JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.67.61.199

Activity Trending Down

Abuse Confidence Score

100% Critical

156 reports

99 reporters · latest 2 weeks ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 199.61.67.136.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: The Dalles, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

156 from 99 distinct reporters

First reported

October 15th 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 38 🇩🇪 Germany 37 🇺🇸 United States of America 20

Most common categories Web App Attack 114 Brute-Force 51 Bad Web Bot 49 Hacking 30 Port Scan 12

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-28 10:28:53 UTC · (2 weeks ago)	Scanner hitting /.aws/credentials on gitlab.osef.cloud () — aaguard	Brute-Force Port Scan
🇳🇱 Alt255	2026-10-26 20:43:32 UTC · (2 weeks ago)	[ftpbd] Web exploit scanning: 23 suspicious requests detected by fail2ban jail <name>. Example: 136.67.61.199 - - \[19/Oct/2026:23:41:07 +0200\] "GET /public../.env HTTP/1.1" 404 2101 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compat ... show more [ftpbd] Web exploit scanning: 23 suspicious requests detected by fail2ban jail <name>. Example: 136.67.61.199 - - \[19/Oct/2026:23:41:07 +0200\] "GET /public../.env HTTP/1.1" 404 2101 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-SearchBot/1.0\; +https://openai.com/searchbot" 136.67.61.199 - - \[19/Oct/2026:23:41:07 +0200\] "GET /uploads../.env HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; Meta-ExternalAgent/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)" 136.67.61.199 - - \[19/Oct/2026:23:41:07 +0200\] "GET /api/.env/public/.env HTTP/1.1" 404 7374 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-SearchBot/1.0\; +https://openai.com/searchbot" 136.67.61.199 - - \[19/Oct/2026:23:41:07 +0200\] "GET /static//app/ ... show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-25 13:08:54 UTC · (2 weeks ago)	[ti-12al] Web exploit scanning: 52 suspicious requests detected by fail2ban jail <name>. Example: 136.67.61.199 - - \[19/Oct/2026:07:50:25 +0200\] "GET /media../.env HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(compatible\; Meta-WebIndexer/1.0\; +https://de ... show more [ti-12al] Web exploit scanning: 52 suspicious requests detected by fail2ban jail <name>. Example: 136.67.61.199 - - \[19/Oct/2026:07:50:25 +0200\] "GET /media../.env HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(compatible\; Meta-WebIndexer/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)" 136.67.61.199 - - \[19/Oct/2026:07:50:25 +0200\] "GET /%2e%2e/.env HTTP/2.0" 403 474 "-" "Mozilla/5.0 \(compatible\; Bravebot/1.0\; +https://brave.com/search/\)" 136.67.61.199 - - \[19/Oct/2026:07:50:25 +0200\] "GET /files../.env HTTP/2.0" 403 445 "-" "Mozilla/5.0 \(compatible\; Bravebot/1.0\; +https://brave.com/search/\)" 136.67.61.199 - - \[19/Oct/2026:07:50:25 +0200\] "GET /static../.env HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(compatible\; cohere-ai\; +https://cohere.com/crawler\)" 123masterze ... show less	Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-10-22 16:02:05 UTC · (3 weeks ago)	136.67.61.199 - - [22/Oct/2026:16:02:03 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="136.67.61.199" 136.67.61.199 - - [22/Oct/2026:16:02:03 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="136.67.61.199" 136.67.61.199 - - ... show more 136.67.61.199 - - [22/Oct/2026:16:02:03 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="136.67.61.199" 136.67.61.199 - - [22/Oct/2026:16:02:03 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="136.67.61.199" 136.67.61.199 - - [22/Oct/2026:16:02:03 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="136.67.61.199" 136.67.61.199 - - [22/Oct/2026:16:02:03 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="136.67.61.199" 136.67.61.199 - - [22/Oct/2026:16:02:04 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="136.67.61.199" ... show less	Web Spam Web App Attack
