JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.67.117.164

Neutral Activity

Abuse Confidence Score

0% Low Risk

34 reports

27 reporters · latest 3 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 164.117.67.136.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: The Dalles, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

136.67.117.164 has been reported 34 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

34 from 27 distinct reporters

First reported

August 1st 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-02 21:59:09 UTC · (3 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-01.	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-08-01 21:59:24 UTC · (3 months ago)	Auto-ban: >3000 req/min op 2026-08-01	Web App Attack SSH Hacking
🇨🇭 zynex	2026-08-01 17:18:19 UTC · (3 months ago)	URL Probing: /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 17:01:06 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:00:59.316266 2026] [security2:error] [pid 3035055: ... show more (mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:00:59.316266 2026] [security2:error] [pid 3035055:tid 3035055] [client 136.67.117.164:45600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "page-wide.com"] [uri "/.env.bak"] [unique_id "am4mS6KPl9NfBTuS-vhMjgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 16:01:00 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:00:56.182450 2026] [security2:error] [pid 991821:t ... show more (mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:00:56.182450 2026] [security2:error] [pid 991821:tid 991821] [client 136.67.117.164:51060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "turtletaekwondo.com.swindon-itf.com"] [uri "/.env.save"] [unique_id "am4YOBODnWxHPgy9ixcgnAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 15:40:28 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:40:20.353794 2026] [security2:error] [pid 933327:t ... show more (mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:40:20.353794 2026] [security2:error] [pid 933327:tid 933327] [client 136.67.117.164:49496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wedeliverstrippers.com"] [uri "/.env.backup"] [unique_id "am4TZDIskua9XoqhNEwwoQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 15:23:05 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:22:57.884377 2026] [security2:error] [pid 2499800: ... show more (mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:22:57.884377 2026] [security2:error] [pid 2499800:tid 2499800] [client 136.67.117.164:38142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galengetting.com"] [uri "/.env.dev"] [unique_id "am4PUQBdXdIKMqb1rL0KcAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MatCat	2026-08-01 15:05:08 UTC · (3 months ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇬🇧 Axel	2026-08-01 14:40:02 UTC · (3 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env.dev Server: UK-01	Web App Attack Hacking SQL Injection
Anonymous	2026-08-01 14:30:06 UTC · (3 months ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.o ... show more Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.old HTTP/1.1 show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-08-01 14:20:44 UTC · (3 months ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇪🇸 alferez	2026-08-01 14:15:32 UTC · (3 months ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 14:11:41 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:11:35.664071 2026] [security2:error] [pid 573991:t ... show more (mod_security) mod_security (id:210492) triggered by 136.67.117.164 (164.117.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:11:35.664071 2026] [security2:error] [pid 573991:tid 574053] [client 136.67.117.164:49912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aafmhk2015.aafm.us"] [uri "/.env.example"] [unique_id "am3-l7TZIPcWRavMJPPyMgAAAUE"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 bcsaba	2026-08-01 13:49:12 UTC · (3 months ago)	Probing for .env file: 136.67.117.164 - - - - [01/Aug/2026:15:49:10 +0200] "GET /.env.old HTTP/1.1" 400 230 "-" "crusader-worker/1.0" "-"	Web App Attack
🇧🇾 lns.bz	2026-08-01 13:32:43 UTC · (3 months ago)	Too many 404 requests [BY]	Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇿 198.163.193.174

🇺🇸 45.140.206.198

🇳🇱 5.2.69.86

🇵🇭 210.5.117.238

🇪🇨 186.46.1.172

🇳🇱 138.226.239.234

🇸🇪 94.255.245.175

🇬🇧 87.106.65.126

🇫🇷 85.217.140.23

🇺🇸 66.249.73.4

🇮🇩 43.129.56.70

🇮🇩 202.158.36.50

🇺🇸 192.155.90.80

🇮🇷 185.142.157.54

🇺🇸 185.61.221.38

🇳🇱 138.226.239.91

🇸🇮 130.12.182.117

🇨🇳 101.89.76.249

🇺🇸 66.132.186.176

🇺🇸 2602:fa59:10:2a::1