JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

130.211.72.55

Recent Activity

Abuse Confidence Score

92% Critical

17 reports

17 reporters · latest 6 minutes ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 55.72.211.130.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇪 Belgium
City: Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

17 from 17 distinct reporters

First reported

November 15th 2026

Most recent report

6 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 6 🇳🇱 Netherlands 3 🇺🇸 United States of America 3

Most common categories Web App Attack 14 Brute-Force 6 Hacking 5 Bad Web Bot 3 SSH 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 infra-monitor	2026-11-15 12:00:11 UTC · (6 minutes ago)	Automated ban via infra-monitor: wp-sensitive-paths, wordpress-probe	Web App Attack
Anonymous	2026-11-15 11:59:03 UTC · (7 minutes ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇩🇪 big-cloud.nl	2026-11-15 11:56:54 UTC · (9 minutes ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇧🇷 borbolla	2026-11-15 11:53:21 UTC · (13 minutes ago)	Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET / HTTP/1.1" "GET /rede HTTP/1.1" "GET /rede/web/wp-includes/wlwmanifest.xml HTTP/1.1"	Web App Attack Bad Web Bot
🇩🇪 ghostwarriors	2026-11-15 11:50:23 UTC · (16 minutes ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 throny	2026-11-15 11:47:17 UTC · (19 minutes ago)	Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...). Requests within an hour: 4 on 1 host(s) User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0. ... show more Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...). Requests within an hour: 4 on 1 host(s) User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.11 Requested, e.g.: - old.[REDACTED]/web/wp-includes/wlwmanifest.xml - old.[REDACTED]/wp-includes/wlwmanifest.xml show less	Web App Attack
🇺🇸 kosada.com	2026-11-15 11:46:41 UTC · (19 minutes ago)	Repeated requests for suspicious nonexistent URLs, for example: /website/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" ... show more Repeated requests for suspicious nonexistent URLs, for example: /website/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36") show less	Web App Attack
🇩🇪 taloan	2026-11-15 11:42:33 UTC · (23 minutes ago)	dmOffice (dmoffice.de) Security Center: probing a path that does not exist, without credentials: GET //wp-includes/wlwmanifest.xml	Web App Attack Hacking
🇨🇦 zXero	2026-11-15 11:40:42 UTC · (25 minutes ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇪🇸 Francisco Vallejo	2026-11-15 11:40:11 UTC · (26 minutes ago)	[Sun Nov 15 12:40:10.884258 2026] [authz_core:error] [pid 838897:tid 838947] [client 130.211.72.55:52325] AH01630: client denied by server configuration: proxy:http://giedi:3000/ [Sun Nov 15 12:40:10.949802 2026] [authz_core:error] [pid 838897:tid 83 ... show more [Sun Nov 15 12:40:10.884258 2026] [authz_core:error] [pid 838897:tid 838947] [client 130.211.72.55:52325] AH01630: client denied by server configuration: proxy:http://giedi:3000/ [Sun Nov 15 12:40:10.949802 2026] [authz_core:error] [pid 838897:tid 838961] [client 130.211.72.55:52325] AH01630: client denied by server configuration: proxy:http://giedi:3000/wp-includes/wlwmanifest.xml [Sun Nov 15 12:40:10.982512 2026] [authz_core:error] [pid 838897:tid 838964] [client 130.211.72.55:52325] AH01630: client denied by server configuration: proxy:http://giedi:3000/xmlrpc.php [Sun Nov 15 12:40:11.011192 2026] [authz_core:error] [pid 838897:tid 838952] [client 130.211.72.55:52325] AH01630: client denied by server configuration: proxy:http://giedi:3000/ [Sun Nov 15 12:40:11.039027 2026] [authz_core:error] [pid 838897:tid 838956] [client 130.211.72.55:52325] AH01630: client denied by server configuration: proxy:http://giedi:3000/blog/wp-includes/wlwmanifest.xml ... show less	Brute-Force SSH
Anonymous	2026-11-15 11:29:24 UTC · (37 minutes ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇮🇹 VHosting	2026-11-15 11:25:04 UTC · (41 minutes ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-11-15 11:24:25 UTC · (41 minutes ago)	(mod_security) mod_security (id:225170) triggered by 130.211.72.55 (55.72.211.130.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:24:18.041244 2026] [security2:error] [pid 18632:tid ... show more (mod_security) mod_security (id:225170) triggered by 130.211.72.55 (55.72.211.130.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:24:18.041244 2026] [security2:error] [pid 18632:tid 18632] [client 130.211.72.55:60241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|notearsweb.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "notearsweb.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "avmWYiteOlSi8IIpiz93MQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-11-15 11:20:16 UTC · (46 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇳🇱 e.fierstra	2026-11-15 11:19:28 UTC · (46 minutes ago)	excessive HTTP 404 errors	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.251

🇺🇸 159.89.128.52

🇩🇪 142.93.173.254

🇷🇺 93.178.112.101

🇰🇷 59.2.2.164

🇺🇸 51.81.200.96

🇺🇸 40.124.123.191

🇹🇼 1.169.177.104

🇰🇷 218.234.186.2

🇭🇰 203.86.122.158

🇷🇴 193.32.162.218

🇦🇷 190.172.54.190

🇫🇷 185.177.72.9

🇺🇸 172.233.219.44

🇿🇦 102.129.54.117

🇦🇺 45.132.225.144

🇬🇧 35.203.211.224

🇮🇷 5.160.170.2

🇲🇦 197.146.128.84

🇺🇦 195.18.19.110