JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.67.70.148

136.67.70.148 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	148.70.67.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.67.70.148

Whois 136.67.70.148

IP Abuse Reports for 136.67.70.148:

This IP address has been reported a total of 29 times from 21 distinct sources. 136.67.70.148 was first reported on August 1st 2026, and the most recent report was 38 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-01 21:59:37 (38 minutes ago)	Auto-ban: >3000 req/min op 2026-08-01	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-01 17:21:50 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:21:42.489573 2026] [security2:error] [pid 1049454:tid 1049454] [client 136.67.70.148:38596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ryanpianos.com"] [uri "/.env.backup"] [unique_id "am4rJvOhUd4fhwH84Xc10wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-01 16:50:07 (5 hours ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇩🇪 pltcldvlpr	2026-08-01 16:45:17 (5 hours ago)	CMS/framework probe: 136.67.70.148 - - [01/Aug/2026:18:45:16 +0200] "GET /.env.bak HTTP/1.1" 404 162 ... show more CMS/framework probe: 136.67.70.148 - - [01/Aug/2026:18:45:16 +0200] "GET /.env.bak HTTP/1.1" 404 162 "-" "crusader-worker/1.0" asn=396982 org="Google LLC" country=US ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 16:16:33 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:16:24.988223 2026] [security2:error] [pid 26695:tid 26695] [client 136.67.70.148:38104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belindalloyd.com"] [uri "/.env.bak"] [unique_id "am4b2P74fiqNBfWjq1HPegAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 15:52:28 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:52:23.183797 2026] [security2:error] [pid 900976:tid 900979] [client 136.67.70.148:54520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bakmail.net"] [uri "/.env.backup"] [unique_id "am4WN8cl5iHDiW1DCppqbQAAAIA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 15:14:43 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:14:35.229524 2026] [security2:error] [pid 19229:tid 19267] [client 136.67.70.148:48140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rainbowbb.com"] [uri "/.env.local"] [unique_id "am4NWyhCIro6KTAnqyWrQwAAAJc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-01 14:32:39 (8 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 14:16:34 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:16:30.031530 2026] [security2:error] [pid 1375779:tid 1375779] [client 136.67.70.148:54894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watonga.com"] [uri "/.env.bak"] [unique_id "am3_vsm5Wv84Py2YrsFZsgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-01 14:14:44 (8 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env.backup \| 5 distinct paths \| UA: crusader-w ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env.backup \| 5 distinct paths \| UA: crusader-worker/1.0 show less	Hacking
🇺🇸 mnsf	2026-08-01 14:05:15 (8 hours ago)	Scanning/Probing (20)	Brute-Force Web App Attack
🇺🇸 LSPCCU	2026-08-01 14:01:29 (8 hours ago)	TSEC Honeypot Network report. Threat score: 71/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 71/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: IP observed in Suricata network metadata. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇺🇸 TPI-Abuse	2026-08-01 13:27:09 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.67.70.148 (148.70.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:27:01.475837 2026] [security2:error] [pid 8352:tid 8352] [client 136.67.70.148:47410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newlindendeli.royal-barbershop.com"] [uri "/.env.local"] [unique_id "am30JU11AbGIjzR1HpnlSQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-08-01 13:21:25 (9 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇿🇦 conure	2026-08-01 12:58:01 (9 hours ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s	Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 136.118.131.24

🇺🇸 93.114.192.223

🇷🇺 81.22.51.64

🇬🇧 213.104.97.66

🇨🇳 111.26.167.166

🇨🇳 106.13.182.13

🇨🇳 60.174.39.82

🇳🇱 45.148.10.152

🇺🇸 40.65.58.129

🇧🇬 193.24.211.76

🇧🇷 168.228.165.252

🇰🇷 121.179.93.147

🇸🇪 192.71.86.56

🇺🇸 145.132.99.102

🇭🇰 118.193.36.56

🇳🇱 77.91.71.11

🇺🇸 70.95.64.28

🇫🇷 62.210.220.46

🇩🇪 20.79.29.209

🇳🇱 213.176.26.64