JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.115.108.48

136.115.108.48 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	48.108.115.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.115.108.48

Whois 136.115.108.48

IP Abuse Reports for 136.115.108.48:

This IP address has been reported a total of 29 times from 23 distinct sources. 136.115.108.48 was first reported on August 31st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-09-01 10:15:37 (3 hours ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-01 09:54:57 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.115.108.48 (48.108.115.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.115.108.48 (48.108.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:54:51.445717 2026] [security2:error] [pid 6458:tid 6458] [client 136.115.108.48:34808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "filardi.org"] [uri "/.env.old"] [unique_id "apag69WxgYkDeBvTJABErwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-01 09:50:15 (3 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-09-01 09:07:04 (4 hours ago)	Automated web scanner. Requested suspicious paths: /.env.production \| /.env.dev \| /_ignition/health- ... show more Automated web scanner. Requested suspicious paths: /.env.production \| /.env.dev \| /_ignition/health-check \| /env \| /actuator/configprops \| /.env.example \| /crusader-404-probe \| /storage/logs/laravel.log \| /.env.backup \| /.env.old \| /.env.local \| /.env \| /actuator/env \| /.env.prod \| /.env.save \| /.env.bak. UTC: 2026-09-01 08:26:08. show less	Web App Attack
Anonymous	2026-09-01 07:48:30 (5 hours ago)	CrowdSec ban: crowdsecurity/http-sensitive-files	Port Scan
🇺🇸 TPI-Abuse	2026-09-01 06:48:59 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.115.108.48 (48.108.115.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.115.108.48 (48.108.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:48:52.136091 2026] [security2:error] [pid 31118:tid 31131] [client 136.115.108.48:56900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thedowntonstory.com"] [uri "/.env.backup"] [unique_id "apZ1VK58SoU4616IVUYIkgAAAUA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-09-01 06:28:50 (6 hours ago)	(mod_security) mod_security (id:949110) triggered by 136.115.108.48 (US/United States/48.108.115.136 ... show more (mod_security) mod_security (id:949110) triggered by 136.115.108.48 (US/United States/48.108.115.136.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇺🇸 lnklnx	2026-09-01 06:10:59 (7 hours ago)	www.lnklnx.com:443 136.115.108.48 - - [01/Sep/2026:01:10:56 -0500] "GET /.env.dev HTTP/1.1" 403 5318 ... show more www.lnklnx.com:443 136.115.108.48 - - [01/Sep/2026:01:10:56 -0500] "GET /.env.dev HTTP/1.1" 403 5318 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 06:03:20 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.115.108.48 (48.108.115.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.115.108.48 (48.108.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:03:15.481189 2026] [security2:error] [pid 6841:tid 6841] [client 136.115.108.48:41906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dodojuice.com"] [uri "/.env"] [unique_id "apZqo8Qjy2Xisb-0XVLYagAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 04:45:59 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.115.108.48 (48.108.115.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.115.108.48 (48.108.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:45:51.970377 2026] [security2:error] [pid 30233:tid 30233] [client 136.115.108.48:42520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hischurchatwork.iworklife.org"] [uri "/.env.save"] [unique_id "apZYfyct8Bo-eAeIXSF3NQAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-01 04:25:03 (9 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
Anonymous	2026-09-01 04:21:14 (9 hours ago)	136.115.108.48 - - [31/Aug/2026:23:19:53 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "crusade ... show more 136.115.108.48 - - [31/Aug/2026:23:19:53 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.115.108.48 136.115.108.48 - - [31/Aug/2026:23:19:53 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.115.108.48 136.115.108.48 - - [31/Aug/2026:23:19:53 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.115.108.48 136.115.108.48 - - [31/Aug/2026:23:19:53 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.115.108.48 136.115.108.48 - - [31/Aug/2026:23:19:53 -0500] "GET /.env HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.115.108.48 136.115.108.48 - - [31/Aug/2026:23:19:53 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.115.108.48 136.115.108.48 - - [31/Aug/2026:23:19:53 -0500] "GET /.env.dev HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.115.108.48 136.115.108.48 - - [31/Aug/2026:23:19:53 -0500] "GET /.env.save HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.115.108.48 136.115.108 ... show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-09-01 04:17:25 (9 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-01 04:01:08 (9 hours ago)	Multiple WAF Violations	Web App Attack
🇫🇮 paissangroup	2026-09-01 03:34:23 (9 hours ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 188.166.29.60

🇺🇸 165.154.172.116

🇳🇴 135.136.14.12

🇹🇼 110.25.112.152

🇮🇷 217.60.255.130

🇰🇷 211.251.245.88

🇺🇸 198.144.183.125

🇬🇧 178.239.198.36

🇳🇱 176.65.149.31

🇵🇰 103.152.255.243

🇧🇪 91.90.123.187

🇺🇸 71.6.233.2

🇳🇱 45.148.10.152

🇺🇸 20.168.116.248

🇨🇳 222.89.183.245

🇧🇷 187.33.59.116

🇺🇸 162.216.149.184

🇵🇰 154.57.216.142

🇧🇩 118.179.212.93

🇯🇵 111.238.174.6