JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.66.49.164

136.66.49.164 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 80%: ?

80%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	164.49.66.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.66.49.164

Whois 136.66.49.164

IP Abuse Reports for 136.66.49.164:

This IP address has been reported a total of 18 times from 16 distinct sources. 136.66.49.164 was first reported on July 3rd 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-04 22:26:45 (4 days ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-03 22:26:42 (5 days ago)		Brute-Force Web App Attack
🇪🇸 pipeline.es	2026-07-03 08:41:13 (6 days ago)	Web scanning / probing for vulnerable paths	Port Scan Web App Attack
🇳🇱 i-turnradio.nl	2026-07-03 02:13:29 (6 days ago)	2026-07-03 @ 04:13:29 (CET) ~ Blocked for trying to access: /wp-includes/ID3/license.txt	Web App Attack
🇳🇿 Antinson	2026-07-03 02:11:24 (6 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 Hary74656	2026-07-03 02:11:01 (6 days ago)	[Fri Jul 03 04:10:56.365776 2026] [authz_core:error] [pid 1900:tid 1982] [client 136.66.49.164:60101 ... show more [Fri Jul 03 04:10:56.365776 2026] [authz_core:error] [pid 1900:tid 1982] [client 136.66.49.164:60101] AH01630: client denied by server configuration: /home/harald/www/aschi.at/xmlrpc.php ... show less	Bad Web Bot
🇺🇸 mnsf	2026-07-03 02:05:04 (6 days ago)	Abuse Detected (7)	Brute-Force Web App Attack
🇳🇱 Webhoster	2026-07-03 02:02:28 (6 days ago)	{"ClientAddr":"162.158.42.63:12253","ClientHost":"136.66.49.164","ClientPort":"12253","ClientUsernam ... show more {"ClientAddr":"162.158.42.63:12253","ClientHost":"136.66.49.164","ClientPort":"12253","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":18793793,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":18793793,"RequestAddr":"obsidian.timvdberg.dev","RequestContentSize":0,"RequestCount":71286,"RequestHost":"obsidian.timvdberg.dev","RequestMethod":"GET","RequestPath":"/wp-includes/ID3/license.txt","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"obsidian@file","StartLocal":"2026-07-03T02:02:27.544124054Z","StartUTC":"2026-07-03T02:02:27.544124054Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"136.66.49.164","request_X-Forwarded-For":"136.66.49.164","request_X-Real-Ip":"162.158.42.63","time":"2026-07-03T02:02:27Z"} {"ClientAddr":"162.158.42.63:12253","ClientHost":"136.66.49.164","ClientPort":"12253","Clien ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇪🇸 matatunos	2026-07-03 02:00:16 (6 days ago)	Honeypot favala.es: 1 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte auto ... show more Honeypot favala.es: 1 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte automático. show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 01:55:12 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 136.66.49.164 (164.49.66.136.bc.googleuserconte ... show more (mod_security) mod_security (id:225170) triggered by 136.66.49.164 (164.49.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 21:55:05.713274 2026] [security2:error] [pid 24718:tid 24718] [client 136.66.49.164:61163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.nutz-r-us.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nutz-r-us.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akcWeTs0DmFFETcLimCXEgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-03 01:54:44 (6 days ago)	10 attempts against mh-misc-ban on eris	Web App Attack
🇪🇸 pipeline.es	2026-07-03 01:52:38 (6 days ago)	Web scanning / probing for vulnerable paths \| URL: //site/wp-includes/wlwmanifest.xml \| Evidence: al ... show more Web scanning / probing for vulnerable paths \| URL: //site/wp-includes/wlwmanifest.xml \| Evidence: altovolta.es 136.66.49.164 - - [03/Jul/2026:03:52:13 +0200] \"GET //site/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 230 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36\" GEOIP_COUNTRY_CODE=US \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: US show less	Port Scan Web App Attack
🇩🇪 hbrks	2026-07-03 01:49:49 (6 days ago)	18 attack(s) detected, such as these: {"event":"web_block","ip":"136.66.49.164","host":"ns.big.march ... show more 18 attack(s) detected, such as these: {"event":"web_block","ip":"136.66.49.164","host":"ns.big.marche-be.com","request":"","user_agent":"","reason":"Status-0","timestamp":"2026-07-03T01:49:49 00:00","logentry":"ns.big.marche-be.com 136.66.49.164 - - [03/Jul/2026:01:49:49 0000] \"\" 400 0 \"-\" \"-\" \"-\""} * Report Details : https://p4u.xyz/0WR4J51ZCMT/1 IP Details *: https://p4u.xyz/0WR4J51ZCMT/2 show less	Web Spam Hacking Bad Web Bot
🇮🇹 VHosting	2026-07-03 01:45:06 (6 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇴 jad-abuse	2026-07-03 01:41:25 (6 days ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 14 hits. show less	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.45

🇳🇱 91.92.40.27

🇺🇸 40.121.98.4

🇮🇳 13.71.92.229

🇮🇳 209.38.121.186

🇩🇪 167.233.98.225

🇮🇳 139.59.95.2

🇵🇭 112.200.194.92

🇳🇱 45.142.193.161

🇰🇿 31.132.90.3

🇸🇮 31.57.216.6

🇱🇹 141.98.10.25

🇨🇴 138.84.40.123

🇺🇸 103.234.62.57

🇬🇧 88.97.252.174

🇺🇸 52.167.144.237

🇩🇪 43.228.157.155

10.0.0.120

🇺🇸 207.90.244.11

🇩🇪 185.242.3.195