JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.64.139.57

136.64.139.57 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	57.139.64.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.64.139.57

Whois 136.64.139.57

IP Abuse Reports for 136.64.139.57:

This IP address has been reported a total of 29 times from 22 distinct sources. 136.64.139.57 was first reported on August 27th 2026, and the most recent report was 58 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 conure.sh	2026-09-02 04:04:43 (58 minutes ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 kosada.com	2026-09-01 22:13:07 (6 hours ago)	Repeated exploit attempts, for example: /var/www/.git/config /.git/config (HTTP/1.1 port 443)	Web App Attack
🇺🇸 kosada.com	2026-09-01 22:13:07 (6 hours ago)	Repeated requests for suspicious nonexistent URLs, for example: /backend/.git/config (HTTP/1.1 port ... show more Repeated requests for suspicious nonexistent URLs, for example: /backend/.git/config (HTTP/1.1 port 443, user agent: "crusader-worker/1.0") show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 20:27:27 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.64.139.57 (57.139.64.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.64.139.57 (57.139.64.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:27:20.422286 2026] [security2:error] [pid 23160:tid 23160] [client 136.64.139.57:49780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbrooketaylor.ingberinteriors.com"] [uri "/site/.git/config"] [unique_id "apc1KBqMpMIpYmJRq8UIfwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SwinT	2026-09-01 17:00:10 (12 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 CBJ	2026-09-01 16:00:14 (13 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇳🇱 javierin	2026-09-01 14:05:51 (14 hours ago)	136.64.139.57 - xn--emas-sra.es - - [01/Sep/2026:14:05:50 +0000] "GET /htdocs/.git/config HTTP/1.1" ... show more 136.64.139.57 - xn--emas-sra.es - - [01/Sep/2026:14:05:50 +0000] "GET /htdocs/.git/config HTTP/1.1" 404 16999 "-" "crusader-worker/1.0" 136.64.139.57 - xn--emas-sra.es - - [01/Sep/2026:14:05:50 +0000] "GET /var/www/.git/config HTTP/1.1" 404 16999 "-" "crusader-worker/1.0" 136.64.139.57 - xn--emas-sra.es - - [01/Sep/2026:14:05:50 +0000] "GET /api/.git/config HTTP/1.1" 404 16999 "-" "crusader-worker/1.0" 136.64.139.57 - xn--emas-sra.es - - [01/Sep/2026:14:05:50 +0000] "GET /site/.git/config HTTP/1.1" 404 16999 "-" "crusader-worker/1.0" 136.64.139.57 - xn--emas-sra.es - - [01/Sep/2026:14:05:50 +0000] "GET /app/.git/config HTTP/1.1" 404 16999 "-" "crusader-worker/1.0" 136.64.139.57 - xn--emas-sra.es - - [01/Sep/2026:14:05:50 +0000] "GET /.git/config HTTP/1.1" 404 16999 "-" "crusader-worker/1.0" 136.64.139.57 - xn--emas-sra.es - - [01/Sep/2026:14:05:50 +0000] "GET /wordpress/.git/config HTTP/1.1" 404 16999 "-" "crusader-worker/1.0" 136.64.139.57 - xn--emas-sra.es - - [01/Sep/2026:14:05:50 + ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-09-01 13:26:14 (15 hours ago)	Multiple WAF Violations	Web App Attack
🇦🇺 clapper	2026-09-01 10:00:32 (19 hours ago)	(mod_security) mod_security (id:949110) triggered by 136.64.139.57 (US/United States/57.139.64.136.b ... show more (mod_security) mod_security (id:949110) triggered by 136.64.139.57 (US/United States/57.139.64.136.bc.googleusercontent.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-01 08:42:20 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.64.139.57 (57.139.64.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.64.139.57 (57.139.64.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:42:13.071551 2026] [security2:error] [pid 27035:tid 27146] [client 136.64.139.57:34642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "itsnotjustmeisit.com.teritemme.com"] [uri "/app/.git/config"] [unique_id "apaP5T8ubYaUsYzyC6xS6AAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alboweb B.V.	2026-09-01 06:11:03 (22 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 04:05:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.64.139.57 (57.139.64.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.64.139.57 (57.139.64.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:05:27.165048 2026] [security2:error] [pid 6945:tid 6945] [client 136.64.139.57:37768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cactusstarvineyard.com"] [uri "/api/.git/config"] [unique_id "apZPB-ebj35AvyWLARYV_gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-09-01 03:57:46 (1 day ago)	Automatically blocked due to distributed attack	Hacking
🇺🇸 brightenfield	2026-09-01 02:46:39 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 02:41:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.64.139.57 (57.139.64.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.64.139.57 (57.139.64.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:41:30.642059 2026] [security2:error] [pid 21750:tid 21750] [client 136.64.139.57:50202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.goodpage.com"] [uri "/backend/.git/config"] [unique_id "apY7WrfrvUhtEG3pW7XUYAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.253.37.225

🇺🇸 205.210.31.96

🇺🇸 97.209.242.84

🇬🇧 45.133.173.58

🇺🇸 40.74.209.38

🇨🇳 36.105.164.126

🇺🇸 34.48.168.173

🇷🇺 5.18.102.153

🇲🇦 196.206.178.85

🇧🇷 177.16.141.239

🇺🇸 172.14.184.23

🇺🇸 162.216.150.89

🇺🇸 159.223.176.170

🇺🇸 147.185.132.135

🇳🇱 93.174.95.106

🇬🇧 92.207.4.157

🇳🇱 80.82.77.33

🇺🇸 72.204.129.18

🇸🇦 51.211.5.78

🇺🇸 51.57.81.172