JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.112.122.16

136.112.122.16 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 37%: ?

37%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	16.122.112.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.112.122.16

Whois 136.112.122.16

IP Abuse Reports for 136.112.122.16:

This IP address has been reported a total of 35 times from 28 distinct sources. 136.112.122.16 was first reported on September 5th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Saec	2026-09-09 18:38:45 (1 month ago)	Honeypot caught: /.env via sale.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ... show more Honeypot caught: /.env via sale.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36. show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇮🇳 evicky2002	2026-09-08 00:01:54 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇯🇵 beon	2026-09-07 01:47:57 (1 month ago)	[DateTime=>2026-09-07T01:47:57Z to 2026-09-07T01:48:09Z (UTC)] , [HoneyPot_Hits=>118 times] , [Honey ... show more [DateTime=>2026-09-07T01:47:57Z to 2026-09-07T01:48:09Z (UTC)] , [HoneyPot_Hits=>118 times] , [HoneyPots=>/wp-json, /.oci/config, /@fs/../.env, /@fs/src/.env, /@fs/app/.env, /@fs/..%252f..%252f..%252f..%252f..%252froot/.env and others] , [irregular_query_Hits=>46 times] , [404targets=>/ssl/localhost.key, /dist/manifest.json, /manifest.json, /webpack-stats.json, /.zshrc, /z9x8c7v6b5-debug-trigger- and others] , [total_Hits=>252 times] , [hit_per_second=>21] , [Keyword=>WordPress, Laravel, PHP web shells, irregular query] show less	Bad Web Bot Web App Attack Hacking
🇧🇪 cmbplf	2026-09-06 23:09:17 (1 month ago)	3.282 requests from abuseipdb.com blacklisted IP (1yr3w17h)	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-06 22:51:11 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 136.112.122.16 (16.122.112.136.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 136.112.122.16 (16.122.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 18:51:07.372164 2026] [security2:error] [pid 13925:tid 13925] [client 136.112.122.16:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.samosbet.com\|F\|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.samosbet.com"] [uri "/rclone.conf"] [unique_id "ap3uW0febPCDt6wy22lCMAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2026-09-06 19:14:21 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 136.112.122.16 (US/United States/16.122 ... show more (mod_security) mod_security triggered on hostname [redacted] 136.112.122.16 (US/United States/16.122.112.136.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-09-06 18:33:57 (1 month ago)	[Firewall Canary] Temporary ban due to firewall rule match [URI:*/.env]	Bad Web Bot Web App Attack
Anonymous	2026-09-06 18:20:05 (1 month ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇩🇪 palzer.IT	2026-09-06 17:02:09 (1 month ago)	Fail2ban automatic report for plesk-apache-badbot: 136.112.122.16 - - [06/Sep/2026:19:01:53 +0200] G ... show more Fail2ban automatic report for plesk-apache-badbot: 136.112.122.16 - - [06/Sep/2026:19:01:53 +0200] GET /.git/HEAD [DOMAIN_REMOVED] 404 58278 [DOMAIN_REMOVED] Mozilla/5.0 (compatible; Amazonbot/0.1; +[DOMAIN_REMOVED] show less	Bad Web Bot
🇮🇹 VHosting	2026-09-06 16:35:03 (1 month ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
Anonymous	2026-09-06 13:45:33 (1 month ago)	Observed scanned 3 known-sensitive endpoint(s), e.g.: /dev/.env, /js../.env, /public../.env	Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-09-06 13:38:39 (1 month ago)	{"level":"info","ts":1788701908.822997,"logger":"http.log.access.log0","msg":"handled request","requ ... show more {"level":"info","ts":1788701908.822997,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"136.112.122.16","remote_port":"45298","client_ip":"136.112.122.16","proto":"HTTP/2.0","method":"POST","host":"s7su.status.updown.io","uri":"/graphql","headers":{"Accept":["/"],"Sec-Fetch-Mode":["cors"],"Origin":["https://s7su.status.updown.io"],"Content-Type":["application/json"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Referer":["https://s7su.status.updown.io"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Site":["same-origin"],"Priority":["u=1, i"],"Content-Length":["86"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Ch-Ua":["\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\""],"Sec-Ch-Ua-Platform":["\"macOS\""],"Sec-Fetch-Dest":["empty"]},"tls":{"resumed":false,"version":772,"cipher_suite": ... show less	DDoS Attack Web App Attack
🇨🇦 Mediashaker	2026-09-06 13:38:28 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.112.122.16 (US/U ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.112.122.16 (US/United States/16.122.112.136.bc.googleusercontent.com) show less	Bad Web Bot
🇬🇧 consul.to	2026-09-06 13:29:48 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 13:23:15 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 136.112.122.16 (16.122.112.136.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 136.112.122.16 (16.122.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 09:23:10.536654 2026] [security2:error] [pid 21950:tid 21950] [client 136.112.122.16:52988] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sandersonpropertyimprovements.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sandersonpropertyimprovements.com"] [uri "/z9x8c7v6b5-debug-trigger-sandersonpropertyimprovements.com"] [unique_id "ap1pPuNUD82gnrAOEbBtUQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.16.128.182

🇺🇸 205.210.31.31

🇮🇩 203.89.28.114

🇹🇷 194.146.36.192

🇨🇱 191.116.69.170

🇨🇳 182.44.11.243

🇨🇴 152.203.178.152

🇵🇰 139.135.41.15

🇺🇸 136.65.72.150

🇦🇺 134.199.168.191

🇲🇦 105.68.176.22

🇺🇸 100.31.165.240

🇳🇱 94.102.56.99

🇳🇱 86.38.187.107

🇺🇸 74.125.230.132

🇺🇸 71.6.233.220

🇺🇸 66.132.172.182

🇰🇷 43.155.168.102

🇬🇧 2a06:4880:4000::

🇧🇷 200.219.200.16