JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.70.99.135

Recent Activity

Abuse confidence score ?

100% Critical

28 reports

25 reporters · latest 57 minutes ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Domain Name	google.com
Country	🇺🇸 United States of America
City	Washington, District of Columbia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 136.70.99.135

Export CSV

This IP address has been reported a total of 28 times from 25 distinct sources. 136.70.99.135 was first reported on October 15th 2026, and the most recent report was 57 minutes ago. In the last 60 days, the top reporter locations were: Germany with 6 reports; United Kingdom of Great Britain and Northern Ireland with 5 reports; Netherlands with 4 reports. The most common categories in these recent reports were: Web App Attack 22 times; Bad Web Bot 10 times; Brute-Force 8 times; Hacking 4 times; SQL Injection 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Mediashaker	2026-10-15 21:08:42 (57 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 136.70.99.135 (US/United States/135.99. ... show more (mod_security) mod_security triggered on hostname [redacted] 136.70.99.135 (US/United States/135.99.70.136.bc.googleusercontent.com) show less	SQL Injection
🇬🇧 kie	2026-10-15 20:45:14 (1 hour ago)	15-10-2026:20:44:46UTC [Nginx Web Server] Suspicious web request: path:/.aws/ path:/.env path:/.git ... show more 15-10-2026:20:44:46UTC [Nginx Web Server] Suspicious web request: path:/.aws/ path:/.env path:/.git path:/.env,/.git (180 request(s)). show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-10-15 20:43:56 (1 hour ago)	354 requests with url.path /@fs/ 112 requests with url.path .ssh/	Brute-Force Bad Web Bot
🇺🇸 kosada.com	2026-10-15 19:53:43 (2 hours ago)	Repeated requests for suspicious nonexistent URLs, for example: /z9x8c7v6b5-debug-trigger-daytonregi ... show more Repeated requests for suspicious nonexistent URLs, for example: /z9x8c7v6b5-debug-trigger-daytonregion.com (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)") show less	Web App Attack
🇩🇪 raph	2026-10-15 19:21:46 (2 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇨🇭 4server	2026-10-15 18:41:18 (3 hours ago)	[ThuOct1520:41:14.5923582026][security2:error][pid3307437:tid3307554][client136.70.99.135:0]ModSecur ... show more [ThuOct1520:41:14.5923582026][security2:error][pid3307437:tid3307554][client136.70.99.135:0]ModSecurity:Accessdeniedwithcode403$phase2$.Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".com\"][severity\"ERROR\"][hostname\"mail.tailored-suites.com\"][uri\"/z9x8c7v6b5-debug-trigger-mail.tailored-suites.com\"][unique_id\"atEeSmA6Zi0LWaII6FZWKQAAAM4\"] show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-10-15 17:49:53 (4 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 dot.mg	2026-10-15 17:25:19 (4 hours ago)	Bad behaviour	Web Spam
🇳🇱 Savvii	2026-10-15 16:55:34 (5 hours ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-15 16:53:16 (5 hours ago)	2026/10/15 16:53:14 [error] 3693534#3693534: 355880 [client 136.70.99.135] ModSecurity: Access deni ... show more 2026/10/15 16:53:14 [error] 3693534#3693534: 355880 [client 136.70.99.135] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "idealcollegeonline.org"] [uri "/.env.production::$DATA"] [unique_id "179208319446.567678"] [ref ""], client: 136.70.99.135, server: idealcollegeonline.org, request: "GET /.env.production::$DATA?raw HTTP/2.0", host: "idealcollegeonline.org" 2026/10/15 16:53:14 [error] 3693534#3693534: *355880 [client 136.70.99.135] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_A ... show less	Brute-Force
Anonymous	2026-10-15 14:55:50 (7 hours ago)	High entropy root path probe detected: /67pcihpnlj28ewsi3yli on path: /67pcihpnlj28ewsi3yli	Bad Web Bot Web App Attack
🇩🇪 kkw	2026-10-15 13:46:09 (8 hours ago)	[REDACTED] 136.70.99.135 - - [15/Oct/2026:15:46:09 +0200] "GET /@fs/src/.env?import&raw?? HTTP/2.0" ... show more [REDACTED] 136.70.99.135 - - [15/Oct/2026:15:46:09 +0200] "GET /@fs/src/.env?import&raw?? HTTP/2.0" 301 428 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇩🇪 rh24	2026-10-15 13:05:00 (9 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.70.99.135 (US/Un ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.70.99.135 (US/United States/135.99.70.136.bc.googleusercontent.com) show less	Bad Web Bot
🇩🇪 updown.io	2026-10-15 13:00:44 (9 hours ago)	{"level":"info","ts":1792069241.9651873,"logger":"http.log.access.log0","msg":"handled request","req ... show more {"level":"info","ts":1792069241.9651873,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"136.70.99.135","remote_port":"45660","client_ip":"136.70.99.135","proto":"HTTP/2.0","method":"GET","host":"take.status.updown.io","uri":"/.env.supabase","headers":{"Accept":["/"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"take.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.001071314,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\ ... show less	DDoS Attack Web App Attack
🇬🇧 Aetherweb Ark	2026-10-15 10:51:31 (11 hours ago)	(mod_security) mod_security (id:949110) triggered by 136.70.99.135 (US/United States/135.99.70.136.b ... show more (mod_security) mod_security (id:949110) triggered by 136.70.99.135 (US/United States/135.99.70.136.bc.googleusercontent.com): N in the last X secs show less	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.168

🇮🇳 20.193.232.54

🇺🇸 4.249.17.175

🇦🇷 200.59.113.41

🇮🇷 185.7.172.105

🇵🇭 131.226.101.193

🇨🇳 116.179.33.206

🇺🇸 104.28.246.116

🇨🇳 103.255.200.90

🇳🇱 91.92.42.11

🇨🇦 34.47.1.103

🇺🇸 34.31.161.158

🇺🇸 34.27.133.115

🇺🇸 34.9.88.24

🇵🇱 194.180.48.134

🇧🇷 172.71.10.63

🇺🇸 165.22.47.52

🇬🇧 138.68.186.68

🇺🇸 136.116.246.209

🇺🇸 136.70.159.54