AbuseIPDB » 136.107.52.236
136.107.52.236
This IP was reported 9 times. Confidence of
Abuse
is 44% : ?
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
236.52.107.136.bc.googleusercontent.com
Domain Name
google.com
Country
🇺🇸
United States of America
City
Washington, District of Columbia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 136.107.52.236 :
This IP address has been reported a total of
9
times from
6 distinct
sources.
136.107.52.236 was first reported on
August 28th 2026 , and the most recent report was
8 minutes ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-08-29 00:14:41
(8 minutes ago)
Aggressive web scan
Web App Attack
🇺🇸
mnsf
2026-08-29 00:12:28
(10 minutes ago)
Too many Status 40X (81)
Scanning/Probing (76)
Brute-Force
Web App Attack
🇳🇱
Alboweb B.V.
2026-08-29 00:11:24
(11 minutes ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-29 00:04:04
(18 minutes ago)
(mod_security) mod_security (id:210492) triggered by 136.107.52.236 (236.52.107.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.52.236 (236.52.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:03:58.743433 2026] [security2:error] [pid 26877:tid 26877] [client 136.107.52.236:36804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.toys-alliance.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "apIh7ukaQg3j7VgMae-jiQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-28 23:40:04
(42 minutes ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 23:37:18
(45 minutes ago)
(mod_security) mod_security (id:210492) triggered by 136.107.52.236 (236.52.107.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.52.236 (236.52.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:37:13.136335 2026] [security2:error] [pid 2118:tid 2266] [client 136.107.52.236:47598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.aafmglobal.com"] [uri "/@fs/app/.env"] [unique_id "apIbqcCENKGScZFEot5R4AAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 23:08:52
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 136.107.52.236 (236.52.107.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.52.236 (236.52.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:08:47.626689 2026] [security2:error] [pid 3356579:tid 3356649] [client 136.107.52.236:4736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jpdesign.us"] [uri "/@fs/.env.production"] [unique_id "apIU_5L1xvMbE5J0qfMRPAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 22:40:13
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 136.107.52.236 (236.52.107.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.52.236 (236.52.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:40:09.031649 2026] [security2:error] [pid 23954:tid 23954] [client 136.107.52.236:20296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brianchancemusic.com"] [uri "/@fs/app/.env"] [unique_id "apIOSSlM5DtulSdK3uRh_gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-08-28 22:28:36
(1 hour ago)
Web scanning / probing for vulnerable paths | URL: /@fs/var/task/.env?raw?? | Evidence: microsites.g ...
show more
Web scanning / probing for vulnerable paths | URL: /@fs/var/task/.env?raw?? | Evidence: microsites.grupoeuropa.com 136.107.52.236 - - [29/Aug/2026:00:28:21 +0200] \"GET /@fs/var/task/.env?raw?? HTTP/1.1\" 404 - \"-\" \"Mozilla/5.0 (compatible; Claude-User/1.0; [email])\" GEOIP_COUNTRY_CODE=US | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: