JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.67.230.140

136.67.230.140 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 73%: ?

73%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	140.230.67.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.67.230.140

Whois 136.67.230.140

IP Abuse Reports for 136.67.230.140:

This IP address has been reported a total of 12 times from 12 distinct sources. 136.67.230.140 was first reported on September 15th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-09-15 15:05:43 (2 days ago)	Abuse Detected (23)	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-15 14:33:03 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 grassau.com	2026-09-15 14:27:22 (2 days ago)	(wordpress) Failed wordpress login from 136.67.230.140 (US/United States/Oregon/The Dalles/140.230.6 ... show more (wordpress) Failed wordpress login from 136.67.230.140 (US/United States/Oregon/The Dalles/140.230.67.136.bc.googleusercontent.com) show less	Brute-Force
Anonymous	2026-09-15 14:26:37 (2 days ago)	[redacted] 136.67.230.140 - - [15/Sep/2026:16:26:28 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" ... show more [redacted] 136.67.230.140 - - [15/Sep/2026:16:26:28 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 136.67.230.140 - - [15/Sep/2026:16:26:29 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 136.67.230.140 - - [15/Sep/2026:16:26:30 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 136.67.230.140 - - [15/Sep/2026:16:26:31 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 136.67.230.140 - - [15/Sep/2026:16:26:31 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Moz ... show less	Hacking Web App Attack
🇬🇧 gigatech	2026-09-15 14:20:05 (2 days ago)	Webserver Probing	Web App Attack
🇮🇹 VHosting	2026-09-15 14:20:04 (2 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 applemooz	2026-09-15 14:18:08 (2 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 14:17:46 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 136.67.230.140 (140.230.67.136.bc.googleusercon ... show more (mod_security) mod_security (id:225170) triggered by 136.67.230.140 (140.230.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:17:42.256681 2026] [security2:error] [pid 2785:tid 2785] [client 136.67.230.140:50000] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|test.kbalan.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "test.kbalan.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqlThidHO4zBVGr-h2M1agAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 Olexiy Backend	2026-09-15 13:56:34 (2 days ago)	136.67.230.140 ...	Bad Web Bot Web App Attack
🇺🇸 lcpacs	2026-09-15 13:34:06 (2 days ago)	Auto-flagged by honeypot: tripped / — client-supplied proxy headers (x-forwarded-proto:http) — not U ... show more Auto-flagged by honeypot: tripped / — client-supplied proxy headers (x-forwarded-proto:http) — not US+en-US (country: US, accept-language: none) show less	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-09-15 13:33:41 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 LRob	2026-09-15 13:31:17 (2 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: / \| ua: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com) \| 2026-09-15 13:31 UTC show less	Hacking Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.216.224.85

🇨🇳 120.48.7.234

🇮🇹 81.22.225.21

🇺🇸 20.106.60.152

🇧🇷 200.152.6.69

🇲🇽 187.190.179.61

🇧🇷 187.75.114.173

🇧🇷 170.244.96.96

🇺🇸 162.216.149.213

🇺🇸 136.111.88.57

🇵🇭 120.29.90.128

🇺🇸 94.228.22.6

🇹🇷 78.163.209.55

🇺🇸 72.239.130.197

🇸🇦 51.36.171.130

🇧🇷 187.19.243.44

🇲🇽 187.14.126.139

🇧🇷 177.53.46.195

🇧🇷 131.255.22.96

🇹🇷 78.173.82.23