JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.22.128.9

136.22.128.9 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 3%: ?

ISP	YouTube, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36040
Domain Name	youtube.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.22.128.9

Whois 136.22.128.9

IP Abuse Reports for 136.22.128.9:

This IP address has been reported a total of 6 times from 4 distinct sources. 136.22.128.9 was first reported on July 26th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-06-23 21:37:08 (13 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc). Family fingerprint: vnc-scanner Commands captured: $ http: GET /favicon.ico HTTP/1.1 $ ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 $ served fake noVNC index (no upgrade) show less	DDoS Attack
🇩🇪 anycast_ac	2026-06-23 21:18:25 (13 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc). Family fingerprint: vnc-scanner Commands captured: $ http: GET / HTTP/1.1 $ ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 $ served fake noVNC index (no upgrade) show less	DDoS Attack
🇮🇹 Progetto1	2026-01-05 09:30:02 (5 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-01-03 20:38:28 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 136.22.128.9 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 136.22.128.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 03 15:38:21.128021 2026] [security2:error] [pid 11248:tid 11248] [client 136.22.128.9:59584] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.garyandthegroove.com\|F\|2"] [data ".barebonesgrill.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.garyandthegroove.com"] [uri "/www.barebonesgrill.com"] [unique_id "aVl-PeqhsJWitjwgc7gUOgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bontekoe.technology	2025-12-22 15:01:44 (6 months ago)	Port scan or Brute-Force detected. (src_port=62894, dst_port=443)	Brute-Force
🇺🇸 TPI-Abuse	2025-07-26 17:12:50 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 136.22.128.9 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 136.22.128.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 13:12:43.985347 2025] [security2:error] [pid 7273:tid 7273] [client 136.22.128.9:64294] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.garyandthegroove.com\|F\|2"] [data ".theashlandcafe.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.garyandthegroove.com"] [uri "/ WWW.theashlandcafe.com"] [unique_id "aIUMi014VSwAyx4_JrkRGAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇸 213.6.202.246

🇲🇽 187.190.35.163

🇧🇷 177.30.64.65

🇺🇸 71.6.199.65

🇲🇾 60.53.223.7

🇩🇪 8.209.119.143

🇳🇱 176.65.148.132

🇳🇱 176.65.139.181

🇵🇱 138.124.20.112

🇨🇦 85.217.149.61

🇩🇪 45.135.194.83

🇯🇵 45.43.60.220

🇺🇸 20.65.169.214

🇺🇸 2607:f8b0:400e:c1e::129

🇮🇹 2600:3c0b::2000:b8ff:fefd:dd53

🇳🇱 176.65.148.215

🇧🇪 158.173.67.195

🇧🇪 158.173.67.32

🇨🇳 124.160.173.22

🇫🇷 91.231.89.171