JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.109.140.230

136.109.140.230 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	230.140.109.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.109.140.230

Whois 136.109.140.230

IP Abuse Reports for 136.109.140.230:

This IP address has been reported a total of 34 times from 26 distinct sources. 136.109.140.230 was first reported on August 26th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-27 06:00:33 (6 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 openstrike.co.uk	2026-08-27 05:14:17 (6 days ago)	215 attacks on password grabbing URLs, VC URLs, directory traversals, env grabbing URLs, PHP URLs, c ... show more 215 attacks on password grabbing URLs, VC URLs, directory traversals, env grabbing URLs, PHP URLs, config grabbing URLs (type 2), site downloads: GET /.vscode/sftp.json HTTP/1.1 GET /.git/config HTTP/1.1 GET /..%252F..%252F..%252F..%252F..%252Fproc/self/environ HTTP/1.1 GET /aws/.env HTTP/1.1 GET /info.php HTTP/1.1 GET /appspec.yml HTTP/1.1 GET /database.sql HTTP/1.1 show less	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-26 22:00:17 (6 days ago)	Auto-ban: >3000 req/min op 2026-08-26	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-08-26 17:54:42 (6 days ago)	Excessive multi-domain requests	Brute-Force
🇷🇺 DZBOT	2026-08-26 17:23:39 (6 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇸🇪 vaia.cloud	2026-08-26 16:55:02 (6 days ago)	crowdsecurity/http-wordpress_wpconfig	Brute-Force Web App Attack
🇺🇸 uchat-ai.com	2026-08-26 15:58:10 (6 days ago)	IP 136.109.140.230 在过去24小时内进行了 43 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched d ... show more IP 136.109.140.230 在过去24小时内进行了 43 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Possible Remote File Inclusion (RFI) Attack: URL Parameter using IP Address, 攻击信息: No matched data found; 攻击类型: Path Traversal Attack (/../), 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Possible Remote File Inclusion (RFI) Attack: URL Parameter using IP Address, 攻击信息: No matched data found; 攻击类型: Path Traversal Attack (/../), 攻击信息: No matched data found; 攻击类型: OS File Access Attempt, 攻击信息: No matched data found; 攻击类型: Possible Remote File Inclusion (RFI) Attack: URL Parameter using IP Address, 攻击信息: No matched data found; 攻击类型: Path Traversal Attack (/../), 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched show less	Web App Attack
🇫🇷 Hippoline	2026-08-26 15:31:28 (6 days ago)	[Wed Aug 26 17:31:24.891770 2026] [authz_core:error] [pid 30918] [client 136.109.140.230:11334] AH01 ... show more [Wed Aug 26 17:31:24.891770 2026] [authz_core:error] [pid 30918] [client 136.109.140.230:11334] AH01630: client denied by server configuration: /var/www/modern-art.lu/web/.env.local.php [Wed Aug 26 17:31:24.893068 2026] [authz_core:error] [pid 30929] [client 136.109.140.230:11228] AH01630: client denied by server configuration: /var/www/modern-art.lu/web/.env.php [Wed Aug 26 17:31:27.698756 2026] [authz_core:error] [pid 30954] [client 136.109.140.230:11230] AH01630: client denied by server configuration: /var/www/modern-art.lu/web/app_dev.php [Wed Aug 26 17:31:27.700147 2026] [authz_core:error] [pid 31104] [client 136.109.140.230:59828] AH01630: client denied by server configuration: /var/www/modern-art.lu/web/phpinfo.php [Wed Aug 26 17:31:27.720551 2026] [authz_core:error] [pid 31010] [client 136.109.140.230:59272] AH01630: client denied by server configuration: /var/www/modern-art.lu/web/app_dev.php ... show less	Brute-Force Web App Attack
🇩🇪 Phenix Info	2026-08-26 14:54:14 (6 days ago)	SmallGuard.fr - Forbidden Ext.	Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 13:14:44 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 136.109.140.230 (230.140.109.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.109.140.230 (230.140.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 09:14:39.857984 2026] [security2:error] [pid 4492:tid 4492] [client 136.109.140.230:17032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cmcnyc.com"] [uri "/@fs/../.env"] [unique_id "ao7mv5DKlUMRONpHzs3P9gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 11:39:02 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 136.109.140.230 (230.140.109.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.109.140.230 (230.140.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 07:38:54.814823 2026] [security2:error] [pid 3692:tid 3692] [client 136.109.140.230:63054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gildemello.com"] [uri "/static../.env"] [unique_id "ao7QTt5KpRF-KAwVE4aTQwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 11:22:45 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 136.109.140.230 (230.140.109.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.109.140.230 (230.140.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 07:22:40.729420 2026] [security2:error] [pid 17971:tid 18021] [client 136.109.140.230:42356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wintechltd.com"] [uri "/.git/HEAD"] [unique_id "ao7MgIBzPU2pjshySvEKLwAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-26 10:37:40 (1 week ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇨🇭 zynex	2026-08-26 10:23:48 (1 week ago)	URL Probing: /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 10:00:20 (1 week ago)	(mod_security) mod_security (id:211190) triggered by 136.109.140.230 (230.140.109.136.bc.googleuserc ... show more (mod_security) mod_security (id:211190) triggered by 136.109.140.230 (230.140.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:00:11.379065 2026] [security2:error] [pid 11759:tid 11759] [client 136.109.140.230:41320] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|mail.thestages.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /download?file=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thestages.com"] [uri "/download"] [unique_id "ao65K6KNBZZkeCI9rbsSbgAAACM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 85.99.93.205

🇺🇦 195.95.147.125

🇳🇱 193.176.31.230

🇿🇲 102.23.122.235

🇩🇪 85.239.149.72

🇨🇦 85.217.149.66

🇪🇨 45.224.97.244

🇳🇱 45.148.10.157

🇫🇷 38.242.195.241

🇺🇸 34.94.156.186

🇺🇸 2604:a880:400:d1:0:4:e8d1:3001

🇨🇳 223.199.162.99

🇦🇷 216.244.214.178

🇪🇪 95.85.245.227

🇬🇧 87.236.176.94

🇸🇬 84.75.150.50

🇬🇧 31.14.254.119

🇺🇸 23.94.155.57

🇮🇳 210.212.136.3

🇵🇱 195.117.226.2