JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.111.196.82

136.111.196.82 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	82.196.111.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.111.196.82

Whois 136.111.196.82

IP Abuse Reports for 136.111.196.82:

This IP address has been reported a total of 31 times from 22 distinct sources. 136.111.196.82 was first reported on August 1st 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-01 22:00:40 (10 hours ago)	Auto-ban: >3000 req/min op 2026-08-01	Web App Attack SSH Hacking
🇺🇦 URAN Publishing Service	2026-08-01 16:45:36 (15 hours ago)	Multiple unauthorized connection attempts	Web App Attack
🇫🇷 Baking333	2026-08-01 16:04:34 (16 hours ago)	[redacted] 136.111.196.82 - - [01/Aug/2026:17:04:32 +0100] "GET /.[redacted] HTTP/1.1" 302 6783 0/45 ... show more [redacted] 136.111.196.82 - - [01/Aug/2026:17:04:32 +0100] "GET /.[redacted] HTTP/1.1" 302 6783 0/45885 "-" "crusader-worker/1.0" [redacted] 136.111.196.82 - - [01/Aug/2026:17:04:32 +0100] "GET /.[redacted] HTTP/1.1" 302 6783 0/52546 "-" "crusader-worker/1.0" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 16:01:36 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:01:29.139315 2026] [security2:error] [pid 2905792:tid 2905794] [client 136.111.196.82:58118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "purposethroughpainco.com"] [uri "/.env.production"] [unique_id "am4YWagTNrrL8heozGr37QAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2026-08-01 15:50:53 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.111.196.82 (US/United States/82.196.111.136 ... show more (mod_security) mod_security (id:210492) triggered by 136.111.196.82 (US/United States/82.196.111.136.bc.googleusercontent.com): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 15:27:31 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:27:23.293623 2026] [security2:error] [pid 919200:tid 919200] [client 136.111.196.82:47920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shipthunder.com"] [uri "/.env.example"] [unique_id "am4QW-fcb6yv7kYqVx9plQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 14:50:10 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:50:06.534060 2026] [security2:error] [pid 1881365:tid 1881365] [client 136.111.196.82:49840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soundtrax.net"] [uri "/.env.old"] [unique_id "am4HnjTJ-mHRPMBbol6gogAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-01 14:30:38 (17 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.111.196.82 (US/United States/82.1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.111.196.82 (US/United States/82.196.111.136.bc.googleusercontent.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 macrob	2026-08-01 14:11:04 (17 hours ago)	2026/08/01 14:11:01 [error] 4000762#4000762: 435299974 access forbidden by rule, client: 136.111.19 ... show more 2026/08/01 14:11:01 [error] 4000762#4000762: 435299974 access forbidden by rule, client: 136.111.196.82, server: ca5h.win, request: "GET /.env.old HTTP/1.1", host: "ca5h.win" 2026/08/01 14:11:01 [error] 4000762#4000762: 435299975 access forbidden by rule, client: 136.111.196.82, server: ca5h.win, request: "GET /.env.bak HTTP/1.1", host: "ca5h.win" 2026/08/01 14:11:01 [error] 4000762#4000762: 435299976 access forbidden by rule, client: 136.111.196.82, server: ca5h.win, request: "GET /.env.backup HTTP/1.1", host: "ca5h.win" ... show less	Web App Attack
Anonymous	2026-08-01 13:55:15 (18 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
Anonymous	2026-08-01 13:50:08 (18 hours ago)	suspicious request in access.log	Web App Attack
🇵🇱 dzpk	2026-08-01 13:39:43 (18 hours ago)	[01/Aug/2026:15:39:42 +0200] 178559158247.697825 136.111.196.82 36298 HOST 443 [01/Aug/2026:15:39:42 ... show more [01/Aug/2026:15:39:42 +0200] 178559158247.697825 136.111.196.82 36298 HOST 443 [01/Aug/2026:15:39:42 +0200] 178559158214.287946 136.111.196.82 36326 HOST 443 [01/Aug/2026:15:39:42 +0200] 178559158250.636402 136.111.196.82 36282 HOST 443 show less	Web App Attack
🇫🇷 mail.avx.gr	2026-08-01 13:38:48 (18 hours ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 136.111.196.82 - - [01/Aug/2026:16:38:48 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 136.111.196.82 - - [01/Aug/2026:16:38:48 +0300] "GET /.env.local HTTP/1.1" 403 6277 "-" "crusader-worker/1.0" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 13:38:32 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:38:28.515789 2026] [security2:error] [pid 2216970:tid 2216970] [client 136.111.196.82:33606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kraatzrussell.com"] [uri "/.env.bak"] [unique_id "am321AGSpmFpE-oWgDtHIwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 13:23:14 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.111.196.82 (82.196.111.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:23:10.610149 2026] [security2:error] [pid 7367:tid 7367] [client 136.111.196.82:45940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.discover.tracybur.net"] [uri "/.env.production"] [unique_id "am3zPoXFus2UiWi4UhAqJAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.227.220.186

🇩🇪 69.5.169.68

🇺🇸 64.62.197.112

🇫🇮 45.148.101.101

🇺🇸 2604:a880:400:d1:0:4:c60d:c001

🇮🇷 217.60.255.130

🇳🇱 216.163.184.131

🇩🇪 194.88.98.88

🇨🇳 180.167.128.202

🇸🇪 171.25.158.70

🇮🇳 159.65.148.158

🇫🇮 147.185.133.129

🇸🇬 134.209.98.92

🇵🇭 122.53.53.117

🇰🇷 112.217.188.122

🇩🇪 49.12.155.100

🇳🇱 45.153.34.72

🇺🇸 20.169.72.3

🇺🇸 20.168.6.85

🇯🇵 2400:2412:1e0:4900:55ac:c43c:2f54:1111