JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.66.119.28

136.66.119.28 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 84%: ?

84%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	28.119.66.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.66.119.28

Whois 136.66.119.28

IP Abuse Reports for 136.66.119.28:

This IP address has been reported a total of 17 times from 17 distinct sources. 136.66.119.28 was first reported on September 12th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-14 08:13:35 (6 days ago)	Detects requests with different user agents from one source in short timeframe.. StartTimeUtc: 2026- ... show more Detects requests with different user agents from one source in short timeframe.. StartTimeUtc: 2026-09-13T15:25:00Z show less	Port Scan
🇵🇱 mkey	2026-09-14 05:58:15 (6 days ago)	[First: 2026-09-13 03:03:08/single] HITS=1 Repeated suspicious IDS-detected activity; sample=Attempt ... show more [First: 2026-09-13 03:03:08/single] HITS=1 Repeated suspicious IDS-detected activity; sample=Attempting to connect to a forbidden port show less	Port Scan Hacking Web App Attack
🇧🇪 sid3windr	2026-09-13 16:32:43 (6 days ago)	GET /.env (Tarpitted for 1d15h8m27s, wasted 8.06MB)	Web App Attack
🇺🇸 evlhomer	2026-09-13 11:06:18 (1 week ago)	Web App Attack	Web App Attack
Anonymous	2026-09-13 08:18:33 (1 week ago)	(config_exploit_scan) Configuratie Scanner / Nep GPTBot 136.66.119.28 (US/United States/28.119.66.13 ... show more (config_exploit_scan) Configuratie Scanner / Nep GPTBot 136.66.119.28 (US/United States/28.119.66.136.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.66.119.28 - - [13/Sep/2026:10:18:31 +0200] "GET /static../.env HTTP/1.1" 406 991 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 136.66.119.28 - - [13/Sep/2026:10:18:31 +0200] "GET /.env HTTP/1.1" 406 991 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.19) Gecko/20100101 Firefox/78.19; compatible; ClaudeBot/1.0; [email protected]" 136.66.119.28 - - [13/Sep/2026:10:18:31 +0200] "GET /app/.env HTTP/1.1" 406 991 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" show less	Port Scan
Anonymous	2026-09-13 07:45:54 (1 week ago)	Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.	Hacking
🇺🇸 TPI-Abuse	2026-09-13 07:45:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 136.66.119.28 (28.119.66.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.66.119.28 (28.119.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 03:45:16.612912 2026] [security2:error] [pid 31488:tid 31488] [client 136.66.119.28:65474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.233"] [uri "/static../.env"] [unique_id "aqZUjMbq-UAhMsW8AraBfAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 SchorelWeb	2026-09-13 06:20:34 (1 week ago)	Cluster member (Omitted) (US/United States/-) said, TEMPDENY 136.66.119.28, Reason:[(Suspicious) Sus ... show more Cluster member (Omitted) (US/United States/-) said, TEMPDENY 136.66.119.28, Reason:[(Suspicious) Suspicious activity detected 136.66.119.28 (US/United States/28.119.66.136.bc.googleusercontent.com): 10 in the last 3600 secs] show less	Brute-Force SSH
🇫🇷 service Informatique	2026-09-13 04:00:37 (1 week ago)	GET /wp-json	Web App Attack
🇷🇸 Smel	2026-09-13 03:00:03 (1 week ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-09-13 02:09:20 (1 week ago)	Aggressive web scan	Web App Attack
🇺🇸 xmission.com	2026-09-12 16:48:06 (1 week ago)	Blocked by UFW (TCP on 80) Source port: 32682 TTL: 61 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 32682 TTL: 61 Packet length: 60 TOS: 0x00 This report (for 136.66.119.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇫🇷 COMAITE	2026-09-12 16:16:36 (1 week ago)	Common web attack from 136.66.119.28.	Web App Attack
Anonymous	2026-09-12 14:26:40 (1 week ago)	denied traffic to a honeypot network. destination port 8443.	Port Scan Hacking
🇳🇱 Savvii	2026-09-12 10:02:16 (1 week ago)	20 attempts against mh-misbehave-ban on star	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 34.38.202.185

🇷🇴 2.57.121.25

🇬🇧 217.146.80.126

🇺🇸 136.112.32.154

🇮🇳 117.222.120.238

🇺🇸 103.4.251.248

🇫🇮 86.38.182.86

🇷🇺 62.231.20.54

🇺🇸 45.55.239.12

🇺🇸 40.90.232.151

🇰🇭 38.211.246.8

🇬🇧 193.163.125.17

🇺🇸 147.185.132.166

🇫🇷 85.217.140.42

🇲🇾 49.124.151.62

🇸🇬 47.79.201.85

🇺🇸 204.2.236.84

🇺🇸 162.216.149.208

🇳🇱 160.119.76.40

🇺🇸 136.69.128.72