JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.85.102.239

Neutral Activity

Abuse Confidence Score

0% Low Risk

87 reports

58 reporters · latest 2 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 239.102.85.136.bc.googleusercontent.com
Domain Name: google.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

136.85.102.239 has been reported 87 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

87 from 58 distinct reporters

First reported

August 16th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ruusvuu	2026-08-17 16:56:16 UTC · (2 months ago)	Automated abuse report: 25 attack/probe requests from Google LLC / SG. Targeted paths: /secrets.yml, /secrets.json, /credentials.json, /Dockerfile, /.docker/config.json. Sample log lines: [nafco] 2026-08-17T16:56:14.946Z 136.85.102.239 - GET /Dockerf ... show more Automated abuse report: 25 attack/probe requests from Google LLC / SG. Targeted paths: /secrets.yml, /secrets.json, /credentials.json, /Dockerfile, /.docker/config.json. Sample log lines: [nafco] 2026-08-17T16:56:14.946Z 136.85.102.239 - GET /Dockerfile 404 - - 1.193 ms ref="-" [nafco] 2026-08-17T16:56:14.248Z 136.85.102.239 - GET /credentials.json 404 - - 1.582 ms ref="-" [nafco] 2026-08-17T16:56:15.196Z 136.85.102.239 - GET /.docker/config.json 404 - - 0.998 ms ref="-" Detected by an automated web-server log monitor. show less	Web App Attack
🇺🇸 entangled_mongoose	2026-08-17 16:54:17 UTC · (2 months ago)	Probed /wp-json.	Web App Attack
🇩🇪 on-com	2026-08-17 15:40:24 UTC · (2 months ago)	URL scan	Brute-Force Web App Attack
🇺🇸 oukat	2026-08-17 15:28:58 UTC · (2 months ago)	Web bot / web application probing against nginx	Bad Web Bot Web App Attack
🇩🇪 tvipper.com	2026-08-17 15:05:18 UTC · (2 months ago)	Auto reported by IDS	Brute-Force
🇺🇸 jcbriar	2026-08-17 09:03:33 UTC · (2 months ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇪🇸 masterguru	2026-08-17 08:32:22 UTC · (2 months ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)	Hacking
🇺🇸 Power Ca	2026-08-17 08:27:29 UTC · (2 months ago)	136.85.102.239 - - [17/Aug/2026:08:27:27 +0000] "GET /z9x8c7v6b5-debug-trigger-leaderscartel.com HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected])" 136.85.102.239 - - [17/Aug/2026:08:27:27 +0000] "GET /config/ ... show more 136.85.102.239 - - [17/Aug/2026:08:27:27 +0000] "GET /z9x8c7v6b5-debug-trigger-leaderscartel.com HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected])" 136.85.102.239 - - [17/Aug/2026:08:27:27 +0000] "GET /config/secrets.yml HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected])" 136.85.102.239 - - [17/Aug/2026:08:27:27 +0000] "GET /rclone.conf HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected])" 136.85.102.239 - - [17/Aug/2026:08:27:27 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 136.85.102.239 - - [17/Aug/2026:08:27:27 +0000] "GET /dist/manifest.json HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 136.85.102.239 - - [17/Aug/2026:08:27:27 +0000] "GET /.vite/mani ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 07:59:50 UTC · (2 months ago)	(mod_security) mod_security (id:210730) triggered by 136.85.102.239 (239.102.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:59:45.274680 2026] [security2:error] [pid 23673:ti ... show more (mod_security) mod_security (id:210730) triggered by 136.85.102.239 (239.102.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:59:45.274680 2026] [security2:error] [pid 23673:tid 23673] [client 136.85.102.239:48970] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lanegraves.com\|F\|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lanegraves.com"] [uri "/rclone.conf"] [unique_id "aoK_cZUS-uX04N5VXPn0UgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-17 06:43:44 UTC · (2 months ago)	[MonAug1708:43:42.4229462026][security2:error][pid1188141:tid1188149][client136.85.102.239:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/. ... show more [MonAug1708:43:42.4229462026][security2:error][pid1188141:tid1188149][client136.85.102.239:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".com\"][severity\"ERROR\"][hostname\"laumeiconsulting.com\"][uri\"/z9x8c7v6b5-debug-trigger-laumeiconsulting.com\"][unique_id\"aoKtnhop2xb1F32wDdmH0gAAAEU\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 06:37:46 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 136.85.102.239 (239.102.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:37:41.969986 2026] [security2:error] [pid 4436:tid ... show more (mod_security) mod_security (id:210492) triggered by 136.85.102.239 (239.102.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:37:41.969986 2026] [security2:error] [pid 4436:tid 4436] [client 136.85.102.239:33000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakewyliehairsalon.com"] [uri "/docker/.env"] [unique_id "aoKsNQ2C16-td-0i46B-5AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vasile	2026-08-17 06:12:03 UTC · (2 months ago)	Shield Guard: Blocklist: IP signalée (blocklist_de) \| Honeypot: /.env.backup	Web App Attack
🇳🇱 Site.eu	2026-08-17 05:55:48 UTC · (2 months ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob	2026-08-17 05:39:16 UTC · (2 months ago)	Credential and secrets file probing \| req: /rclone.conf \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected]	Hacking Web App Attack
🇧🇷 Halux	2026-08-17 05:23:08 UTC · (2 months ago)	136.85.102.239 Probing protected path or service	Web App Attack

Showing 16 to 30 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.33

🇮🇷 185.112.150.97

🇨🇳 183.224.97.83

🇮🇩 163.7.15.194

🇸🇬 150.109.16.200

🇺🇸 54.224.195.248

🇺🇸 45.33.109.17

🇧🇪 34.22.173.23

🇺🇸 18.97.5.101

🇨🇳 1.13.9.242

🇺🇸 216.25.90.69

🇬🇧 193.163.125.67

🇦🇷 186.129.70.219

🇳🇱 185.218.86.10

🇳🇱 160.119.71.66

🇺🇸 158.94.187.158

🇨🇳 111.113.88.7

🇧🇩 103.159.2.113

🇷🇴 80.94.92.179

🇷🇺 37.77.150.82