JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.72.2.122

Recent Activity

Abuse Confidence Score

100% Critical

96 reports

63 reporters · latest 6 days ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 122.2.72.136.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

96 from 63 distinct reporters

First reported

November 1st 2026

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 20 🇩🇪 Germany 13 🇳🇱 Netherlands 13

Most common categories Web App Attack 70 Brute-Force 24 Hacking 23 Bad Web Bot 22 SQL Injection 7

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-11-07 23:01:02 UTC · (6 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-06.	Web App Attack SSH Hacking
🇬🇧 consul.to	2026-11-06 21:43:11 UTC · (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 17:31:26 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 136.72.2.122 (122.2.72.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:31:19.032058 2026] [security2:error] [pid 13837:tid 13 ... show more (mod_security) mod_security (id:210492) triggered by 136.72.2.122 (122.2.72.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:31:19.032058 2026] [security2:error] [pid 13837:tid 13858] [client 136.72.2.122:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.raytbrown.com"] [uri "/.env.common"] [unique_id "au4O500qhBwOTHnV-l894gAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-11-06 15:55:45 UTC · (1 week ago)	Scanning for port/service exploits on utopia.aipotu.nl	Port Scan Hacking
🇩🇪 svr	2026-11-06 15:36:20 UTC · (1 week ago)	Abusive Automated Web Scanner	Web App Attack
🇩🇪 rh24	2026-11-06 15:16:06 UTC · (1 week ago)	(badbots) Bad bot user-agent [redacted] from 136.72.2.122 (US/United States/122.2.72.136.bc.googleusercontent.com)	Hacking
🇳🇱 e.fierstra	2026-11-06 11:09:24 UTC · (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-11-06 09:12:04 UTC · (1 week ago)	Bot / scanning and/or hacking attempts: GET /Dockerfile HTTP/2.0, GET /.terraform.rc HTTP/2.0, GET /terraform.tfstate.backup HTTP/2.0, GET /.env_1 HTTP/2.0, GET /config/gcp-credentials.json HTTP/2.0, GET /firebase.json HTTP/2.0, GET /.env.supabase HT ... show more Bot / scanning and/or hacking attempts: GET /Dockerfile HTTP/2.0, GET /.terraform.rc HTTP/2.0, GET /terraform.tfstate.backup HTTP/2.0, GET /.env_1 HTTP/2.0, GET /config/gcp-credentials.json HTTP/2.0, GET /firebase.json HTTP/2.0, GET /.env.supabase HTTP/2.0, GET /firebase-admin.json HTTP/2.0, GET /.terraform/terraform.tfstate HTTP/2.0, GET /firebase-credentials.json HTTP/2.0, GET /terraform.tfstate HTTP/2.0, GET /terraform.tfvars HTTP/2.0, GET /serverless.yml HTTP/2.0, GET /_debugbar/open HTTP/2.0, GET /.env.stage HTTP/2.0, GET /firebase-config.js HTTP/2.0, GET /.dev.vars.production HTTP/2.0, GET /*.auto.tfvars HTTP/2.0, GET /.npmrc HTTP/2.0, GET /.env_sample HTTP/2.0, GET /firebase-adminsdk.json HTTP/2.0, GET /service-account.json HTTP/2.0, GET /env/.env HTTP/2.0 show less	Hacking Web App Attack
🇩🇪 updown.io	2026-11-06 07:38:15 UTC · (1 week ago)	{"level":"info","ts":1793950694.5024378,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.72.2.122","remote_port":"53888","client_ip":"136.72.2.122","proto":"HTTP/2.0","method":"GET","host":"status.olaunch.io","uri": ... show more {"level":"info","ts":1793950694.5024378,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.72.2.122","remote_port":"53888","client_ip":"136.72.2.122","proto":"HTTP/2.0","method":"GET","host":"status.olaunch.io","uri":"/n1kdij05fqzqj4zci7nm","headers":{"X-Custom-Ip-Authorization":["10.145.201.247"],"Accept-Encoding":["gzip"],"X-Real-Ip":["10.145.201.247"],"Cluster-Client-Ip":["10.145.201.247"],"True-Client-Ip":["10.145.201.247"],"X-Nextjs-Data":["1"],"X-Forwarded-For":["10.145.201.247"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"],"X-Remote-Ip":["10.145.201.247"],"X-Originating-Ip":["10.145.201.247"],"X-Remote-Addr":["10.145.201.247"],"X-Client-Ip":["10.145.201.247"],"Accept":["/"],"X-Proxyuser-Ip":["10.145.201.247"],"Forwarded":["for=10.145.201.247"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middl ... show less	DDoS Attack Web App Attack
🇳🇱 e.fierstra	2026-11-06 07:04:29 UTC · (1 week ago)	excessive HTTP 404 errors	Bad Web Bot
🇫🇷 ELYAZ	2026-11-05 08:54:24 UTC · (1 week ago)	(y3) Failed access -byebye- from 136.72.2.122 (US/United States/122.2.72.136.bc.googleusercontent.com): (CF_ENABLE)	Hacking
🇬🇧 bensmithurst	2026-11-05 08:04:02 UTC · (1 week ago)	136.72.2.122 - - [05/Nov/2026:08:04:01 +0000] "GET /.htpasswd HTTP/1.0" 404 398 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 136.72.2.122 - - [05/Nov/2026:08:04:01 +0000] "GET /.env.staging.local HTTP ... show more 136.72.2.122 - - [05/Nov/2026:08:04:01 +0000] "GET /.htpasswd HTTP/1.0" 404 398 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 136.72.2.122 - - [05/Nov/2026:08:04:01 +0000] "GET /.env.staging.local HTTP/1.0" 404 398 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" ... [host=CER***] show less	Bad Web Bot Web App Attack
🇺🇸 WizardsToolkit	2026-11-05 07:24:14 UTC · (1 week ago)	tried to access forbidden files; attempted to access /storage/logs/laravel.log	Web App Attack
🇩🇪 yvoictra	2026-11-05 07:17:10 UTC · (1 week ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-bad-user-agent	Web App Attack
🇲🇽 octageeks.com	2026-11-05 05:06:30 UTC · (1 week ago)	Wordpress malicious attack:[octablocked]	Web App Attack

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.236.228.202

🇮🇳 128.185.140.11

🇨🇳 122.96.50.169

🇰🇷 115.95.217.27

🇫🇷 91.231.89.151

🇷🇺 89.109.13.197

🇳🇱 86.38.187.235

🇸🇪 46.59.109.240

🇮🇩 36.88.8.35

🇰🇷 211.200.98.61

🇰🇷 210.206.95.162

🇨🇭 200.234.122.221

🇬🇧 185.247.137.149

🇨🇳 182.88.167.161

🇭🇰 152.32.212.149

🇨🇳 106.75.153.103

🇨🇳 101.71.208.15

🇵🇰 101.53.225.170

🇺🇸 68.225.56.119

🇺🇸 66.132.186.254