JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.117.64.38

136.117.64.38 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	38.64.117.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.117.64.38

Whois 136.117.64.38

IP Abuse Reports for 136.117.64.38:

This IP address has been reported a total of 30 times from 22 distinct sources. 136.117.64.38 was first reported on August 27th 2026, and the most recent report was 5 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-28 01:51:33 (5 minutes ago)	(mod_security) mod_security (id:210492) triggered by 136.117.64.38 (38.64.117.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.117.64.38 (38.64.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 21:51:25.457118 2026] [security2:error] [pid 32543:tid 32543] [client 136.117.64.38:62306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gatheringsattheschool.com"] [uri "/@fs/.env"] [unique_id "apDpnYMD5_5Q1af6Qb9-5gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-28 01:38:04 (18 minutes ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.117.64.38 (US/United States/38.64 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.117.64.38 (US/United States/38.64.117.136.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 updown.io	2026-08-28 01:06:13 (50 minutes ago)	{"level":"info","ts":1787879138.6465814,"logger":"http.log.access.log0","msg":"handled request","req ... show more {"level":"info","ts":1787879138.6465814,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"136.117.64.38","remote_port":"56380","client_ip":"136.117.64.38","proto":"HTTP/1.1","method":"GET","host":"kgs9.status.updown.io","uri":"/","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"Accept":["/"]}},"bytes_read":0,"user_id":"","duration":0.000068691,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://kgs9.status.updown.io/"],"Content-Type":[]}} {"level":"info","ts":1787879143.246656,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"136.117.64.38","remote_port":"1546","client_ip":"136.117.64.38","proto":"HTTP/1.1","method":"GET","host":"kgs9.status.updown.io","uri":"/@fs/home/ubuntu/.aws/credentials?raw??","headers":{"Accept-Language":["en-US,en;q=0.9"],"Accept-Encod ... show less	DDoS Attack Web App Attack
Anonymous	2026-08-28 00:54:30 (1 hour ago)	Aggressive web scan	Web App Attack
🇮🇹 CoreTech srl	2026-08-28 00:52:05 (1 hour ago)	CloudLinux/Plesk alert - host=cloudlinux dominio=mitan.it ip=136.117.64.38 richieste=652 rischio=ALT ... show more CloudLinux/Plesk alert - host=cloudlinux dominio=mitan.it ip=136.117.64.38 richieste=652 rischio=ALTO score=22 motivi=molte_richieste,molte_uri_uniche,molti_404,ua_script_bot,path_sospetti,api,poco_statico,dinamico cat_id=21,19 periodo=10min show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-28 00:48:58 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 136.117.64.38 (38.64.117.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.117.64.38 (38.64.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 20:48:54.436979 2026] [security2:error] [pid 7846:tid 7846] [client 136.117.64.38:43468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.susannahtuttle.com"] [uri "/@fs/src/.env"] [unique_id "apDa9k6PR42jvADesnxkCwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-08-28 00:25:45 (1 hour ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇩🇪 Viveronese	2026-08-28 00:22:07 (1 hour ago)	HTTP vulnerability scanning	Web App Attack
🇳🇱 Site.eu	2026-08-28 00:07:20 (1 hour ago)	Excessive multi-domain requests	Brute-Force
🇮🇩 Burayot	2026-08-28 00:05:52 (1 hour ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 136.117.64.38 (US/United States/38. ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 136.117.64.38 (US/United States/38.64.117.136.bc.googleusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 00:01:51 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 136.117.64.38 (38.64.117.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.117.64.38 (38.64.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 20:01:45.314251 2026] [security2:error] [pid 19417:tid 19417] [client 136.117.64.38:11356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "designamb.com"] [uri "/@fs/.env"] [unique_id "apDP6VgdI9qMSh0g_RXczAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-08-28 00:01:04 (1 hour ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 136.117.64.38 (US/United States/38.64.11 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 136.117.64.38 (US/United States/38.64.117.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.117.64.38 - - [28/Aug/2026:02:00:55 +0200] "GET /@fs/home/node/.aws/credentials?raw?? HTTP/2.0" 429 41 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com)" "136.117.64.38" host=www.notaiopanella.it show less	Port Scan
🇳🇱 middelkoopcc	2026-08-27 23:59:00 (1 hour ago)	2026-08-28 01:56:44 GET /@fs/home/ubuntu/.aws/config?raw?? [404] && 2026-08-28 01:56:44 GET /@fs/hom ... show more 2026-08-28 01:56:44 GET /@fs/home/ubuntu/.aws/config?raw?? [404] && 2026-08-28 01:56:44 GET /@fs/home/node/.aws/config?raw?? [404] && 2026-08-28 01:56:44 GET /@fs/.env.local?raw?? [404] && 131 more within 20 minutes show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 23:44:56 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.117.64.38 (38.64.117.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.117.64.38 (38.64.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 19:44:52.237369 2026] [security2:error] [pid 8686:tid 8686] [client 136.117.64.38:4882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.hotelausland.com"] [uri "/@fs/.env"] [unique_id "apDL9NeuM38gDnA9RccdEAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-27 23:39:39 (2 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a00:23a8:42a7:d01:1451:3a74:d88e:e696

🇨🇱 200.28.67.199

🇿🇦 196.11.179.75

🇧🇷 190.124.190.116

🇧🇷 181.232.203.14

🇧🇷 162.241.60.164

🇺🇸 162.216.150.195

🇬🇧 89.37.172.152

🇪🇨 45.70.200.72

🇺🇸 40.124.114.109

🇺🇸 34.23.35.166

🇬🇧 31.14.254.102

🇺🇸 20.40.213.245

🇬🇧 5.226.140.84

🇧🇷 179.108.61.36

🇧🇷 177.185.45.168

🇺🇸 172.68.174.32

🇦🇷 167.250.118.53

🇫🇷 139.28.219.68

🇸🇪 89.233.240.49