JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.114.140.138

136.114.140.138 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 99%: ?

99%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	138.140.114.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.114.140.138

Whois 136.114.140.138

IP Abuse Reports for 136.114.140.138:

This IP address has been reported a total of 27 times from 18 distinct sources. 136.114.140.138 was first reported on August 27th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-27 22:00:17 (9 hours ago)	Auto-ban: >3000 req/min op 2026-08-27	Web App Attack SSH Hacking
🇩🇪 dpsbs	2026-08-27 21:31:05 (10 hours ago)	multiple ips intrustions detected	Hacking
🇺🇸 natdem.org	2026-08-27 21:26:40 (10 hours ago)	Web: .env file probe, WordPress config probe, Spring actuator probe	Web App Attack Hacking
🇧🇾 lns.bz	2026-08-27 20:44:09 (10 hours ago)	.env scanning [BY]	Web App Attack
🇺🇸 CBJ	2026-08-27 19:07:52 (12 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇬🇧 Aetherweb Ark	2026-08-27 18:54:12 (12 hours ago)	(mod_security) mod_security (id:949110) triggered by 136.114.140.138 (US/United States/138.140.114.1 ... show more (mod_security) mod_security (id:949110) triggered by 136.114.140.138 (US/United States/138.140.114.136.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇩🇪 on-com	2026-08-27 18:33:28 (13 hours ago)	URL scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 17:23:10 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.114.140.138 (138.140.114.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.114.140.138 (138.140.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 13:23:01.990155 2026] [security2:error] [pid 10810:tid 10810] [client 136.114.140.138:35172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.holtzheimer.buynorthwest.com"] [uri "/wp-config.php.bak"] [unique_id "apBydR0hp_rOWrvGOVkxUwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 16:40:40 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.114.140.138 (138.140.114.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.114.140.138 (138.140.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:40:34.722018 2026] [security2:error] [pid 14835:tid 14835] [client 136.114.140.138:46506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mathiasaspelin.com"] [uri "/.env.dev"] [unique_id "apBoghYIGMX_88Q4eYjY7gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 magnetosphere-tarpit	2026-08-27 16:18:48 (15 hours ago)	Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not ... show more Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not exist on this host. Tarpitted, then banned: 10 requests within 24h0m0s show less	Port Scan Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-27 16:01:58 (15 hours ago)	[ThuAug2718:01:52.7204772026][security2:error][pid1402901:tid1402987][client136.114.140.138:0]ModSec ... show more [ThuAug2718:01:52.7204772026][security2:error][pid1402901:tid1402987][client136.114.140.138:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"jrtradeinnovation.ch.136-243-54-122.cpanel.site\"][uri\"/wp-config.php~\"][unique_id\"apBfcBp7IW5t4d-LTH5F-QAAAJY\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 15:41:08 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.114.140.138 (138.140.114.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.114.140.138 (138.140.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:41:01.850104 2026] [security2:error] [pid 14490:tid 14490] [client 136.114.140.138:41764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bayarealangarts.com"] [uri "/.env.example"] [unique_id "apBajfF5-2aRIx6dXI8-EAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-27 15:35:05 (16 hours ago)	suspicious request in access.log	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-27 15:16:30 (16 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 e.fierstra	2026-08-27 14:33:21 (17 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 74.48.45.140

🇮🇩 36.80.190.112

🇺🇸 13.89.124.81

🇨🇦 4.205.62.107

🇮🇪 2a05:d018:1d9d:e702:5703:f4f5:7d5f:ec1c

🇺🇸 162.0.229.50

🇺🇸 73.251.79.73

🇺🇸 66.67.128.21

🇺🇸 65.49.1.162

🇺🇸 20.171.12.247

🇺🇸 2001:470:1:c84::207

🇦🇷 186.148.138.243

🇻🇳 180.93.35.43

🇫🇮 147.185.133.56

🇺🇸 147.185.132.149

🇨🇳 117.188.182.246

🇨🇦 104.251.42.207

🇷🇺 95.108.213.88

🇺🇦 91.215.146.86

🇳🇱 89.248.165.203