JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.70.106.27

Neutral Activity

Abuse confidence score ?

0% Low Risk

43 reports

32 reporters · latest 2 months ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	27.106.70.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Washington, District of Columbia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

136.70.106.27 has been reported 43 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 136.70.106.27

Export CSV

This IP address has been reported a total of 43 times from 32 distinct sources. 136.70.106.27 was first reported on August 8th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-09 06:00:00 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇲🇽 octageeks.com	2026-08-09 04:11:13 (2 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇯🇵 nhawsjones	2026-08-08 22:41:56 (2 months ago)	[Sun Aug 09 07:41:55.743440 2026] [authz_core:error] [pid 1790218:tid 131442556266176] [client 136.7 ... show more [Sun Aug 09 07:41:55.743440 2026] [authz_core:error] [pid 1790218:tid 131442556266176] [client 136.70.106.27:56342] AH01630: client denied by server configuration: /var/www/html/.htpasswd ... show less	Brute-Force
🇺🇸 Epimetheus	2026-08-08 22:32:57 (2 months ago)	Zombie network / Bot scanner detected: [GET] /api/v2/settings [GET] /api/.env [GET] /trace.axd [GET ... show more Zombie network / Bot scanner detected: [GET] /api/v2/settings [GET] /api/.env [GET] /trace.axd [GET] /_debugbar/open [GET] /firebase-admin.json [GET] /.env.production.bak [GET] /manifest.json [GET] /.env.swp [GET] /my [GET] /workspace UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot show less	Bad Web Bot Exploited Host Web App Attack
🇫🇷 masterguru	2026-08-08 21:55:08 (2 months ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-197) show less	Hacking
🇺🇸 TPI-Abuse	2026-08-08 21:32:47 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 136.70.106.27 (27.106.70.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.70.106.27 (27.106.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 17:32:43.957765 2026] [security2:error] [pid 1371110:tid 1371110] [client 136.70.106.27:39820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockymtnfire.com"] [uri "/.git/config"] [unique_id "anegewBO69HwY81G5YrzbQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-08-08 21:21:23 (2 months ago)	136.70.106.27 - - [08/Aug/2026:23:21:21 +0200] "GET /.git/config HTTP/2.0" 403 44 "-" "Mozilla/5.0 ( ... show more 136.70.106.27 - - [08/Aug/2026:23:21:21 +0200] "GET /.git/config HTTP/2.0" 403 44 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-08 20:13:39 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-08-08 19:48:51 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 136.70.106.27 (27.106.70.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 136.70.106.27 (27.106.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 15:48:43.175543 2026] [security2:error] [pid 861610:tid 861610] [client 136.70.106.27:39078] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.rogerproperties.com\|F\|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.rogerproperties.com"] [uri "/rclone.conf"] [unique_id "aneIGwfYNRPgBzYtbO3WlwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2026-08-08 19:13:07 (2 months ago)	196 attack(s) detected, such as these: {"event":"web_block","ip":"136.70.106.27","host":"api.marche- ... show more 196 attack(s) detected, such as these: {"event":"web_block","ip":"136.70.106.27","host":"api.marche-be.com","request":"GET /wp-json HTTP/2.0","user_agent":"","reason":"Status-404","timestamp":"2026-08-08T19:13:07 00:00","logentry":"api.marche-be.com 136.70.106.27 - - [08/Aug/2026:21:13:07 0200] \"GET /wp-json HTTP/2.0\" 404 0 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; https://openai.com/bot\" \"172.25.79.38:5000\""} * Report Details : https://p4u.xyz/PE2BM0PDGKC/1 IP Details *: https://p4u.xyz/PE2BM0PDGKC/2 show less	Web Spam Hacking Bad Web Bot
Anonymous	2026-08-08 17:44:22 (2 months ago)	XSS Attempt	Hacking
🇧🇪 cmbplf	2026-08-08 17:41:33 (2 months ago)	462 requests with url.path .ssh/ 103 requests with url.path *secrets.yml	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-08-08 16:38:30 (2 months ago)	Restricted File Access Attempt. Matched phrase ".aws/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇿🇦 conure.sh	2026-08-08 16:20:10 (2 months ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 johnkarlhill	2026-08-08 16:17:11 (2 months ago)	WebKnight blocked malicious web request on johnkarlhill.com	Brute-Force SSH

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.168.21.211

🇳🇱 200.162.145.194

🇹🇼 198.235.24.37

🇺🇸 195.184.76.232

🇺🇸 195.184.76.134

🇬🇧 193.163.125.197

🇬🇧 188.240.59.41

🇷🇺 176.120.22.61

🇯🇵 150.230.214.236

🇸🇮 130.12.182.61

🇨🇳 113.116.16.183

🇬🇧 77.67.26.85

🇺🇸 71.6.245.187

🇺🇸 54.90.159.174

🇫🇷 51.178.84.57

🇸🇬 47.84.141.101

🇳🇱 45.156.87.127

🇸🇬 43.156.44.217

🇫🇮 34.88.19.59

🇺🇸 20.12.243.131