JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.66.45.78

Neutral Activity

Abuse Confidence Score

0% Low Risk

31 reports

23 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 78.45.66.136.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: The Dalles, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

31 from 23 distinct reporters

First reported

September 2nd 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 1

Most common categories Web App Attack 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-11 15:42:08 UTC · (1 month ago)	136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env.prod HTTP/1.1" 404 7376 "-" "crusader-worker/1.0" 136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env HTTP/1.1" 404 7376 "-" "crusader-worker/1.0" 136.66.45.78 - - \[06/Sep/2026:03:23: ... show more 136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env.prod HTTP/1.1" 404 7376 "-" "crusader-worker/1.0" 136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env HTTP/1.1" 404 7376 "-" "crusader-worker/1.0" 136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env.local HTTP/1.1" 404 7376 "-" "crusader-worker/1.0" 136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env.production HTTP/1.1" 404 7376 "-" "crusader-worker/1.0" 136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env.old HTTP/1.1" 404 7376 "-" "crusader-worker/1.0" 136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env.save HTTP/1.1" 404 7376 "-" "crusader-worker/1.0" 136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env.backup HTTP/1.1" 404 2085 "-" "crusader-worker/1.0" 136.66.45.78 - - \[06/Sep/2026:03:23:56 +0200\] "GET /.env.bak HTT ... show less	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-06 06:08:06 UTC · (2 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 03:51:56 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 136.66.45.78 (78.45.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:51:52.614976 2026] [security2:error] [pid 15793:tid 15 ... show more (mod_security) mod_security (id:210492) triggered by 136.66.45.78 (78.45.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:51:52.614976 2026] [security2:error] [pid 15793:tid 15793] [client 136.66.45.78:49940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cultiplant.com"] [uri "/.env"] [unique_id "apzjWAHPETeX81rADdbXHQAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 03:23:35 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 136.66.45.78 (78.45.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:23:29.979894 2026] [security2:error] [pid 18422:tid 18 ... show more (mod_security) mod_security (id:210492) triggered by 136.66.45.78 (78.45.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:23:29.979894 2026] [security2:error] [pid 18422:tid 18422] [client 136.66.45.78:55108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schunagroup.com"] [uri "/.env.save"] [unique_id "apzcsdj02DJtYUCL4AV7kwAAAF0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-06 03:01:03 UTC · (2 months ago)	Bot / scanning and/or hacking attempts: GET /actuator/env HTTP/1.1, GET /.env.production HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /.env.save HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.ba ... show more Bot / scanning and/or hacking attempts: GET /actuator/env HTTP/1.1, GET /.env.production HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /.env.save HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.old HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.env.local HTTP/1.1, GET /env HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env.example HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env HTTP/1.1, GET /crusader-404-probe HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 Dominik Lysiak	2026-09-06 02:54:36 UTC · (2 months ago)	136.66.45.78 - - [06/Sep/2026:04:54:35 +0200] "GET /wp-config.php.swp HTTP/1.1" 401 142 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:04:54:35 +0200] "GET /.env.production HTTP/1.1" 401 142 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep ... show more 136.66.45.78 - - [06/Sep/2026:04:54:35 +0200] "GET /wp-config.php.swp HTTP/1.1" 401 142 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:04:54:35 +0200] "GET /.env.production HTTP/1.1" 401 142 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:04:54:35 +0200] "GET /.env.prod HTTP/1.1" 401 142 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇷🇺 DZBOT	2026-09-06 02:32:15 UTC · (2 months ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 ghostwarriors	2026-09-06 01:50:04 UTC · (2 months ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇫🇷 masterguru	2026-09-06 01:43:54 UTC · (2 months ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇩🇪 yitzhaq	2026-09-06 01:32:49 UTC · (2 months ago)	136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4429 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 4429 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Se ... show more 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4429 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 4429 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /.env.dev HTTP/1.1" 404 4429 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /crusader-404-probe HTTP/1.1" 404 4429 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /.env.old HTTP/1.1" 404 4429 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /.env.bak HTTP/1.1" 404 4430 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /wp-config.php.swp HTTP/1.1" 404 4430 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /_ignition/health-check HTTP/1.1" 404 4430 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:03:32:46 +0200] "GET /env HTTP/1.1" 404 4430 "-" "crusader-worker/1.0" 136 show less	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-09-06 01:31:50 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 136.66.45.78 (78.45.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:31:42.177334 2026] [security2:error] [pid 11805:tid 11 ... show more (mod_security) mod_security (id:210492) triggered by 136.66.45.78 (78.45.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:31:42.177334 2026] [security2:error] [pid 11805:tid 11805] [client 136.66.45.78:37478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mldlnn.com"] [uri "/.env.production"] [unique_id "apzCflIi_cUvN7rGkc5NuQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-09-06 01:30:15 UTC · (2 months ago)	136.66.45.78 - - [06/Sep/2026:04:30:14 +0300] "GET /storage/logs/laravel.log HTTP/2.0" 403 146 "-" "crusader-worker/1.0" 136.66.45.78 - - [06/Sep/2026:04:30:14 +0300] "GET /_ignition/health-check HTTP/2.0" 301 276 "-" "crusader-worker/1.0" ...	Web App Attack
🇩🇪 gadix	2026-09-06 00:57:28 UTC · (2 months ago)	[06/Sep/2026:02:57:28.060514 +0200] apy6ePsSqUMO3j00MmXSdAAAAAY 136.66.45.78 56416 127.0.0.1 7081 [06/Sep/2026:02:57:28.062340 +0200] apy6ePG66xpaLOqx7VQcEwAAABI 136.66.45.78 56418 127.0.0.1 7081 [06/Sep/2026:02:57:28.070212 +0200] apy6eLupZ1RrYE_hQ7 ... show more [06/Sep/2026:02:57:28.060514 +0200] apy6ePsSqUMO3j00MmXSdAAAAAY 136.66.45.78 56416 127.0.0.1 7081 [06/Sep/2026:02:57:28.062340 +0200] apy6ePG66xpaLOqx7VQcEwAAABI 136.66.45.78 56418 127.0.0.1 7081 [06/Sep/2026:02:57:28.070212 +0200] apy6eLupZ1RrYE_hQ7HWEwAAAAg 136.66.45.78 56436 127.0.0.1 7081 ... show less	Web App Attack
🇫🇷 masterguru	2026-09-06 00:49:14 UTC · (2 months ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇿🇦 vanderhost	2026-09-06 00:26:12 UTC · (2 months ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.log via rule: /storage/logs	Web App Attack Bad Web Bot

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 152.32.191.191

🇺🇸 129.121.115.165

🇫🇷 80.87.206.25

🇺🇸 73.21.133.161

🇺🇸 70.167.235.143

🇺🇸 65.49.1.121

🇳🇱 45.74.28.188

🇦🇺 20.227.140.176

🇺🇸 20.40.218.187

🇷🇴 2.57.121.112

🇺🇸 185.191.171.18

🇳🇱 103.47.145.66

🇷🇴 92.118.39.71

🇧🇬 78.128.112.6

🇺🇸 66.132.186.214

🇺🇸 65.49.1.20

🇮🇳 59.179.31.238

🇺🇸 2604:a880:400:d1:0:5:5fbe:1

🇺🇸 184.105.247.228

🇵🇱 162.158.102.86