JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.117.93.74

136.117.93.74 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 74%: ?

74%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	74.93.117.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.117.93.74

Whois 136.117.93.74

IP Abuse Reports for 136.117.93.74:

This IP address has been reported a total of 14 times from 13 distinct sources. 136.117.93.74 was first reported on September 11th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 geot	2026-09-13 22:08:13 (3 days ago)	686 requests, including : GET /proxy?url=file%3A%2F%2F%2Froot%2F.azure%2FaccessTokens.json HTTP/1.1 ... show more 686 requests, including : GET /proxy?url=file%3A%2F%2F%2Froot%2F.azure%2FaccessTokens.json HTTP/1.1 GET /proxy?url=file%3A%2F%2F%2Fapp%2F.env HTTP/1.1 GET /.well-known/credentials.json HTTP/1.1 GET /google-cloud-key.json HTTP/1.1 GET /kubernetes.yml HTTP/1.1 GET /.env.local HTTP/1.1 GET /terraform.tfstate HTTP/1.1 GET /logs/app.log HTTP/1.1 GET /firebase-admin.json HTTP/1.1 GET /.continue/config.json HTTP/1.1 GET /k8s/eks/credentials HTTP/1.1 GET /api/account HTTP/1.1 GET /ai.json HTTP/1.1 GET /sftp-config.json HTTP/1.1 GET /.env.save HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 Ano_Nym	2026-09-13 08:59:44 (3 days ago)	CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/http-path-traversal-probing	Web App Attack
🇬🇧 openstrike.co.uk	2026-09-13 05:13:56 (3 days ago)	275 attacks on env grabbing URLs (type 2), site downloads, PHP URLs, password/key grabbing URLs, env ... show more 275 attacks on env grabbing URLs (type 2), site downloads, PHP URLs, password/key grabbing URLs, env grabbing URLs, config grabbing URLs (type 2), VC URLs: GET /@fs/proc/self/environ?import&raw?? HTTP/1.1 GET /dump.sql HTTP/1.1 GET /info.php HTTP/1.1 GET /.aws/credentials.1 HTTP/1.1 GET /%2e%2e/%2e%2e/.env HTTP/1.1 GET /secrets.yml HTTP/1.1 GET /.git/config HTTP/1.1 show less	Hacking Web App Attack
🇨🇭 Elysium Security	2026-09-13 04:18:11 (3 days ago)	Mass scanning for Web CVE	Web App Attack
🇫🇷 dynamix	2026-09-13 01:58:21 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 00:10:17 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 136.117.93.74 (74.93.117.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.117.93.74 (74.93.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 20:10:08.975561 2026] [security2:error] [pid 19820:tid 19820] [client 136.117.93.74:43394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.41"] [uri "/static../.env"] [unique_id "aqXp4NnPjjHeEsoALpIs6AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-12 23:47:33 (4 days ago)	10 attempts against mh-misc-ban on pf221103	Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-09-12 13:58:25 (4 days ago)	FortiGate IPS: HTTP.GET.Request.Path.Traversal (severity medium)	Hacking
🇺🇸 TPI-Abuse	2026-09-12 11:35:09 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 136.117.93.74 (74.93.117.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.117.93.74 (74.93.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 07:35:04.391564 2026] [security2:error] [pid 11851:tid 11851] [client 136.117.93.74:28606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.73"] [uri "/static../.env"] [unique_id "aqU46BOhxFAOSJ_DB1YphwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 largo-it.net	2026-09-12 03:32:46 (4 days ago)	[12/Sep/2026:05:32:41.152] HTTP 404 - GET /__aws_leak_probe_f2c5f969__ [12/Sep/2026:05:32:45.165] HT ... show more [12/Sep/2026:05:32:41.152] HTTP 404 - GET /__aws_leak_probe_f2c5f969__ [12/Sep/2026:05:32:45.165] HTTP 404 - GET /.azure/credentials [12/Sep/2026:05:32:45.597] HTTP 404 - GET /@fs/root/.config/gcloud/application_default_credentials.json?raw?? [12/Sep/2026:05:32:45.600] HTTP 404 - GET /static../.azure/credentials [12/Sep/2026:05:32:45.601] HTTP 404 - GET /.env.local [12/Sep/2026:05:32:45.600] HTTP 404 - GET /@fs/root/.aws/credentials?raw?? [12/Sep/2026:05:32:45.604] HTTP 404 - GET /@fs/home/ec2-user/.aws/credentials?raw?? [12/Sep/2026:05:32:45.602] HTTP 404 - GET /.aws/credentials show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-09-12 02:30:07 (4 days ago)	\| Common web attack.	Web App Attack Hacking SQL Injection
🇮🇳 Shubham Kumar	2026-09-12 00:52:46 (4 days ago)	Repeated scrape-guard abuse (flag #0)	Web App Attack
🇹🇼 kk_it_man	2026-09-12 00:13:02 (5 days ago)	ET INFO ChatGPT-User Traffic Detected Inbound M1 ET INFO ChatGPT-User Traffic Detected Inbound M2 ... show more ET INFO ChatGPT-User Traffic Detected Inbound M1 ET INFO ChatGPT-User Traffic Detected Inbound M2 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak ET INFO Request to Hidden Environment File - Inbound ET SCAN SFTP/FTP Password Exposure via sftp-config.json ET WEB_SERVER .bash_history Detected in URI ET WEB_SERVER /etc/passwd Detected in URI ET WEB_SERVER Likely Malicious Request for /proc/self/environ ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability ET WEB_SERVER WEB-PHP phpinfo access ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) ET WEB_SPECIFIC_APPS Wordpress LiteSpeed Cache Plugin debug.log Access Attempt (CVE-2024-44000) show less	Port Scan
🇺🇸 NXTwoThou	2026-09-11 23:45:00 (5 days ago)	/assets../../../etc/passwd	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 180.149.10.80

🇺🇸 71.6.134.204

🇪🇸 212.30.33.16

🇬🇧 206.189.118.69

🇺🇸 172.212.226.200

🇺🇸 172.56.2.253

🇺🇸 150.136.214.177

🇫🇮 147.185.133.153

🇦🇷 138.117.15.108

🇨🇳 106.15.238.36

🇩🇪 104.28.159.7

🇫🇷 91.231.89.231

🇫🇷 85.217.140.26

🇧🇬 79.124.62.230

🇧🇬 78.128.114.162

🇹🇼 35.229.183.115

🇹🇼 35.194.244.188

🇺🇸 34.44.193.83

🇯🇵 8.216.16.112

🇹🇷 212.253.210.60