JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.113.30.115

136.113.30.115 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 54%: ?

54%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	115.30.113.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.113.30.115

Whois 136.113.30.115

IP Abuse Reports for 136.113.30.115:

This IP address has been reported a total of 10 times from 8 distinct sources. 136.113.30.115 was first reported on June 13th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-13 22:00:19 (2 days ago)	Auto-ban: >3000 req/min op 2026-06-13	Web App Attack SSH Hacking
🇬🇧 consul.to	2026-06-13 15:08:59 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 4server	2026-06-13 13:33:54 (2 days ago)	[SatJun1315:33:47.7352282026][security2:error][pid1172538:tid1172583][client136.113.30.115:0]ModSecu ... show more [SatJun1315:33:47.7352282026][security2:error][pid1172538:tid1172583][client136.113.30.115:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autodiscover.atelier-lara.ch\"][uri\"/actuator/logfile\"][unique_id\"ai1cO4MoDC017DHg679KRgAAAEk\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-06-13 12:16:47 (2 days ago)	[SatJun1314:16:39.7127462026][security2:error][pid1082745:tid1083067][client136.113.30.115:0]ModSecu ... show more [SatJun1314:16:39.7127462026][security2:error][pid1082745:tid1083067][client136.113.30.115:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpcontacts.inserzioniticino.ch\"][uri\"/wp-config.php.bak\"][unique_id\"ai1KJz23-2G9qU4RXs_73gAAAAU\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-06-13 12:07:38 (2 days ago)	Restricted File Access Attempt. Matched phrase ".aws/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇳🇱 Site.eu	2026-06-13 10:54:04 (3 days ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-06-13 06:10:06 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 136.113.30.115 (115.30.113.136.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 136.113.30.115 (115.30.113.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:09:57.780285 2026] [security2:error] [pid 15776:tid 15802] [client 136.113.30.115:54072] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.princesscastlebunkbed.davidholls.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.princesscastlebunkbed.davidholls.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiz0Nd5sttBFl4aSfLZF8AAAAJc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-13 05:49:05 (3 days ago)	Multiple WAF Violations	Web App Attack
🇮🇹 VHosting	2026-06-13 05:00:06 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 03:28:23 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 136.113.30.115 (115.30.113.136.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 136.113.30.115 (115.30.113.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 23:28:16.803095 2026] [security2:error] [pid 12948:tid 12963] [client 136.113.30.115:58810] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.asipm.aafm.us\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.asipm.aafm.us"] [uri "/.config/gcloud/credentials.db"] [unique_id "aizOUJ6M2WPOejNPVF0QaAAAAYw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:ff10:c8:594::b

🇬🇧 217.154.45.93

🇨🇳 202.111.183.254

🇻🇪 190.6.47.152

🇺🇸 162.243.116.182

🇱🇹 81.30.98.158

🇬🇧 35.203.210.186

🇮🇱 20.217.83.56

🇬🇧 195.96.139.102

🇺🇸 185.77.223.184

🇮🇳 182.95.183.42

🇮🇳 168.144.81.184

🇺🇸 162.216.150.61

🇨🇳 111.53.0.169

🇮🇳 103.16.202.169

🇳🇱 94.154.35.215

🇳🇱 45.142.193.191

🇺🇸 15.204.211.98

🇦🇹 213.147.167.190

🇺🇸 162.216.149.82