JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.67.56.140

136.67.56.140 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 52%: ?

52%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	140.56.67.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.67.56.140

Whois 136.67.56.140

IP Abuse Reports for 136.67.56.140:

This IP address has been reported a total of 12 times from 11 distinct sources. 136.67.56.140 was first reported on October 2nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 gnom4ik	2026-10-09 02:45:51 (1 week ago)	ban-reviewer auto report; ip=136.67.56.140; scenario=crowdsecurity/http-admin-interface-probing; ver ... show more ban-reviewer auto report; ip=136.67.56.140; scenario=crowdsecurity/http-admin-interface-probing; verdict=valid_ban; confidence=0.92; categories=15; active_decisions=7; lookback_decisions=7; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high; ip_active_decision_count_high show less	Hacking
🇳🇱 lns.bz	2026-10-02 21:00:02 (2 weeks ago)	.env scanning [DOPP]	Web App Attack
🇩🇪 LRob	2026-10-02 12:22:46 (2 weeks ago)	Crawler ignoring refusals \| ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claud ... show more Crawler ignoring refusals \| ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]), DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot), Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/) (+6 more) \| path: /6505jtb823xqy48k9trq, /ms1yyaraohkbzmjj7d5o, /model/info (+11 more) \| 2026-10-02 12:22 UTC show less	Bad Web Bot
🇧🇪 cmbplf	2026-10-02 11:33:36 (2 weeks ago)	898 requests with url.path .env 178 requests with url.path /@fs/*	Brute-Force Bad Web Bot
🇺🇸 grassyloki	2026-10-02 10:52:00 (2 weeks ago)	Flooded the public web service with a high-volume sweep of sensitive-file and PHP-wrapper remote-cod ... show more Flooded the public web service with a high-volume sweep of sensitive-file and PHP-wrapper remote-code-execution attempts; every request was rejected (404/403/302) and nothing was served. Target: HTTPS 443 / HTTP 80, GET path-traversal and sensitive-file sweep (.env, .ssh/id_rsa, .aws/credentials, /.git/HEAD, docker-compose.yml, .github/workflows) plus POST PHP-wrapper (allow_url_include=1,... Seen: 2026-10-02 06:52 EDT - 2026-10-02 06:52:21-23 - repeated POST to /cgi-bin/php-cgi.exe and /cgi-bin/php with '?allow_url_include=1&auto_prepend_file=php://input' returning 404 (PHP wrapper RCE attempt), rotating across many fake LLM-search-bot User-Agents - 2026-10-02 06:52:19-20 - sweep for secret/config files returning 403/404: /.ssh/id_rsa, /.ssh/id_ed25519, /.aws/credentials, /.git/HEAD, /.github/workflows/deploy.yml, /.gitlab-ci.yml, /firebase-service-account.json, /docker-compose.yml, /Dockerfile, /terraform.tfstate - 2026-10-02 06:52:18-19 - multiple /.env variants (.env.development?raw, /build/.env, /serv... show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-02 10:49:08 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 136.67.56.140 (140.56.67.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.67.56.140 (140.56.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 06:49:00.622779 2026] [security2:error] [pid 322:tid 322] [client 136.67.56.140:56480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.steamheat.tech"] [uri "/js../.env"] [unique_id "ar-MHC2O0VkfjG8Y5FN30wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 diego021	2026-10-02 10:05:04 (2 weeks ago)	136.67.56.140 pythonpirate.tech - [02/Oct/2026:05:05:03 -0500] "GET /manifest.json HTTP/2.0" 404 158 ... show more 136.67.56.140 pythonpirate.tech - [02/Oct/2026:05:05:03 -0500] "GET /manifest.json HTTP/2.0" 404 158 "http://pythonpirate.tech/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 136.67.56.140 pythonpirate.tech - [02/Oct/2026:05:05:03 -0500] "GET /n2elg1fzkz4e64gkwnb9 HTTP/2.0" 404 158 "http://pythonpirate.tech/n2elg1fzkz4e64gkwnb9" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 136.67.56.140 pythonpirate.tech - [02/Oct/2026:05:05:03 -0500] "GET /model/info HTTP/2.0" 404 158 "http://pythonpirate.tech/model/info" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 136.67.56.140 pythonpirate.tech - [02/Oct/2026:05:05:03 -0500] "GET /z9x8c7v6b5-debug-trigger-www.pythonpirate.tech HTTP/2.0" 404 158 "http://pythonpirate.tech/z9x8c7v6b5-debug-trigger-www.pythonpirate.tech" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Geck ... show less	Web App Attack
🇩🇪 webanyone	2026-10-02 07:01:24 (2 weeks ago)	Wordlist path sweep \| method: GET \| path: /asset-manifest.json, /static/manifest.json, /8ohs5nii33bu ... show more Wordlist path sweep \| method: GET \| path: /asset-manifest.json, /static/manifest.json, /8ohs5nii33buzhew1r8d (+3 more) \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/) show less	Port Scan Web App Attack
🇮🇹 VHosting	2026-10-02 06:30:04 (2 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 LotPhantom	2026-10-02 05:35:18 (2 weeks ago)	136.67.56.140 - - [02/Oct/2026:05:34:18 +0000] "GET /.env.php.bak HTTP/2.0" 403 146 "-" "Mozilla/5.0 ... show more 136.67.56.140 - - [02/Oct/2026:05:34:18 +0000] "GET /.env.php.bak HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "0" ... show less	Web App Attack Bad Web Bot
🇩🇪 updown.io	2026-10-02 04:58:02 (2 weeks ago)	{"level":"info","ts":1790917078.2564178,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1790917078.2564178,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.67.56.140","remote_port":"39346","client_ip":"136.67.56.140","proto":"HTTP/2.0","method":"GET","host":"status.infra.temme.tech","uri":"/dist/manifest.json","headers":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Site":["none"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Fetch-User":["?1"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Upgrade-Insecure-Requests":["1"],"Priority":["u=0, i"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li ... show less	DDoS Attack Web App Attack
🇳🇱 lns.bz	2026-10-02 04:55:46 (2 weeks ago)	Too many 404 requests [DOPP]	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 179.43.167.3

🇧🇷 170.80.110.11

🇨🇦 45.198.224.32

🇨🇳 203.6.227.164

🇷🇺 176.114.185.67

🇭🇰 165.154.43.179

🇧🇪 130.211.55.221

🇧🇩 103.143.126.171

🇮🇩 103.113.170.231

🇱🇹 62.60.134.210

🇮🇳 49.43.162.93

🇧🇪 35.205.187.225

🇳🇱 34.141.191.231

🇮🇪 20.191.45.212

🇺🇸 2001:19f0:ac01:1ad7:5400:6ff:fe72:b8f2

🇺🇸 192.3.253.108

🇸🇬 178.128.84.187

🇺🇸 172.191.239.155

🇺🇸 162.216.149.51

🇺🇸 147.185.132.216