JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.109.123.138

136.109.123.138 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	138.123.109.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.109.123.138

Whois 136.109.123.138

IP Abuse Reports for 136.109.123.138:

This IP address has been reported a total of 47 times from 34 distinct sources. 136.109.123.138 was first reported on August 3rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-01 22:00:57 (1 day ago)	Auto-ban: >3000 req/min op 2026-09-01	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-09-01 13:53:41 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:53:38.192878 2026] [security2:error] [pid 29758:tid 29758] [client 136.109.123.138:52768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.peterjohnsonauthor.com"] [uri "/.env.backup"] [unique_id "apbY4hfz7oL-jp7lrHDMnAAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-01 13:49:10 (1 day ago)	[TueSep0115:49:04.1281242026][security2:error][pid3511678:tid3511958][client136.109.123.138:0]ModSec ... show more [TueSep0115:49:04.1281242026][security2:error][pid3511678:tid3511958][client136.109.123.138:0]ModSecurity:Accessdeniedwithcode403$phase1$.Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpcalendars.aeapcl.ch\"][uri\"/.env.local\"][unique_id\"apbX0CWl1AY3N-P-vNBHvwAAAQs\"] show less	Hacking Web App Attack
🇩🇪 Petros Stefanakis	2026-09-01 13:46:52 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 136.109.123.138 (US/United States/138.1 ... show more (mod_security) mod_security triggered on hostname [redacted] 136.109.123.138 (US/United States/138.123.109.136.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 bogdanv	2026-09-01 11:24:51 (1 day ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 11:23:39 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:23:32.613283 2026] [security2:error] [pid 20788:tid 20788] [client 136.109.123.138:44922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wintercypher.com"] [uri "/.env.save"] [unique_id "apa1tDKv-MLZFO1-LX3pzwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 11:06:27 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:06:19.242067 2026] [security2:error] [pid 2742:tid 2742] [client 136.109.123.138:41324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ryanpianos.com"] [uri "/.env.dev"] [unique_id "apaxq-_3Pt26JW9R1pXHdgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-09-01 10:06:25 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 09:56:54 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:56:46.732236 2026] [security2:error] [pid 20759:tid 20759] [client 136.109.123.138:42100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ficciones.com"] [uri "/.env.old"] [unique_id "apahXt6heb8WAJxxeFNkKgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-09-01 09:43:18 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
Anonymous	2026-09-01 08:25:12 (1 day ago)	PSCSERV WPSCAN 136.109.123.138	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-01 08:20:04 (1 day ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 07:23:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.109.123.138 (138.123.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:23:26.461506 2026] [security2:error] [pid 3024:tid 3024] [client 136.109.123.138:38198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindtoken.app"] [uri "/wp-config.php~"] [unique_id "apZ9bpCStdqRArKOudbUJQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 07:12:03 (1 day ago)	Bot / scanning and/or hacking attempts: GET /.env.dev HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env H ... show more Bot / scanning and/or hacking attempts: GET /.env.dev HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env HTTP/1.1, GET /.env.backup HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.production HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /actuator/env HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-09-01 07:06:37 (1 day ago)	Repeated requests for suspicious nonexistent URLs, for example: /.env.old (HTTP port 443)	Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.66

🇨🇴 179.1.187.22

🇨🇱 34.176.6.174

🇻🇳 14.225.5.241

🇯🇵 205.188.149.105

🇭🇰 172.68.211.166

🇨🇦 149.56.150.39

🇧🇷 137.131.232.50

🇬🇪 109.172.145.184

🇷🇺 46.254.27.8

🇺🇸 44.203.7.168

🇨🇱 34.176.200.8

🇨🇱 34.176.108.210

🇪🇸 34.175.64.113

🇧🇴 181.188.176.242

🇦🇷 181.46.196.145

🇺🇸 136.57.111.59

🇺🇸 100.29.192.8

🇳🇱 45.148.10.141

🇺🇸 44.220.185.4