JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.113.99.238

136.113.99.238 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	238.99.113.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.113.99.238

Whois 136.113.99.238

IP Abuse Reports for 136.113.99.238:

This IP address has been reported a total of 26 times from 18 distinct sources. 136.113.99.238 was first reported on August 25th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 vtchost.com	2026-09-02 07:41:35 (7 minutes ago)	minux.cc:443 136.113.99.238 - - [02/Sep/2026:09:41:35 +0200] "GET /dl/stable/ HTTP/1.1" 418 591 "-" ... show more minux.cc:443 136.113.99.238 - - [02/Sep/2026:09:41:35 +0200] "GET /dl/stable/ HTTP/1.1" 418 591 "-" "Mozilla/5.0 (compatible; Reflectionbot/1.0; +https://reflection.ai/bot)" ... show less	Bad Web Bot
🇸🇮 extremevital	2026-09-02 04:30:05 (3 hours ago)	...	Bad Web Bot
🇺🇸 webgobe	2026-09-01 21:59:20 (9 hours ago)	wew-Joomla User : try to access forms...	Hacking
Anonymous	2026-09-01 19:12:54 (12 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Auto ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Automated scanning show less	Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-09-01 19:02:38 (12 hours ago)	HTTP application-layer DoS / botnet traffic from 136.113.99.238: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 136.113.99.238: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-09-01 15:25:32 (16 hours ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇫🇷 JPPO	2026-09-01 08:22:20 (23 hours ago)	2 hits : Port 443 : web crawler without proper DNS NAME or IA robot : to be blocked	Web App Attack
🇳🇱 DrLex0	2026-09-01 08:06:48 (23 hours ago)	Pretty sure this is not a legitimate bot; the URL gives a 404 136.113.99.238 443 - [01/Sep/2026:06: ... show more Pretty sure this is not a legitimate bot; the URL gives a 404 136.113.99.238 443 - [01/Sep/2026:06:36:13 +0000] "GET [redacted] HTTP/1.1" 301 5507 "-" "Mozilla/5.0 (compatible; Reflectionbot/1.0; +https://reflection.ai/bot)" 136.113.99.238 443 - [01/Sep/2026:06:36:22 +0000] "GET [redacted] HTTP/1.1" 200 6469 "-" "Mozilla/5.0 (compatible; Reflectionbot/1.0; +https://reflection.ai/bot)" 136.113.99.238 443 - [01/Sep/2026:08:06:47 +0000] "GET [redacted] HTTP/1.1" 301 5463 "-" "Mozilla/5.0 (compatible; Reflectionbot/1.0; +https://reflection.ai/bot)" 136.113.99.238 443 - [01/Sep/2026:08:06:48 +0000] "GET [redacted] HTTP/1.1" 301 5469 "-" "Mozilla/5.0 (compatible; Reflectionbot/1.0; +https://reflection.ai/bot)" 136.113.99.238 443 - [01/Sep/2026:08:06:48 +0000] "GET [redacted] HTTP/1.1" 200 19922 "-" "Mozilla/5.0 (compatible; Reflectionbot/1.0; +https://reflection.ai/bot)" show less	Brute-Force Bad Web Bot
🇸🇬 mypatricks	2026-08-31 22:38:39 (1 day ago)	136.113.99.238 \| Port: 13497 \| DNS: 238.99.113.136.bc.googleusercontent.com 2026-09-01T06:38:38+08:0 ... show more 136.113.99.238 \| Port: 13497 \| DNS: 238.99.113.136.bc.googleusercontent.com 2026-09-01T06:38:38+08:00 America/Chicago \| Un-authorized bots or crawlers \| UA: Mozilla/5.0 (compatible; Reflectionbot/1.0; +https://reflection.ai/bot) HTTP/1.1 443 GET \| URL: /customer-self-service/are-fresh-flowers-pvc-figure-toys-acrylic-topper-safe-put-on-cakes/ \| Ref: - \| Country: US/United States/-08:00 IP City: Council Bluffs a33f86cd186e22db-ORD/Chicago, IL, United States 1 hits/0 secs Robots 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇸🇬 mypatricks	2026-08-31 20:02:52 (1 day ago)	136.113.99.238 \| Port: 10267 \| DNS: 238.99.113.136.bc.googleusercontent.com 2026-09-01T04:02:51+08:0 ... show more 136.113.99.238 \| Port: 10267 \| DNS: 238.99.113.136.bc.googleusercontent.com 2026-09-01T04:02:51+08:00 America/Chicago \| Un-authorized bots or crawlers \| UA: Mozilla/5.0 (compatible; Reflectionbot/1.0; +https://reflection.ai/bot) HTTP/1.1 443 GET \| URL: /hashtag/despicable-me/ \| Ref: - \| Country: US/United States/-08:00 IP City: Council Bluffs a33ea29d28b20f68-EWR/Newark, NJ, United States 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 SX Communications	2026-08-31 18:29:27 (1 day ago)	HTTP application-layer DoS / botnet traffic from 136.113.99.238: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 136.113.99.238: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-08-31 07:32:51 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 136.113.99.238 (238.99.113.136.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 136.113.99.238 (238.99.113.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:32:46.337343 2026] [security2:error] [pid 17591:tid 17591] [client 136.113.99.238:32770] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.williamfitzsimmons.com\|F\|2"] [data ".sinclaircambridge.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.williamfitzsimmons.com"] [uri "/www.sinclaircambridge.com"] [unique_id "apUuHuRsGZemuvSHJW1mhQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-08-31 02:45:07 (2 days ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇺🇸 SX Communications	2026-08-29 22:17:53 (3 days ago)	HTTP application-layer DoS / botnet traffic from 136.113.99.238: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 136.113.99.238: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇨🇦 polycoda	2026-08-29 17:32:18 (3 days ago)	📄 Probes for tons of inexistent files and/or PHP scripts	Hacking Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.32.70.169

🇭🇰 154.221.25.99

🇺🇸 136.56.34.147

🇭🇰 123.58.215.196

🇮🇳 110.173.190.221

🇺🇸 71.19.205.131

🇬🇧 45.133.173.43

🇺🇸 216.180.246.44

🇺🇸 184.105.139.89

🇧🇷 177.112.111.110

🇯🇵 172.64.215.102

🇦🇷 170.78.195.112

🇺🇸 152.53.210.20

🇨🇳 42.231.106.220

🇮🇩 36.37.73.242

🇺🇸 34.193.119.44

🇨🇦 24.85.19.121

🇯🇵 152.32.202.151

🇮🇳 103.102.92.70

🇺🇸 64.62.156.85