WASHINGTON — Despite an intensive $4 billion drive to protect American embassies, at least 150 American missions abroad fall short of security standards put in place after deadly bombings, the Associated Press has learned.

It will cost twice that amount to replace or renovate just the most vulnerable ones, according to documents the AP reviewed.

The push to upgrade security began in earnest after bombings of the American embassies in Kenya and Tanzania a decade ago. The attacks killed 231 people, including 12 Americans. The security effort took on new urgency after strikes of September 11, 2001, which led to government-wide vulnerability reviews.

The results so far suggest there is a long way to go to bring all the roughly 265 embassies and consulates up to standard.

The State Department says it will need about $7.5 billion to construct buildings at around 50 posts and $850 million for “major rehabilitation” at 40 others through 2013. The figures are in the department’s Long-Range Overseas Buildings Plan that was sent to Congress last week.

In addition, about 60 other embassies and consulates will need to be replaced or will require substantial work by 2018, according to documents accompanying the 450-page plan, which is labeled “sensitive but unclassified” and not to be shared with foreign governments, according to officials familiar with its contents.

American diplomatic posts fly the Stars and Stripes in capitals around the globe and are among the most high-profile overseas targets for terrorists and protesters. From Baghdad to Beijing to Belgrade, they are lightning rods for violence that has claimed the lives of dozens of diplomats over recent decades.

This year alone, embassies in Bolivia, Chad, and Serbia have been attacked or overrun, not to mention the frequent barrages of rocket fire that have landed near the American Embassy in Iraq.

The long-range plan is not a formal request for money. It is more like a wish-list of projects deemed critical by experts in the State Department’s real estate, security, and regional bureaus. It is updated annually, but action on this year’s list is not expected until after the next administration takes office in January.

Nearly all the facilities identified fail to meet at least some of the strict security requirements put in place after the East Africa bombings, officials said. Those include setting buildings significantly back from major roads and reinforcing walls and windows.