JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.109.72.69

136.109.72.69 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 75%: ?

75%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	69.72.109.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.109.72.69

Whois 136.109.72.69

IP Abuse Reports for 136.109.72.69:

This IP address has been reported a total of 26 times from 20 distinct sources. 136.109.72.69 was first reported on September 3rd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-04 11:50:15 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:50:10.173167 2026] [security2:error] [pid 2824998:tid 2825089] [client 136.109.72.69:49108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "titanweb.com.appraisalteam.net"] [uri "/var/www/.git/config"] [unique_id "apqwcg1OtXLqWHx1GpHCOgAAAIk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-04 11:24:32 (2 weeks ago)	[ssd1.kdns.gr] httpd-config-scan: sites=www.filoixenofontos.gr; logs=/var/log/httpd/domains/filoixen ... show more [ssd1.kdns.gr] httpd-config-scan: sites=www.filoixenofontos.gr; logs=/var/log/httpd/domains/filoixenofontos.gr.log; samples=/api/.git/config \| /backend/.git/config \| /.git/config show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-04 11:17:07 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:17:03.059521 2026] [security2:error] [pid 6199:tid 6199] [client 136.109.72.69:35752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internetnameregistration.com"] [uri "/wordpress/.git/config"] [unique_id "apqor9hrwv0DpCVw-Bg1QgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-04 11:12:02 (2 weeks ago)	Bot / scanning and/or hacking attempts: GET /api/.git/config HTTP/1.1, GET /site/.git/config HTTP/1. ... show more Bot / scanning and/or hacking attempts: GET /api/.git/config HTTP/1.1, GET /site/.git/config HTTP/1.1, GET /app/.git/config HTTP/1.1, GET /wordpress/.git/config HTTP/1.1, GET /public/.git/config HTTP/1.1, GET /src/.git/config HTTP/1.1, GET /var/www/.git/config HTTP/1.1, GET /www/.git/config HTTP/1.1, GET /.git/config HTTP/1.1, GET /htdocs/.git/config HTTP/1.1, GET /backend/.git/config HTTP/1.1, GET /html/.git/config HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-04 09:25:19 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:25:13.719282 2026] [security2:error] [pid 30545:tid 30545] [client 136.109.72.69:56778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.smoothiessoupssalads.com"] [uri "/public/.git/config"] [unique_id "apqOeZ8bt6bEFNJ4FE9REwAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-04 07:25:01 (2 weeks ago)	suspicious request in access.log	Web App Attack
🇩🇪 raph	2026-09-04 06:00:54 (2 weeks ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-09-04 05:30:17 (2 weeks ago)	Try to access /api/.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-09-04 04:51:51 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 00:51:44.474054 2026] [security2:error] [pid 20808:tid 20808] [client 136.109.72.69:38180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "support.alitcogroup.com"] [uri "/var/www/.git/config"] [unique_id "appOYNGytJ5dEumZPe8jAwAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-09-04 00:44:37 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇳🇱 e.fierstra	2026-09-04 00:05:51 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 23:55:20 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.109.72.69 (69.72.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:55:12.367503 2026] [security2:error] [pid 5497:tid 5497] [client 136.109.72.69:48786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spiht.com"] [uri "/app/.git/config"] [unique_id "apoI4Ddp_RVgojvJVKvk0wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-09-03 22:17:41 (2 weeks ago)	136.109.72.69 - - [04/Sep/2026:00:17:41 +0200] "GET /htdocs/.git/config HTTP/1.1" 301 169 "-" "crusa ... show more 136.109.72.69 - - [04/Sep/2026:00:17:41 +0200] "GET /htdocs/.git/config HTTP/1.1" 301 169 "-" "crusader-worker/1.0" "status.thebomb.site" ... show less	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-03 21:52:43 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 ghostwarriors	2026-09-03 19:20:03 (2 weeks ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.180.11.80

🇧🇷 205.210.31.148

🇨🇱 190.151.5.26

🇩🇿 154.241.55.23

🇳🇱 130.12.180.174

🇳🇱 107.189.27.179

🇺🇸 87.83.12.9

🇫🇷 85.217.140.42

🇷🇸 77.105.37.219

🇺🇸 20.51.250.231

🇻🇳 14.162.135.241

🇵🇰 203.128.6.156

🇬🇧 195.206.182.222

🇦🇺 168.144.161.106

🇫🇷 137.74.246.152

🇮🇩 103.158.96.246

🇺🇸 64.62.197.191

🇱🇹 62.60.130.253

🇳🇱 45.138.12.10

🇧🇪 34.62.70.242