JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.109.234.57

Activity Trending Down

Abuse Confidence Score

54% Elevated

87 reports

62 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 57.234.109.136.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: The Dalles, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

87 from 62 distinct reporters

First reported

September 5th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 18 🇳🇱 Netherlands 16 🇩🇪 Germany 12

Most common categories Web App Attack 66 Brute-Force 39 Bad Web Bot 31 Hacking 15 Port Scan 8

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-19 22:24:18 (1 month ago)	IP matched detection query 50 and more bad rqs apache.	Hacking Bad Web Bot Brute-Force Web App Attack
🇺🇸 cwytech	2026-09-17 07:42:01 (1 month ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-crit.	Bad Web Bot Web App Attack
Anonymous	2026-09-17 07:35:18 (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇳🇱 debestelapp	2026-09-17 06:30:14 (1 month ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 05:57:41 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 136.109.234.57 (57.234.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 01:57:38.966705 2026] [security2:error] [pid 10777:ti ... show more (mod_security) mod_security (id:210730) triggered by 136.109.234.57 (57.234.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 01:57:38.966705 2026] [security2:error] [pid 10777:tid 10777] [client 136.109.234.57:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|goalsnet.net\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "goalsnet.net"] [uri "/host.key"] [unique_id "aquBUgJRtRuLp54xBftCsAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-17 05:22:29 (1 month ago)	PSCSERV WPSCAN 136.109.234.57	Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-09-17 05:17:25 (1 month ago)	2026/09/17 06:17:23 [error] 2807822#2807822: 232097 access forbidden by rule, client: 136.109.234.57, server: getasecondlife.net, request: "GET /_nuxt/../.env HTTP/2.0", host: "getasecondlife.net" 2026/09/17 06:17:23 [error] 2807822#2807822: 232097 ... show more 2026/09/17 06:17:23 [error] 2807822#2807822: 232097 access forbidden by rule, client: 136.109.234.57, server: getasecondlife.net, request: "GET /_nuxt/../.env HTTP/2.0", host: "getasecondlife.net" 2026/09/17 06:17:23 [error] 2807822#2807822: 232097 access forbidden by rule, client: 136.109.234.57, server: getasecondlife.net, request: "GET /files../.env HTTP/2.0", host: "getasecondlife.net" 2026/09/17 06:17:23 [error] 2807822#2807822: *232097 access forbidden by rule, client: 136.109.234.57, server: getasecondlife.net, request: "GET /static//.env HTTP/2.0", host: "getasecondlife.net" show less	Brute-Force Web App Attack
🇳🇱 Alt255	2026-09-17 04:57:08 (1 month ago)	[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.109.234.57 - - [17/Sep/2026:06:56:53 +0200] "GET /.aws/credentials HTTP/2.0" 404 2918 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://ww ... show more [ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.109.234.57 - - [17/Sep/2026:06:56:53 +0200] "GET /.aws/credentials HTTP/2.0" 404 2918 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Bad Web Bot Web App Attack
🇺🇸 zwebvigil	2026-09-17 04:40:50 (1 month ago)	136.109.234.57 [16/Sep/2026:21:40:49 -0700] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 226 "-" port=38640 "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" "-" "<host>" 385 136.109.234.57 [16/Sep/2026:21:40: ... show more 136.109.234.57 [16/Sep/2026:21:40:49 -0700] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 226 "-" port=38640 "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" "-" "<host>" 385 136.109.234.57 [16/Sep/2026:21:40:49 -0700] "GET /appearance/../../.env HTTP/1.1" 400 226 "-" port=51544 "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-" "-" "<host>" 643 136.109.234.57 [16/Sep/2026:21:40:49 -0700] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 226 "-" port=51540 "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "-" "-" "<host>" 311 136.109.234.57 [16/Sep/2026:21:40:49 -0700] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 226 "-" port=51578 "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-" show less	Web App Attack
🇳🇱 MM-bot	2026-09-17 04:39:16 (1 month ago)	URL-probe: HTTP/2 GET request on /.aws/config (2026-09-17 06:39:16 UTC+2)	Web App Attack Hacking
🇩🇪 Viveronese	2026-09-17 04:37:39 (1 month ago)	HTTP vulnerability scanning	Web App Attack
🇳🇱 Site.eu	2026-09-17 04:34:14 (1 month ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-09-17 03:04:08 (1 month ago)	136.109.234.57 - - [16/Sep/2026:22:04:07 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 136.109.234.57 136.109.234.57 - - [16/Sep/2026:22:04:07 -0500] "GET / ... show more 136.109.234.57 - - [16/Sep/2026:22:04:07 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 136.109.234.57 136.109.234.57 - - [16/Sep/2026:22:04:07 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 136.109.234.57 136.109.234.57 - - [16/Sep/2026:22:04:07 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.109.234.57 136.109.234.57 - - [16/Sep/2026:22:04:07 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 136.109.234.57 136.109.234.57 - - [16/Sep/2026:22:04:07 -0500] "GET /.env.local?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 136.109.234.57 136.109.234.57 - - [16/Sep/2026:22: ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ambor	2026-09-17 02:00:47 (1 month ago)	Honeypot access: Environment file access attempt. Path: /.env	Web App Attack
🇫🇷 regishoussin	2026-09-16 22:52:10 (1 month ago)	Automated web scanning detected by Wazuh (rule 100240): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-09-16 22:52 UTC.	Bad Web Bot Web App Attack

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 179.37.202.7

🇵🇱 176.53.159.197

🇻🇳 123.31.31.125

🇵🇰 103.162.40.130

🇨🇳 222.175.173.186

🇭🇰 185.242.235.139

🇧🇴 181.188.176.242

🇭🇰 156.225.1.42

🇭🇰 154.92.2.59

🇲🇩 109.185.188.144

🇦🇷 45.227.10.40

🇳🇱 45.148.10.155

🇺🇸 45.61.92.210

🇺🇦 45.10.91.135

🇨🇳 39.156.65.150

🇯🇵 35.75.7.37

🇺🇸 34.123.134.194

🇮🇷 5.160.128.67

🇫🇷 217.182.253.249

🇺🇸 216.180.246.39