JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.66.67.39

Recent Activity

Abuse confidence score ?

100% Critical

69 reports

54 reporters · latest 1 day ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	39.67.66.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 136.66.67.39

Export CSV

This IP address has been reported a total of 69 times from 54 distinct sources. 136.66.67.39 was first reported on October 8th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: United States of America with 20 reports; Germany with 12 reports; France with 8 reports. The most common categories in these recent reports were: Web App Attack 53 times; Brute-Force 37 times; Bad Web Bot 21 times; Hacking 14 times; SQL Injection 4 times; Other 20 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Batz	2026-10-09 06:12:10 (1 day ago)	Automated Web Bot hunting for hidden .env / AI API Credentials	Port Scan Bad Web Bot Web App Attack
🇿🇦 vanderhost	2026-10-09 06:07:44 (1 day ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /.env.js via rule: regex ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /.env.js via rule: regex:/^\/\.env/i show less	Web App Attack Bad Web Bot
🇭🇳 unph	2026-10-09 06:05:39 (1 day ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇸🇪 vaia.cloud	2026-10-09 06:05:01 (1 day ago)	crowdsecurity/grafana-cve-2021-43798	Brute-Force Web App Attack
Anonymous	2026-10-09 05:42:13 (1 day ago)	[Fri Oct 09 06:42:13.077402 2026] [proxy_fcgi:error] [pid 5809:tid 5834] [remote 136.66.67.39:51684] ... show more [Fri Oct 09 06:42:13.077402 2026] [proxy_fcgi:error] [pid 5809:tid 5834] [remote 136.66.67.39:51684] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇩🇪 snhosting	2026-10-09 05:39:01 (1 day ago)	136.66.67.39 - - [09/Oct/2026:07:38:50 +0200] "GET /build/manifest.json HTTP/2.0" 404 0 "-" "Mozilla ... show more 136.66.67.39 - - [09/Oct/2026:07:38:50 +0200] "GET /build/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 136.66.67.39 - - [09/Oct/2026:07:38:50 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 136.66.67.39 - - [09/Oct/2026:07:38:50 +0200] "GET /z9x8c7v6b5-debug-trigger-snhosting.de HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 136.66.67.39 - - [09/Oct/2026:07:38:50 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 136.66.67.39 - - [09/Oct/2026:07:38:51 +0200] "POST / HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
Anonymous	2026-10-09 05:35:16 (1 day ago)	136.66.67.39 - - [09/Oct/2026:07:35:15 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; ... show more 136.66.67.39 - - [09/Oct/2026:07:35:15 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 136.66.67.39 - - [09/Oct/2026:07:35:15 +0200] "GET /account/login HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 136.66.67.39 - - [09/Oct/2026:07:35:15 +0200] "GET /auth HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 136.66.67.39 - - [09/Oct/2026:07:35:15 +0200] "GET /users/login HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 136.66.67.39 - - [09/Oct/2026:07:35:15 +0200] "GET /auth/login HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa ... show less	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-10-09 05:34:32 (1 day ago)	20 attempts against mh-misbehave-ban on choy	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-10-09 05:13:42 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
Anonymous	2026-10-09 05:11:00 (1 day ago)	Hacker blocked from logging in to a WP site. 170 blocked attempts in 10 minutes	Web App Attack Hacking
🇫🇷 phoenix1jl96	2026-10-09 04:48:02 (1 day ago)	2026/10/09 06:48:00 [error] 4800#4800: 64484 open() "/home/user-data/www/lucasmaths.fr/cgi-bin/php- ... show more 2026/10/09 06:48:00 [error] 4800#4800: 64484 open() "/home/user-data/www/lucasmaths.fr/cgi-bin/php-cgi.exe" failed (2: No such file or directory), client: 136.66.67.39, server: lucasmaths.fr, request: "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0", host: "lucasmaths.fr" 2026/10/09 06:48:00 [error] 4800#4800: *64484 open() "/home/user-data/www/lucasmaths.fr/cgi-bin/php" failed (2: No such file or directory), client: 136.66.67.39, server: lucasmaths.fr, request: "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0", host: "lucasmaths.fr" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇺🇸 proactive-noc	2026-10-09 04:47:32 (1 day ago)	Web application abuse detected 40 times recently; honeypot-j.	Hacking Web App Attack
🇩🇪 Live Home Cams	2026-10-09 04:46:25 (1 day ago)	WebApp brute force attack detected. Multiple file scanning attempts from 136.66.67.39. Detected by f ... show more WebApp brute force attack detected. Multiple file scanning attempts from 136.66.67.39. Detected by fail2ban. show less	Web App Attack Brute-Force
🇩🇪 TheDjRider	2026-10-09 04:37:59 (1 day ago)	CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ba ... show more CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-10-09T04:37:54.757134706Z. Context: http_status=404, http_status=403 show less	Web App Attack
🇺🇸 iwle	2026-10-09 04:37:36 (1 day ago)	[Fri Oct 09 00:37:34.793009 2026] [:error] [pid 1476:tid 1652] [client 136.66.67.39:0] [client 136.6 ... show more [Fri Oct 09 00:37:34.793009 2026] [:error] [pid 1476:tid 1652] [client 136.66.67.39:0] [client 136.66.67.39] ModSecurity: Warning. Matched phrase ".ssh/id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .ssh/id_rsa found within REQUEST_FILENAME: /.ssh/id_rsa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "justuptowngames.com"] [uri "/.ssh/id_rsa"] [unique_id "ashvjhM9iwOnloWQjmLOIgAAABg"] [Fri Oct 09 00:37:34.957850 2026] [:error] [pid 1476:tid 1641] [client 136.66.67.39:0] [client 136.66.67.39] ModSecurity: Warning. Matched phrase ".bashrc" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI ... show less	Web App Attack

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 121.133.167.123

🇸🇨 31.56.19.95

🇩🇪 2a02:c202:2360:538::1

🇰🇷 222.105.157.3

🇳🇱 193.111.62.252

🇨🇳 175.155.122.208

🇺🇸 136.87.74.74

🇩🇪 69.5.169.94

🇸🇬 35.187.253.55

🇺🇸 34.133.10.93

🇰🇷 211.192.166.194

🇳🇱 109.160.32.41

🇺🇸 104.28.205.123

🇭🇰 103.243.27.155

🇸🇬 103.187.146.107

🇷🇴 80.94.92.179

🇳🇱 77.91.71.90

🇦🇷 38.180.185.208

🇺🇦 31.41.66.228

🇺🇸 17.166.232.35