JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.109.57.52

136.109.57.52 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 51%: ?

51%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	52.57.109.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.109.57.52

Whois 136.109.57.52

IP Abuse Reports for 136.109.57.52:

This IP address has been reported a total of 9 times from 8 distinct sources. 136.109.57.52 was first reported on September 15th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-09-16 14:01:37 (3 days ago)	(modsecurity) srv101 ModSecurity 136.109.57.52 (US/United States/52.57.109.136.bc.googleusercontent. ... show more (modsecurity) srv101 ModSecurity 136.109.57.52 (US/United States/52.57.109.136.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-16 08:46:29 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇵🇱 Budyn	2026-09-16 07:32:02 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.budyn.ovh \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 04:54:55 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 136.109.57.52 (52.57.109.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.109.57.52 (52.57.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:54:48.438146 2026] [security2:error] [pid 24575:tid 24575] [client 136.109.57.52:47470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.brytonmarsh.com"] [uri "/.git/config"] [unique_id "aqohGJB-Ezymd1sDdmEF_gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-15 23:00:05 (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-09-15 16:05:43 (4 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇨🇭 Origon	2026-09-15 07:01:04 (4 days ago)	http-sensitive-files - IP: 136.109.57.52 - time="2026-09-15T09:01:04+02:00" level=info msg="(555f66 ... show more http-sensitive-files - IP: 136.109.57.52 - time="2026-09-15T09:01:04+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 136.109.57.52 (US/396982) : 4h ban on Ip 136.109.57.52" module=db show less	Web App Attack
🇩🇪 NewWavesApp	2026-09-15 06:32:59 (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 136.109.57.52 (US/United States/52.57.1 ... show more (mod_security) mod_security triggered on hostname [redacted] 136.109.57.52 (US/United States/52.57.109.136.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇳🇱 WeCloudit-Anti-Abuse	2026-09-15 05:58:06 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.195.237.152

🇺🇸 184.168.21.211

🇨🇳 180.120.188.176

🇺🇸 134.33.97.74

🇯🇵 133.242.132.48

🇮🇳 122.168.197.138

🇹🇼 122.117.106.13

🇺🇸 74.68.70.136

🇳🇱 45.142.193.161

🇨🇳 182.61.20.116

🇺🇸 46.18.90.8

🇺🇸 24.43.144.225

🇺🇸 20.169.49.247

🇮🇳 4.240.96.30

🇭🇰 172.216.245.45

🇨🇳 119.23.73.148

🇺🇸 107.150.109.55

🇸🇪 104.23.221.86

🇧🇷 45.177.209.139

🇮🇪 20.105.65.67