JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.114.208.146

136.114.208.146 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	146.208.114.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.114.208.146

Whois 136.114.208.146

IP Abuse Reports for 136.114.208.146:

This IP address has been reported a total of 53 times from 39 distinct sources. 136.114.208.146 was first reported on August 27th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-31 00:01:03 (3 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 bluematrix	2026-08-29 03:20:31 (5 days ago)	crowdsecurity/http-sensitive-files - Ip 136.114.208.146 performed 'crowdsecurity/http-sensitive-file ... show more crowdsecurity/http-sensitive-files - Ip 136.114.208.146 performed 'crowdsecurity/http-sensitive-files' (5 events over 16.973548ms) at 2026-08-29 03:20:31.271246996 +0000 UTC show less	Port Scan Hacking Brute-Force Web App Attack
🇩🇪 4server	2026-08-29 02:48:19 (5 days ago)	[SatAug2904:48:13.8168742026][security2:error][pid3498688:tid3498898][client136.114.208.146:0]ModSec ... show more [SatAug2904:48:13.8168742026][security2:error][pid3498688:tid3498898][client136.114.208.146:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.life-live.ch.136-243-54-122.cpanel.site\"][uri\"/.env.old\"][unique_id\"apJIbXqvi_W3Glg-6KfffwAAAIo\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-29 02:29:32 (5 days ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196) show less	Hacking
🇫🇷 Stara	2026-08-29 01:48:57 (5 days ago)	ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)	Brute-Force SSH Web App Attack
🇮🇹 mediarama.com	2026-08-29 00:34:37 (5 days ago)	Banned by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 00:19:03 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 136.114.208.146 (146.208.114.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.114.208.146 (146.208.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:19:00.413667 2026] [security2:error] [pid 8566:tid 8566] [client 136.114.208.146:46632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northfultonneurology.com"] [uri "/.env.example"] [unique_id "apIldJwhUYlRL6hH0ZST1gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Philister11	2026-08-29 00:06:16 (5 days ago)	CrowdSec: crowdsecurity/http-sensitive-files (US/AS396982)	Web App Attack Hacking
🇺🇸 jkhorvath.com	2026-08-28 23:51:55 (5 days ago)	Request for URL /.env	Phishing Brute-Force Web App Attack
🇺🇸 Som1ght3n	2026-08-28 23:07:43 (5 days ago)	The IP attempted to access sensitive application configuration files (.env.dev) on the web server.	Web App Attack
Anonymous	2026-08-28 22:15:28 (5 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-28 22:04:19 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27. show less	Web App Attack SSH Hacking
🇩🇪 hidemail.app	2026-08-28 20:06:56 (5 days ago)	Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto ... show more Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban. show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-28 17:22:56 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 136.114.208.146 (146.208.114.136.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 136.114.208.146 (146.208.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:22:48.906548 2026] [security2:error] [pid 462:tid 462] [client 136.114.208.146:36564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jirafx.aktkaro.com"] [uri "/.env.prod"] [unique_id "apHD6HI3KVFErZT9FI_UawAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-08-28 14:30:08 (5 days ago)		Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 200.86.178.31

🇩🇪 172.120.89.78

🇫🇷 147.79.21.59

🇺🇸 131.109.131.82

🇨🇳 220.181.108.166

🇺🇸 192.169.213.186

🇺🇸 192.34.62.126

🇺🇸 159.203.188.245

🇺🇸 147.185.132.65

🇮🇩 103.144.82.250

🇬🇧 86.180.105.104

🇩🇪 69.5.169.214

🇩🇪 69.5.169.118

🇬🇧 37.10.113.220

🇺🇸 20.84.166.5

🇺🇸 216.25.89.86

🇮🇳 202.140.61.18

🇧🇷 191.205.188.130

🇷🇺 188.170.33.111

🇵🇰 153.117.37.243