JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.66.105.40

136.66.105.40 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 84%: ?

84%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	40.105.66.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.66.105.40

Whois 136.66.105.40

IP Abuse Reports for 136.66.105.40:

This IP address has been reported a total of 27 times from 20 distinct sources. 136.66.105.40 was first reported on September 7th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-08 22:01:00 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-07. show less	Web App Attack SSH Hacking
Anonymous	2026-09-08 18:12:12 (1 week ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-08 00:05:04 (1 week ago)	crowdsecurity/http-path-traversal-probing	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-07 22:00:29 (1 week ago)	Auto-ban: >3000 req/min op 2026-09-07	Web App Attack SSH Hacking
🇳🇱 Mangelot Hosting	2026-09-07 20:40:31 (1 week ago)	(modsecurity) srv101 ModSecurity 136.66.105.40 (US/United States/40.105.66.136.bc.googleusercontent. ... show more (modsecurity) srv101 ModSecurity 136.66.105.40 (US/United States/40.105.66.136.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 Baking333	2026-09-07 20:28:19 (1 week ago)	[redacted] 136.66.105.40 - - [07/Sep/2026:21:28:18 +0100] "GET /@fs/..%252f..%252f..%252f..%252f..%2 ... show more [redacted] 136.66.105.40 - - [07/Sep/2026:21:28:18 +0100] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 302 1533 0/89483 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://[redacted]/[redacted])" [redacted] 136.66.105.40 - - [07/Sep/2026:21:28:18 +0100] "GET /@fs/root/.env?raw?? HTTP/1.1" 302 1533 0/80938 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://[redacted]/robots)" [redacted] 136.66.105.40 - - [07/Sep/2026:21:28:18 +0100] "GET /@fs/.[redacted]?raw?? HTTP/1.1" 302 1533 0/79088 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://[redacted]) Chrome/118.0.7401.153 Mobile Safari/537.36" show less	Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-09-07 20:08:58 (1 week ago)	cloudlinux2 fail2ban: 2026-09-07 22:04:31,111 fail2ban.filter [1794]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-09-07 22:04:31,111 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 45.131.195.130 - 2026-09-07 22:04:30cloudlinux2 fail2ban: 2026-09-07 22:06:00,012 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 160.179.87.78 - 2026-09-07 22:06:00cloudlinux2 fail2ban: 2026-09-07 22:06:16,833 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 37.140.223.188 - 2026-09-07 22:06:15cloudlinux2 fail2ban: 2026-09-07 22:06:20,933 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 45.131.194.76 - 2026-09-07 22:06:20cloudlinux2 fail2ban: 2026-09-07 22:07:29,886 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 136.66.105.40 - 2026-09-07 22:07:29cloudlinux2 fail2ban: 2026-09-07 22:07:29,895 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 136.66.105.40 - 2026-09-07 22:07:29cloudlinux2 fail2ban: 2026-09-07 22:07:29,936 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 136.66.105.40 - 2026-09-07 22:07:2 show less	Web App Attack
🇲🇾 Rizzy	2026-09-07 20:01:14 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-09-07 20:00:02 (1 week ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 19:46:17 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 136.66.105.40 (40.105.66.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.66.105.40 (40.105.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:46:10.602909 2026] [security2:error] [pid 6656:tid 6656] [client 136.66.105.40:1122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.zztp.ws"] [uri "/@fs/../.env"] [unique_id "ap8UglhC5LDNsv9RZmd__AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-09-07 19:36:00 (1 week ago)	block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6	Bad Web Bot
🇫🇷 Octopuce	2026-09-07 19:33:29 (1 week ago)	Aggressive web search of vulnerable pages: /_nuxt/../.env /assets../.env /img../.env /uploads../.env ... show more Aggressive web search of vulnerable pages: /_nuxt/../.env /assets../.env /img../.env /uploads../.env /.docker/.env ... show less	Web App Attack
🇬🇧 rakkor	2026-09-07 19:27:49 (1 week ago)	2026-09-07T20:27:48+01:00 NAS [Mon Sep 07 20:27:48.501775 2026] [proxy_fcgi:error] [pid 22310:tid 22 ... show more 2026-09-07T20:27:48+01:00 NAS [Mon Sep 07 20:27:48.501775 2026] [proxy_fcgi:error] [pid 22310:tid 22332] [client 136.66.105.40:50588] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Hacking
Anonymous	2026-09-07 19:20:55 (1 week ago)	Malicious activity detected	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 19:14:52 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 136.66.105.40 (40.105.66.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.66.105.40 (40.105.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:14:48.737944 2026] [security2:error] [pid 29207:tid 29207] [client 136.66.105.40:27768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thomasgardner.com"] [uri "/@fs/.env.local"] [unique_id "ap8NKKE_ji2A1MQxZzWguwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 182.188.24.243

🇨🇳 180.153.236.186

🇨🇳 180.153.236.71

🇺🇸 172.233.221.115

🇻🇳 171.244.14.96

🇭🇰 152.32.134.176

🇳🇱 94.154.43.254

🇸🇪 81.228.174.248

🇦🇺 45.132.224.16

🇮🇷 37.75.244.122

🇭🇰 20.24.194.29

🇩🇪 213.209.159.25

🇧🇷 177.5.43.169

🇺🇸 172.69.71.134

🇺🇸 172.69.70.62

🇳🇬 103.97.91.27

🇿🇦 102.212.64.41

🇷🇴 92.118.39.71

🇷🇺 87.229.254.207

🇺🇸 66.132.172.217