This IP address has been reported a total of
37
times from
20 distinct
sources.
136.109.104.213 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning
show less
Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ...
show moreRequests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/1/image/270x/f4b5615c55446ca4acf532638b23ad11/2/_/2_637_7.jpg ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36')
show less
(mod_security) mod_security (id:11000011) triggered by 136.109.104.213 (US/United States/Oregon/The ...
show more(mod_security) mod_security (id:11000011) triggered by 136.109.104.213 (US/United States/Oregon/The Dalles/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 23 12:19:11.163180 2026] [security2:error] [pid 1934693:tid 1934785] [client 136.109.104.213:59218] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 213.104.109.136.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/wp-content/plugins/justified-image-grid/timthumb.php"] [unique_id "ajpPjmyIwtP6yf56A0raoQAAAEI"]
show less
Port Scan
Anonymous
FortiWeb WAF: 326 attacks detected. Threat Score: 166400. Types: Client Management(163), Block IP Li ...
show moreFortiWeb WAF: 326 attacks detected. Threat Score: 166400. Types: Client Management(163), Block IP List(163). Origin: United States.
show less
(mod_security) mod_security (id:11000011) triggered by 136.109.104.213: 1 in the last 86400 secs; Po ...
show more(mod_security) mod_security (id:11000011) triggered by 136.109.104.213: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 09:16:33.968639 2026] [security2:error] [pid 921871:tid 921980] [client 136.109.104.213:43734] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 213.104.109.136.bc.googleusercontent.com"] [hostname "asteriassantorini.com"] [uri "/wp-content/uploads/2023/05/Grilled-salmon-fillet-300x200.jpg"] [unique_id "ai-Ywe2clReoPvlJKliG-QAAAMA"]
show less
(mod_security) mod_security (id:11000011) triggered by 136.109.104.213: 1 in the last 86400 secs; Po ...
show more(mod_security) mod_security (id:11000011) triggered by 136.109.104.213: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 01:29:45.023783 2026] [security2:error] [pid 948989:tid 949032] [client 136.109.104.213:33736] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 213.104.109.136.bc.googleusercontent.com"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/plugins/justified-image-grid/timthumb.php"] [unique_id "ai8rWNXD3_cY7WcDuxq39QAAAJA"]
show less
Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ...
show moreRequests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/5e4c54b56bd9841aefad18a78cbb6958/1/e/1esf-2801.jpg ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36')
show less
Web App Attack
Exploited Host
Showing 1 to
15
of 37 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