This IP address has been reported a total of
9
times from
6 distinct
sources.
136.115.75.204 was first reported on
October 22nd 2026 , and the most recent report was
29 minutes ago Czechia
with 2
reports;
Greece
with 2
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
6
times;
Brute-Force
4
times;
Bad Web Bot
4
times;
Hacking
3
times;
Port Scan
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇷
setupgr
2026-10-24 05:52:44
(29 minutes ago)
(mod_security) mod_security (id:11000011) triggered by 136.115.75.204 (US/United States/Iowa/Council ...
show more
(mod_security) mod_security (id:11000011) triggered by 136.115.75.204 (US/United States/Iowa/Council Bluffs/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:52:39.927430 2026] [security2:error] [pid 869334:tid 869492] [client 136.115.75.204:42056] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 204.75.115.136.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "babis.photo"] [uri "/types/artwork/"] [unique_id "atxHp91lzGO58IkQ4N62cAAAANM"]
show less
Port Scan
🇮🇹
Progetto1
2026-10-24 00:00:16
(6 hours ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇬🇷
setupgr
2026-10-23 23:05:25
(7 hours ago)
(mod_security) mod_security (id:11000011) triggered by 136.115.75.204 (US/United States/Iowa/Council ...
show more
(mod_security) mod_security (id:11000011) triggered by 136.115.75.204 (US/United States/Iowa/Council Bluffs/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 24 02:05:22.784836 2026] [security2:error] [pid 869464:tid 869558] [client 136.115.75.204:59294] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 204.75.115.136.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "babis.photo"] [uri "/wp-content/uploads/2021/09/BAB7234.jpg"] [unique_id "atvoMgMR0ehh0zLmJ_053gAAAsk"]
show less
Port Scan
🇯🇵
Valhalla
2026-10-23 15:17:18
(15 hours ago)
/buttonclick(91);%20return%20true;
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 14:10:05
(16 hours ago)
(mod_security) mod_security (id:210730) triggered by 136.115.75.204 (204.75.115.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 136.115.75.204 (204.75.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 10:09:59.257008 2026] [security2:error] [pid 3405:tid 3405] [client 136.115.75.204:47484] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||batw.net|F|2"] [data ".borzois.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "batw.net"] [uri "/borzois.com/www.borzois.com"] [unique_id "attqt6_iuMrs5HmEl3Wt4wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 05:10:50
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 136.115.75.204 (204.75.115.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 136.115.75.204 (204.75.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 01:10:43.508605 2026] [security2:error] [pid 29643:tid 29671] [client 136.115.75.204:41800] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.grupojdg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.grupojdg.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "atrsU91klZmkIZ26r8xIBgAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-23 04:48:25
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-10-22 01:24:44
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇨🇭
backslash
2026-10-22 00:27:08
(2 days ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
Showing 1 to
9
of 9 reports
