JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.111.128.134

136.111.128.134 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	134.128.111.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.111.128.134

Whois 136.111.128.134

IP Abuse Reports for 136.111.128.134:

This IP address has been reported a total of 40 times from 30 distinct sources. 136.111.128.134 was first reported on September 22nd 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-23 06:00:01 (3 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇦🇺 aranguren.org	2026-09-23 02:38:37 (6 hours ago)	136.111.128.134 - - [23/Sep/2026:12:38:37 +1000] "GET /graphql HTTP/2.0" 404 1120 "https://www.arang ... show more 136.111.128.134 - - [23/Sep/2026:12:38:37 +1000] "GET /graphql HTTP/2.0" 404 1120 "https://www.aranguren.org" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 136.111.128.134 - - [23/Sep/2026:12:38:37 +1000] "GET /config/env/aws_credentials.env HTTP/2.0" 404 1182 "https://www.aranguren.org/config/env/aws_credentials.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 136.111.128.134 - - [23/Sep/2026:12:38:37 +1000] "GET /api HTTP/2.0" 406 - "https://www.aranguren.org/api" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 136.111.128.134 - - [23/Sep/2026:12:38:37 +1000] "GET /config/firebase-admin.json HTTP/2.0" 404 1174 "https://www.aranguren.org/config/firebase-admin.json" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 136.111.128.134 - - [23/Sep/2026:12:38:37 +1000] "GET /firebase.json HTTP/2.0" 404 1148 "https://www.aranguren.org/firebase.json" ... show less	Bad Web Bot
🇳🇱 U.N.Owen	2026-09-23 02:05:50 (7 hours ago)	136.111.128.134 - - [23/Sep/2026:05:05:50 +0300] "GET /z9x8c7v6b5-debug-trigger-www.anpnet.org HTTP/ ... show more 136.111.128.134 - - [23/Sep/2026:05:05:50 +0300] "GET /z9x8c7v6b5-debug-trigger-www.anpnet.org HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 136.111.128.134 - - [23/Sep/2026:05:05:50 +0300] "GET /assets/manifest.json HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 136.111.128.134 - - [23/Sep/2026:05:05:50 +0300] "GET /asset-manifest.json HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 136.111.128.134 - - [23/Sep/2026:05:05:50 +0300] "GET /manifest.json HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 136.111.128.134 - - [23/Sep/2026:05:05:50 +0300] "GET /hw90ixpudcnqhpf6x8jb HTTP/2.0" 404 6355 "-" "Mozilla/5.0 (compatible; Kimi-Se ... show less	Hacking Web App Attack
Anonymous	2026-09-22 23:00:02 (10 hours ago)	Bot / scanning and/or hacking attempts: POST /api/designer/v1/file-content HTTP/2.0, DELETE /api/inn ... show more Bot / scanning and/or hacking attempts: POST /api/designer/v1/file-content HTTP/2.0, DELETE /api/inngest HTTP/2.0, GET /test.php HTTP/2.0, [483/483] read: stream 0, , POST /mcp HTTP/2.0, GET /.env?raw?? HTTP/2.0, POST /api/templates/preview HTTP/2.0, GET /server-info HTTP/2.0, GET /Dockerfile HTTP/2.0, GET /_profiler/open HTTP/2.0, [99/99] read: stream 0, , GET /.github/workflows/deploy.yml HTTP/2.0, [174/173] done: stream 343, GET /docker-compose.yml, GET /v1/graphql HTTP/2.0, POST /lib/terminal-xhr.php HTTP/2.0, POST /icecoder/lib/terminal-xhr.php HTTP/2.0, GET /api/.env HTTP/2.0, GET /horizon/api/stats HTTP/2.0, GET /secrets.json HTTP/2.0, POST /functionRouter HTTP/2.0 show less	Hacking Web App Attack
Anonymous	2026-09-22 21:01:01 (12 hours ago)	...	Web App Attack
🇺🇸 wordpresshosting.solutions	2026-09-22 17:52:15 (15 hours ago)	Web app vulnerability scanning detected. Evidence: [IP] - - [22/Sep/2026:17:52:15 +0000] "GET /admin ... show more Web app vulnerability scanning detected. Evidence: [IP] - - [22/Sep/2026:17:52:15 +0000] "GET /admin%2F.env HTTP/1.1" 404 776 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" [IP] - - [22/Sep/2026:17:52:15 +0000] "GET /dashboard%2F.env HTTP/1.1" 404 776 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 17:19:37 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.111.128.134 (134.128.111.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.111.128.134 (134.128.111.