JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.211.245.164

130.211.245.164 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	164.245.211.130.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.211.245.164

Whois 130.211.245.164

IP Abuse Reports for 130.211.245.164:

This IP address has been reported a total of 31 times from 23 distinct sources. 130.211.245.164 was first reported on August 1st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-01 21:59:26 (3 hours ago)	Auto-ban: >3000 req/min op 2026-08-01	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-01 17:21:25 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 130.211.245.164 (164.245.211.130.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 130.211.245.164 (164.245.211.130.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:21:20.193440 2026] [security2:error] [pid 524900:tid 524900] [client 130.211.245.164:54630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wastetrack.io.wwts.io"] [uri "/.env.bak"] [unique_id "am4rEMtapWcdHJG2yTRwIQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 16:31:20 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 130.211.245.164 (164.245.211.130.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 130.211.245.164 (164.245.211.130.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:31:15.601362 2026] [security2:error] [pid 92421:tid 92421] [client 130.211.245.164:49882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "charmainecruz.com"] [uri "/.env.dev"] [unique_id "am4fU_t15eRepOZFMV74bAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-08-01 16:23:29 (8 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-08-01 16:16:17 (9 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 4server	2026-08-01 16:09:10 (9 hours ago)	[SatAug0118:09:06.0665122026][security2:error][pid1714437:tid1714455][client130.211.245.164:0]ModSec ... show more [SatAug0118:09:06.0665122026][security2:error][pid1714437:tid1714455][client130.211.245.164:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"worldgoldfundltd.com.136-243-54-122.cpanel.site\"][uri\"/.env.old\"][unique_id\"am4aIndWcxaWKzJ1yPUuyQAAAAY\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 16:06:01 (9 hours ago)	(mod_security) mod_security (id:210730) triggered by 130.211.245.164 (164.245.211.130.bc.googleuserc ... show more (mod_security) mod_security (id:210730) triggered by 130.211.245.164 (164.245.211.130.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:05:53.373655 2026] [security2:error] [pid 768537:tid 768537] [client 130.211.245.164:58180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cae3.larryyang.net\|F\|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cae3.larryyang.net"] [uri "/.env.bak"] [unique_id "am4ZYXJ7LLjxU9bXjUZcHAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-01 15:52:42 (9 hours ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193) show less	Hacking
🇩🇪 FeG Deutschland	2026-08-01 15:29:25 (9 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 15:16:15 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 130.211.245.164 (164.245.211.130.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 130.211.245.164 (164.245.211.130.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:16:08.571801 2026] [security2:error] [pid 1731:tid 1731] [client 130.211.245.164:57858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "railsolutions.mx"] [uri "/.env.local"] [unique_id "am4NuNlDGmxg87_UWh5l4wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-08-01 14:52:52 (10 hours ago)	[SatAug0116:52:45.6089972026][security2:error][pid3931758:tid3932065][client130.211.245.164:0]ModSec ... show more [SatAug0116:52:45.6089972026][security2:error][pid3931758:tid3932065][client130.211.245.164:0]ModSecurity:Accessdeniedwithcode403$phase1$.Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"landingswiss.ch.81-17-25-250.cpanel.site\"][uri\"/.env.prod\"][unique_id\"am4IPQbmdj3o8pHDqaP40gAAARc\"] show less	Hacking Web App Attack
🇿🇦 conure	2026-08-01 14:24:01 (10 hours ago)	csagent: score 20.5: 404 noise floor x2, secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 14:23:20 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 130.211.245.164 (164.245.211.130.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 130.211.245.164 (164.245.211.130.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:23:14.421248 2026] [security2:error] [pid 725468:tid 725468] [client 130.211.245.164:56888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "healingtrek.com"] [uri "/.env"] [unique_id "am4BUg59LeeS0PElo2jv8AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-08-01 14:19:38 (11 hours ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-08-01 14:18:20 (11 hours ago)	fail2ban: apache-secrets-scan jail (1 hits in 2419200s) on skipper	Web App Attack Hacking

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 192.248.178.174

🇺🇸 192.35.222.19

🇨🇳 114.66.60.221

🇺🇸 104.207.47.245

🇧🇩 103.151.104.83

🇧🇬 78.128.112.146

🇳🇱 68.183.6.66

🇺🇸 64.62.156.148

🇺🇸 47.77.231.186

🇺🇸 47.42.138.97

🇮🇳 34.100.248.63

🇩🇪 31.76.20.19

🇺🇸 20.15.163.73

🇵🇱 194.180.48.131

🇮🇩 182.253.79.195

🇦🇷 181.15.102.100

🇪🇨 179.60.55.5

🇻🇳 171.244.141.86

🇮🇳 139.59.59.165

🇯🇵 118.194.229.94