JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.116.185.39

136.116.185.39 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 79%: ?

79%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	39.185.116.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.116.185.39

Whois 136.116.185.39

IP Abuse Reports for 136.116.185.39:

This IP address has been reported a total of 19 times from 16 distinct sources. 136.116.185.39 was first reported on June 25th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-27 22:03:16 (4 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-26. show less	Web App Attack SSH Hacking
🇺🇸 mnsf	2026-06-26 03:06:49 (6 days ago)	Scanning/Probing (30)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 02:01:18 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 136.116.185.39 (39.185.116.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.116.185.39 (39.185.116.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 22:01:15.544048 2026] [security2:error] [pid 17264:tid 17264] [client 136.116.185.39:43118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.disenowebprofesional.com.spyasociados.com"] [uri "/.git/config"] [unique_id "aj3dazvjl-bzAB04BKfK9gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-26 01:39:57 (6 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-195 ... show more BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-26 01:27:54 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 136.116.185.39 (39.185.116.136.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 136.116.185.39 (39.185.116.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:27:51.302821 2026] [security2:error] [pid 15845:tid 15869] [client 136.116.185.39:43710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.onhemp.omegaoak.com"] [uri "/frontend/.git/config"] [unique_id "aj3Vl40BztTJgCx3ryozCQAAAVU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-06-26 01:14:49 (6 days ago)	dot file probe	Web App Attack
🇧🇪 cmbplf	2026-06-26 00:44:10 (6 days ago)	570 requests with url.path */.git/config	Brute-Force Bad Web Bot
🇩🇪 pscriptos	2026-06-26 00:21:13 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-06-26 00:07:18 (6 days ago)	Automated web scanner. Requested suspicious paths: /app/.git/config \| /src/.git/config \| /www/.git/c ... show more Automated web scanner. Requested suspicious paths: /app/.git/config \| /src/.git/config \| /www/.git/config \| /backend/.git/config \| /html/.git/config \| /v3/.git/config \| /htdocs/.git/config \| /assets/.git/config \| /web/.git/config \| /v2/.git/config \| /.git/config \| /shop/.git/config \| /dashboard/.git/config \| /portal/.git/config \| /wp-content/.git/config \| /build/.git/config \| /blog/.git/config \| /admin/.git/config \| /symfony/.git/config \| /wordpress/.git/config \| /site/.git/config \| /api/.git/config \| /laravel/.git/config \| /v1/.git/config \| /pu, /frontend/.git/config \| /src/.git/config \| /www/.git/config \| /backend/.git/config \| /html/.git/co.... UTC: 2026-06-25 23:54:59. show less	Web App Attack
🇬🇧 Aetherweb Ark	2026-06-25 23:38:47 (6 days ago)	(mod_security) mod_security (id:949110) triggered by 136.116.185.39 (US/United States/39.185.116.136 ... show more (mod_security) mod_security (id:949110) triggered by 136.116.185.39 (US/United States/39.185.116.136.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇳🇱 tpjg	2026-06-25 17:03:38 (1 week ago)	Automated: 15 requests with error status in 120s window from 136.116.185.39. Evidence: /static/.git/ ... show more Automated: 15 requests with error status in 120s window from 136.116.185.39. Evidence: /static/.git/config:301,/public/.git/config:301,/htdocs/.git/config:301,/html/.git/config:301,/www/.git/config:301,/web/.git/config:301,/v3/.git/config:301,/v2/.git/config:301,/v1/.git/config:301,/api/.git/config:301,/frontend/.git/config:301,/backend/.git/config:301,/src/.git/config:301,/app/.git/config:301,/.git/config:301 show less	Web App Attack
Anonymous	2026-06-25 17:03:27 (1 week ago)	136.116.185.39 - - [26/Jun/2026:02:03:26 +0900] "GET /.git/config HTTP/1.1" 403 3070 "-" "Mozilla/5. ... show more 136.116.185.39 - - [26/Jun/2026:02:03:26 +0900] "GET /.git/config HTTP/1.1" 403 3070 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-A600FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 136.116.185.39 - - [26/Jun/2026:02:03:26 +0900] "GET /app/.git/config HTTP/1.1" 403 3070 "-" "Mozilla/5.0 (OS/2; Warp 4.5; rv:10.0.12) Gecko/20130108 Firefox/10.0.12 SeaMonkey/2.7.2" 136.116.185.39 - - [26/Jun/2026:02:03:26 +0900] "GET /src/.git/config HTTP/1.1" 403 3070 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36" 136.116.185.39 - - [26/Jun/2026:02:03:26 +0900] "GET /backend/.git/config HTTP/1.1" 403 3070 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.25 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 136.116.185.39 - - [26/Jun/2026:02:03:27 +0900] "GET /frontend/.git/config HTTP/1.1" 403 3069 "-" "Mozilla/5.0 (Windows; U; Window ... show less	Brute-Force
🇵🇱 webadmin	2026-06-25 16:07:43 (1 week ago)		Web App Attack
🇺🇸 kosada.com	2026-06-25 15:41:05 (1 week ago)	Web vulnerability probing: /api/.git/config (bogus vhost/SNI)	Web App Attack
🇳🇱 ipoac.nl	2026-06-25 15:18:23 (1 week ago)	ipoac.nl:443 136.116.185.39 - - [25/Jun/2026:17:18:22 +0200] 203.26.133.32 "GET /.git/config HTTP/1. ... show more ipoac.nl:443 136.116.185.39 - - [25/Jun/2026:17:18:22 +0200] 203.26.133.32 "GET /.git/config HTTP/1.1" 403 6352 "-" "Mozilla/5.0 (Linux; Android 9; CLT-L09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36" show less	Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.39

🇺🇸 147.185.132.31

🇻🇳 116.193.70.26

🇨🇳 101.126.55.95

🇹🇼 61.56.193.111

🇸🇬 47.236.192.26

🇺🇸 45.56.82.11

🇺🇸 198.74.58.148

🇳🇱 77.91.71.11

🇨🇳 114.55.179.151

🇮🇳 20.235.74.118

🇻🇳 14.225.173.146

🇨🇳 120.76.116.45

🇧🇬 91.191.209.118

🇿🇦 20.87.219.67

🇧🇷 200.199.184.141

🇳🇱 185.93.89.36

🇩🇪 161.35.65.86

🇺🇸 147.185.132.77

🇺🇸 141.11.88.3