🇷 200.193.167.248

🇺🇸 198.98.48.5

🇺🇸 195.184.76.118

🇺🇸 195.184.76.48

🇪🇨 181.188.237.81

🇨🇦 172.69.130.45