JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.115.64.49

136.115.64.49 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 85%: ?

85%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	49.64.115.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.115.64.49

Whois 136.115.64.49

IP Abuse Reports for 136.115.64.49:

This IP address has been reported a total of 27 times from 15 distinct sources. 136.115.64.49 was first reported on July 19th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-20 22:02:02 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-19. show less	Web App Attack SSH Hacking
🇳🇱 Grad	2026-07-20 03:56:05 (2 days ago)	Jul 20 05:56:05 server postfix/smtpd[913401]: NOQUEUE: reject: RCPT from 49.64.115.136.bc.googleuser ... show more Jul 20 05:56:05 server postfix/smtpd[913401]: NOQUEUE: reject: RCPT from 49.64.115.136.bc.googleusercontent.com[136.115.64.49]: 454 4.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<evermade.nl> ... show less	Email Spam Brute-Force
🇬🇧 Bytemark	2026-07-20 03:35:26 (2 days ago)	2026-07-20T04:35:25.853110+01:00 dlcentre3 postfix/smtpd[2788453]: NOQUEUE: reject: RCPT from 49.64. ... show more 2026-07-20T04:35:25.853110+01:00 dlcentre3 postfix/smtpd[2788453]: NOQUEUE: reject: RCPT from 49.64.115.136.bc.googleusercontent.com[136.115.64.49]: 554 5.7.1 Service unavailable; Client host [136.115.64.49] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/136.115.64.49; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mcam.nl> show less	Email Spam Spoofing Brute-Force Exploited Host
🇳🇱 homeshowdomain.nl	2026-07-19 21:59:08 (3 days ago)	Auto-ban: >3000 req/min op 2026-07-19	Web App Attack SSH Hacking
🇺🇸 mnsf	2026-07-19 19:05:05 (3 days ago)	Abuse Detected (43)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 18:49:07 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 14:49:02.398685 2026] [security2:error] [pid 576841:tid 576841] [client 136.115.64.49:36612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.marv.us"] [uri "/.git/config"] [unique_id "al0cHgecKRlfMhL0IrIZVQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 18:27:13 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 14:27:06.045664 2026] [security2:error] [pid 3997663:tid 3997663] [client 136.115.64.49:51512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.marriedtv.com"] [uri "/.git/config"] [unique_id "al0W-qEzMRxY7UT7IxfnCQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-19 18:12:02 (3 days ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 18:09:43 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 14:09:37.679203 2026] [security2:error] [pid 2614930:tid 2614930] [client 136.115.64.49:59096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.markgreenhouse.com"] [uri "/.git/config"] [unique_id "al0S4beJmc_xYEi6dtiFDwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 interbiznw.com	2026-07-19 18:03:03 (3 days ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 consul.to	2026-07-19 17:40:46 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 17:38:30 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 13:38:25.455422 2026] [security2:error] [pid 23213:tid 23213] [client 136.115.64.49:40698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.marilyn.seizetheseason.com"] [uri "/.git/config"] [unique_id "al0LkcSqwNLhmVIwDBwSPQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-19 17:29:35 (3 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 17:23:02 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.115.64.49 (49.64.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 13:22:55.253475 2026] [security2:error] [pid 18521:tid 18521] [client 136.115.64.49:43424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.margroberts.com"] [uri "/.git/config"] [unique_id "al0H75sk_DZKx2TyWQF2bQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-19 17:13:55 (3 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 186.71.90.36

🇨🇴 181.205.154.211

🇸🇪 172.253.94.158

🇭🇰 156.225.1.38

🇨🇳 112.86.146.178

🇨🇦 70.55.184.62

🇨🇦 212.56.49.97

🇳🇱 195.178.110.232

🇷🇴 188.25.190.40

🇩🇴 186.149.217.69

🇨🇦 172.218.178.208

🇱🇾 154.127.69.15

🇨🇳 121.229.202.143

🇮🇩 103.186.31.66

🇿🇦 102.208.217.175

🇺🇸 64.23.128.133

🇺🇸 47.251.164.155

🇺🇸 45.26.184.5

🇩🇪 43.228.157.9

🇮🇩 38.253.224.32