JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.66.66.192

136.66.66.192 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 75%: ?

75%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	192.66.66.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.66.66.192

Whois 136.66.66.192

IP Abuse Reports for 136.66.66.192:

This IP address has been reported a total of 14 times from 12 distinct sources. 136.66.66.192 was first reported on August 28th 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-08-29 00:46:12 (4 minutes ago)	Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇬🇧 Aetherweb Ark	2026-08-29 00:43:39 (7 minutes ago)	(mod_security) mod_security (id:949110) triggered by 136.66.66.192 (US/United States/192.66.66.136.b ... show more (mod_security) mod_security (id:949110) triggered by 136.66.66.192 (US/United States/192.66.66.136.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇧🇾 lns.bz	2026-08-29 00:28:23 (22 minutes ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 00:25:14 (25 minutes ago)	(mod_security) mod_security (id:210492) triggered by 136.66.66.192 (192.66.66.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.66.66.192 (192.66.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:25:08.835704 2026] [security2:error] [pid 3363342:tid 3363365] [client 136.66.66.192:16570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alfred.merart.com"] [uri "/@fs/root/.env"] [unique_id "apIm5G-f09rsyFsPsuSugwAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-29 00:09:21 (41 minutes ago)	Aggressive web scan	Web App Attack
🇮🇹 VHosting	2026-08-28 23:35:03 (1 hour ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-28 23:28:13 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-28 23:10:37 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 136.66.66.192 (192.66.66.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.66.66.192 (192.66.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:10:30.967932 2026] [security2:error] [pid 13301:tid 13301] [client 136.66.66.192:17200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.michaelgardner.com"] [uri "/@fs/.env"] [unique_id "apIVZjADo-NrmRNHE6kI3gAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-08-28 23:02:21 (1 hour ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, path_traversal, aws_creds, source_backup, ssh_keys, ai_secrets, git_exposure, config_backup. Observed by 1 sensor(s); 631 hits. show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-08-28 22:44:41 (2 hours ago)	Try to access /@fs/.env?raw??	Web App Attack
🇳🇱 SchorelWeb	2026-08-28 22:31:21 (2 hours ago)	Cluster member (Omitted) (FR/France/-) said, TEMPDENY 136.66.66.192, Reason:[(Suspicious02) Suspicio ... show more Cluster member (Omitted) (FR/France/-) said, TEMPDENY 136.66.66.192, Reason:[(Suspicious02) Suspicious activity detected 136.66.66.192 (US/United States/192.66.66.136.bc.googleusercontent.com): 10 in the last 3600 secs] show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-28 22:25:48 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.66.66.192 (192.66.66.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.66.66.192 (192.66.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:25:45.362793 2026] [security2:error] [pid 29227:tid 29227] [client 136.66.66.192:25742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.paleopathologist.com"] [uri "/@fs/.env"] [unique_id "apIK6d5fr464d-cGU85ylgAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-08-28 22:25:15 (2 hours ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 136.66.66.192 (US/United States/192.66.6 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 136.66.66.192 (US/United States/192.66.66.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.66.66.192 - - [29/Aug/2026:00:25:10 +0200] "GET /@fs/home/debian/.aws/credentials?raw?? HTTP/2.0" 404 201 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)" "136.66.66.192" host=ipv6.lisoladeidesideri.it show less	Port Scan
🇫🇷 Octopuce	2026-08-28 22:14:04 (2 hours ago)	Aggressive web search of vulnerable pages: /img../.env /frontend/.env /.env /v1/.env /docker/.env . ... show more Aggressive web search of vulnerable pages: /img../.env /frontend/.env /.env /v1/.env /docker/.env ... show less	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 110.224.161.46

🇸🇬 45.32.118.58

🇳🇱 34.178.45.48

🇺🇸 34.148.228.1

🇯🇵 34.146.176.156

🇺🇸 20.80.75.15

🇨🇦 4.204.200.136

🇺🇸 3.238.235.168

🇨🇴 190.26.139.82

🇺🇦 188.163.114.89

🇧🇷 187.255.96.114

🇨🇳 171.83.199.63

🇧🇷 160.20.87.248

🇹🇭 157.85.108.68

🇩🇪 155.117.13.160

🇵🇰 153.117.37.83

🇳🇱 141.11.1.95

🇺🇸 136.119.48.182

🇺🇸 136.108.95.182

🇨🇳 119.125.28.212