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:19:32.486955 2026] [security2:error] [pid 13974:tid 13974] [client 136.111.128.134:40114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agkgt.org"] [uri "/api/.env/public/.env"] [unique_id "arK4pCxvBfmV11Icz5LIcQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-09-22 17:18:47 (16 hours ago)	136.111.128.134 - - [22/Sep/2026:17:17:45 +0000] "POST / HTTP/2.0" 403 33007 "-" "Mozilla/5.0 AppleW ... show more 136.111.128.134 - - [22/Sep/2026:17:17:45 +0000] "POST / HTTP/2.0" 403 33007 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" "-" edge="136.111.128.134" 136.111.128.134 - - [22/Sep/2026:17:17:46 +0000] "GET /webpack-stats.json HTTP/2.0" 403 10642 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" "-" edge="136.111.128.134" 136.111.128.134 - - [22/Sep/2026:17:17:46 +0000] "GET /dist/manifest.json HTTP/2.0" 403 10642 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" "-" edge="136.111.128.134" 136.111.128.134 - - [22/Sep/2026:17:17:46 +0000] "GET /manifest.json HTTP/2.0" 403 10642 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" "-" edge="136.111.128.134" 136.111.128.134 - - [22/Sep/2026:17:17:46 +0000] "GET /static/manif ... show less	Web App Attack
Anonymous	2026-09-22 17:16:20 (16 hours ago)	LogGuard auto-report \| score=110 \| flags=flood \| reasons=[+35] burst_10s_hard: 190 req in 10s (thres ... show more LogGuard auto-report \| score=110 \| flags=flood \| reasons=[+35] burst_10s_hard: 190 req in 10s (threshold 100); [+25] error_ratio_severe: 81% error rate in 60s (153/190); [+25] path_diversity_severe: 168 unique paths in 60s (threshold 50); [+25] probe_paths: Hit 69 known probe paths: /.aws/config, /.env, /.env.backup, /.env.bak, /.env.development show less	DDoS Attack
🇮🇹 VHosting	2026-09-22 14:55:04 (18 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2026-09-22 14:06:14 (19 hours ago)	136.111.128.134 - - [22/Sep/2026:15:06:29 +0100] "POST /api/v1/validate/code HTTP/1.1" 404 53758 "-" ... show more 136.111.128.134 - - [22/Sep/2026:15:06:29 +0100] "POST /api/v1/validate/code HTTP/1.1" 404 53758 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" ... show less	Bad Web Bot
🇫🇷 Octopuce	2026-09-22 13:53:31 (19 hours ago)	Aggressive web search of vulnerable pages: /_nuxt/../.env /assets../.env /static../.env /media../.en ... show more Aggressive web search of vulnerable pages: /_nuxt/../.env /assets../.env /static../.env /media../.env /images../.env ... show less	Web App Attack
🇺🇸 Mundo Bueno	2026-09-22 13:30:35 (19 hours ago)	[ISILIA Protection v2.3] Tentative d'accès: /static//home/user/.env [RATE LIMITED - 1800s quarantine ... show more [ISILIA Protection v2.3] Tentative d'accès: /static//home/user/.env [RATE LIMITED - 1800s quarantine] \| Pays: US \| UA: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/) show less	Hacking Web App Attack
🇺🇸 TAY	2026-09-22 13:24:06 (19 hours ago)	136.111.128.134 - - [22/Sep/2026:21:24:00 +0800] "GET /static../.env HTTP/1.1" 404 86575 "-" "Mozill ... show more 136.111.128.134 - - [22/Sep/2026:21:24:00 +0800] "GET /static../.env HTTP/1.1" 404 86575 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.111.128.134 - - [22/Sep/2026:21:24:01 +0800] "GET /media../.env HTTP/1.1" 404 80761 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 136.111.128.134 - - [22/Sep/2026:21:24:00 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 86930 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 136.111.128.134 - - [22/Sep/2026:21:24:03 +0800] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 136.111.128.134 - - [22/Sep/2026:21:24:03 +0800] "GET /files../.env HTTP/1.1" 404 80761 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 136.111.128.134 - - [22/Sep/2026:21:24:04 +0800] "GET /@fs/../.env?ra ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-22 13:13:27 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.111.128.134 (134.128.111.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.111.128.134 (134.128.111.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:13:23.851185 2026] [security2:error] [pid 3402:tid 3402] [client 136.111.128.134:37936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avalonestates.org"] [uri "/.env.save"] [unique_id "arJ-89WAFD7O8yGzzyE_KwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 211.143.234.150

🇳🇱 206.189.8.155

🇺🇸 159.65.224.88

🇮🇳 122.187.225.13

🇸🇬 47.84.144.169

🇷🇺 46.191.163.243

🇭🇰 45.64.74.51

🇺🇸 3.86.114.186

🇺🇸 2001:470:1:332::a6

🇮🇳 223.181.56.87

🇺🇸 162.216.150.172

🇺🇸 157.230.59.111

🇸🇬 104.250.53.67

🇺🇸 40.124.169.46

🇹🇼 36.238.136.158

🇸🇬 35.240.234.204

🇺🇸 34.26.158.246

🇰🇷 14.55.144.22

🇮🇩 202.77.109.243

🇦🇺 170.64.142.108