🇩🇪 maxpower	2026-10-22 15:22:59 UTC · (3 weeks ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 136.67.61.199 (US/United States/199.61.67.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.67.61.199 - - [22/Oct/2026: ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 136.67.61.199 (US/United States/199.61.67.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.67.61.199 - - [22/Oct/2026:17:22:53 +0200] "GET /.ssh/id_ecdsa HTTP/2.0" 429 41 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "136.67.61.199" host=canarybusinesshhs.com show less	Port Scan
🇳🇱 Site.eu	2026-10-22 14:41:18 UTC · (3 weeks ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 consul.to	2026-10-22 14:30:51 UTC · (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇲🇽 octageeks.com	2026-10-22 04:07:53 UTC · (3 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇩🇪 raph	2026-10-21 12:09:19 UTC · (3 weeks ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-10-21 11:45:51 UTC · (3 weeks ago)	Too many 404 requests [BY]	Web App Attack
🇩🇪 FeG Deutschland	2026-10-21 07:43:43 UTC · (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248	Exploited Host Web App Attack
🇺🇸 jormaster3k	2026-10-21 06:51:23 UTC · (3 weeks ago)	Attack against Apache (too many 404s)	Web App Attack
🇩🇪 Nightreaver	2026-10-21 06:46:15 UTC · (3 weeks ago)	136.67.61.199 - - [21/Oct/2026:08:46:14 0200] "GET /webpack-stats.json HTTP/1.1" 404 5722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 136.67.61.199 - - [21/Oct/2 ... show more 136.67.61.199 - - [21/Oct/2026:08:46:14 0200] "GET /webpack-stats.json HTTP/1.1" 404 5722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 136.67.61.199 - - [21/Oct/2026:08:46:14 0200] "GET /z9x8c7v6b5-debug-trigger-account.[snip] HTTP/1.1" 404 5722 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; https://kimi.ai/)" 136.67.61.199 - - [21/Oct/2026:08:46:14 0200] "GET /asset-manifest.json HTTP/1.1" 404 5722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 136.67.61.199 - - [21/Oct/2026:08:46:14 0200] "GET /dist/manifest.json HTTP/1.1" 404 5722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 136.67.61.199 - - [21/Oct/2026:08:46:14 0200] "GET /q5g9qpkmrw2evw7ppc87 HTTP/1.1" 404 516 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-Sea[...] show less	Bad Web Bot Web App Attack
Anonymous	2026-10-21 06:42:29 UTC · (3 weeks ago)	[21/Oct/2026:09:42:26 +0300] 179256494615.167315 136.67.61.199 55668 148.251.76.218 443 [21/Oct/2026:09:42:28 +0300] 179256494884.041048 136.67.61.199 55684 148.251.76.218 443	Web App Attack
🇩🇪 MarkGGN	2026-10-21 06:26:05 UTC · (3 weeks ago)	Web attack. 136.67.61.199 - - [21/Oct/2026:08:26:04 +0200] "GET /auth/login HTTP/2.0" 302 138 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" 136.67.61.199 - - [21/O ... show more Web attack. 136.67.61.199 - - [21/Oct/2026:08:26:04 +0200] "GET /auth/login HTTP/2.0" 302 138 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" 136.67.61.199 - - [21/Oct/2026:08:26:04 +0200] "GET /admin/login HTTP/2.0" 302 138 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" show less	Web App Attack

Showing 1 to 15 of 156 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇱🇹 91.224.92.52

🇮🇹 217.26.179.24

🇧🇷 205.210.31.184

🇳🇱 195.178.110.223

🇺🇸 184.186.76.145

🇺🇸 172.239.71.239

🇨🇳 111.72.27.207

🇿🇦 102.129.53.205

🇲🇰 92.53.21.155

🇳🇱 77.239.124.78

🇯🇵 219.75.131.231

🇧🇴 190.186.55.102

🇦🇷 181.7.30.80

🇨🇭 179.43.153.2

🇦🇺 158.178.141.16

🇫🇮 147.185.133.202

🇺🇸 20.102.90.250

🇺🇸 17.166.152.143

🇲🇽 189.147.225.19

🇮🇷 185.112.148.66