JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.67.230.130

136.67.230.130 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 57%: ?

57%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	130.230.67.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.67.230.130

Whois 136.67.230.130

IP Abuse Reports for 136.67.230.130:

This IP address has been reported a total of 11 times from 9 distinct sources. 136.67.230.130 was first reported on September 15th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-09-16 06:35:36 (15 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.teddypot.cloud \| URI: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇷 Catalin Negru	2026-09-16 03:41:35 (18 hours ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇳🇱 homeshowdomain.nl	2026-09-15 21:59:19 (23 hours ago)	Auto-ban: >3000 req/min op 2026-09-15	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-09-15 17:23:14 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.67.230.130 (130.230.67.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.67.230.130 (130.230.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:23:07.816550 2026] [security2:error] [pid 21866:tid 21866] [client 136.67.230.130:33886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jfhglobal.haworthconsultinggroup.com"] [uri "/.git/config"] [unique_id "aql--3yhbI_6Bdia9boeRgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 dalslab ltd	2026-09-15 16:45:23 (1 day ago)	[15/Sep/2026:18:45:21 +0200] - 404 404 - GET https jf.dalslab.com "/.git/config" [Client 136.67.230. ... show more [15/Sep/2026:18:45:21 +0200] - 404 404 - GET https jf.dalslab.com "/.git/config" [Client 136.67.230.130] [Length 0] [Gzip -] [Sent-to 10.1.1.22] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [15/Sep/2026:18:45:22 +0200] - 404 404 - GET https jf.dalslab.com "/.env" [Client 136.67.230.130] [Length 0] [Gzip -] [Sent-to 10.1.1.22] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [15/Sep/2026:18:45:22 +0200] - 404 404 - GET https jf.dalslab.com "/.env.local" [Client 136.67.230.130] [Length 0] [Gzip -] [Sent-to 10.1.1.22] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [15/Sep/2026:18:45:22 +0200] - 404 404 - GET https jf.dalslab.com "/.env.production" [Client 136.67.230.130] [Length 0] [Gzip -] [Sent-to 10.1.1.22] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-09-15 16:04:07 (1 day ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 10:38:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.67.230.130 (130.230.67.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.67.230.130 (130.230.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:38:38.726023 2026] [security2:error] [pid 10911:tid 10911] [client 136.67.230.130:51124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brewhound.net"] [uri "/.git/config"] [unique_id "aqkgLqSGCwkAOOaIN3BSoQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-15 07:24:08 (1 day ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-15 06:20:21 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-09-15 02:50:08 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-09-15 02:48:59 (1 day ago)	136.67.230.130 - - [15/Sep/2026:04:48:55 +0200] "GET /.env.test HTTP/1.1" 404 521 "-" "Mozilla/5.0 ( ... show more 136.67.230.130 - - [15/Sep/2026:04:48:55 +0200] "GET /.env.test HTTP/1.1" 404 521 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 136.67.230.130 - - [15/Sep/2026:04:48:55 +0200] "GET /.env.remote HTTP/1.1" 404 521 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 136.67.230.130 - - [15/Sep/2026:04:48:55 +0200] "GET /.env.bak HTTP/1.1" 404 521 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 136.67.230.130 - - [15/Sep/2026:04:48:55 +0200] "GET /.env.backup HTTP/1.1" 404 521 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 136.67.230.130 - - [15/Sep/2026:04:48:55 +0200] "GET /.env.save HTTP/1.1" 404 521 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 136.67.230.130 - - [15/Sep/2026:04:48:55 +0200] show less	Web App Attack Hacking

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.226.137.24

🇨🇴 190.130.103.31

🇵🇪 181.65.211.141

🇮🇩 160.22.126.54

🇺🇸 104.198.76.18

🇧🇩 103.136.107.101

🇧🇷 45.162.248.118

🇺🇸 45.79.196.209

🇸🇬 45.78.204.246

🇧🇪 34.62.226.18

🇺🇸 24.23.125.83

🇰🇷 8.213.137.21

🇲🇽 189.169.120.195

🇮🇩 69.5.20.205

🇷🇴 2.57.122.53

🇱🇻 213.176.24.46

🇨🇱 186.189.99.228

🇺🇸 172.104.20.78

🇹🇼 114.34.106.146

🇺🇸 104.154.63.144