JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.66.253.230

136.66.253.230 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 71%: ?

71%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	230.253.66.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.66.253.230

Whois 136.66.253.230

IP Abuse Reports for 136.66.253.230:

This IP address has been reported a total of 12 times from 11 distinct sources. 136.66.253.230 was first reported on July 13th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-14 05:14:13 (12 hours ago)	13 attacks on PHP URLs, Wordpress URLs: GET //xmlrpc.php?rsd HTTP/1.1 GET //cms/wp-includes/wlwmanif ... show more 13 attacks on PHP URLs, Wordpress URLs: GET //xmlrpc.php?rsd HTTP/1.1 GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1 show less	Web App Attack
🇺🇸 mnsf	2026-07-13 13:05:24 (1 day ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 12:45:33 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 136.66.253.230 (230.253.66.136.bc.googleusercon ... show more (mod_security) mod_security (id:225170) triggered by 136.66.253.230 (230.253.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 08:45:28.706687 2026] [security2:error] [pid 18812:tid 18812] [client 136.66.253.230:60838] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|saltyrootsyogaco.com.fixitz.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "saltyrootsyogaco.com.fixitz.net"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "alTd6FfluUzfwio8N1IqlwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-07-13 12:37:56 (1 day ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇨🇭 Origon	2026-07-13 12:20:15 (1 day ago)	http-probing - IP: 136.66.253.230 - time="2026-07-13T14:20:15+02:00" level=info msg="(555f66b4f6a74 ... show more http-probing - IP: 136.66.253.230 - time="2026-07-13T14:20:15+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 136.66.253.230 (US/396982) : 4h ban on Ip 136.66.253.230" module=db show less	Web App Attack
🇵🇱 strefapi_com	2026-07-13 12:18:19 (1 day ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇮🇹 VHosting	2026-07-13 12:15:04 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇬🇧 ISPLtd	2026-07-13 12:09:10 (1 day ago)	136.66.253.230 - - [13/Jul/2026:09:09:09 -0300] "GET //wp-includes/ID3/license.txt 136.66.253.230 - ... show more 136.66.253.230 - - [13/Jul/2026:09:09:09 -0300] "GET //wp-includes/ID3/license.txt 136.66.253.230 - - [13/Jul/2026:09:09:10 -0300] "GET //wp-includes/ID3/license.txt ... show less	Hacking Web App Attack
🇺🇸 Lee Daniel	2026-07-13 12:06:25 (1 day ago)	136.66.253.230 - - [13/Jul/2026:08:06:24 -0400] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ... show more 136.66.253.230 - - [13/Jul/2026:08:06:24 -0400] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 24198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 136.66.253.230 - - [13/Jul/2026:08:06:24 -0400] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 24196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 136.66.253.230 - - [13/Jul/2026:08:06:24 -0400] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 24196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 136.66.253.230 - - [13/Jul/2026:08:06:24 -0400] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 24198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 136.66.253.230 - - [13/Jul/2026:08:06:24 -0400] "GET //wordpress/wp-includes/wlwm ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 12:05:42 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 136.66.253.230 (230.253.66.136.bc.googleusercon ... show more (mod_security) mod_security (id:225170) triggered by 136.66.253.230 (230.253.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 08:05:38.781055 2026] [security2:error] [pid 32273:tid 32273] [client 136.66.253.230:58916] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.rohanbyles.com.au\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rohanbyles.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "alTUkkJh0MitQvHQ_PSmXAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-13 12:05:25 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
Anonymous	2026-07-13 12:05:00 (1 day ago)	{"reqId":"OpW5wCXc6eYqpCMgnWie","level":1,"time":"2026-07-13T14:04:59+02:00","remoteAddr":"136.66.25 ... show more {"reqId":"OpW5wCXc6eYqpCMgnWie","level":1,"time":"2026-07-13T14:04:59+02:00","remoteAddr":"136.66.253.230","user":"--","app":"core","method":"GET","url":"//wp-includes/ID3/license.txt","scriptName":"/index.php","message":"Trusted domain error. \"136.66.253.230\" tried to access using \"rodimus.khomri.com\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36","version":"34.0.1.2","data":{"app":"core"}} {"reqId":"J9ULDa5QHmOTT4S0NBjR","level":1,"time":"2026-07-13T14:04:59+02:00","remoteAddr":"136.66.253.230","user":"--","app":"core","method":"GET","url":"//feed/","scriptName":"/index.php","message":"Trusted domain error. \"136.66.253.230\" tried to access using \"rodimus.khomri.com\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36","version":"34.0.1.2","data":{"app":"core"}} {"reqId":"eYUtMgcGVQHnVkSw4e8e","level": ... show less	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2409:4090:b059:f602:d856:6438:7e3e:adfe

🇺🇸 216.25.89.101

🇹🇼 211.22.166.107

🇸🇬 159.138.92.186

🇺🇸 129.146.117.92

🇺🇸 44.210.102.209

🇺🇸 2600:1900:4120:e3fb:0:81::

🇺🇸 162.216.149.181

🇺🇸 147.185.132.184

🇩🇪 43.228.157.8

🇮🇩 2406:da19:776:6e02:e493:a621:f692:65c5

🇱🇰 220.247.224.226

🇨🇳 180.76.52.146

🇵🇱 176.53.159.197

🇺🇸 64.23.148.210

🇱🇹 62.60.130.219

🇻🇳 27.79.2.54

🇺🇸 2602:80d:1007::75

🇸🇬 2404:6800:4003:c1a::125

🇺🇸 216.25.89.144