JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.85.18.198

136.85.18.198 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	198.18.85.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.85.18.198

Whois 136.85.18.198

IP Abuse Reports for 136.85.18.198:

This IP address has been reported a total of 25 times from 19 distinct sources. 136.85.18.198 was first reported on August 31st 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-09-02 14:20:01 (12 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-02 06:57:14 (19 hours ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Marc	2026-09-02 06:43:32 (19 hours ago)	136.85.18.198 - - [02/Sep/2026:08:43:31 +0200] "GET /public/.git/config HTTP/1.1" 404 4617 "-" "crus ... show more 136.85.18.198 - - [02/Sep/2026:08:43:31 +0200] "GET /public/.git/config HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 136.85.18.198 - - [02/Sep/2026:08:43:32 +0200] "GET /var/www/.git/config HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 136.85.18.198 - - [02/Sep/2026:08:43:32 +0200] "GET /.git/config HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" show less	Brute-Force
Anonymous	2026-09-02 05:51:18 (20 hours ago)	Web scanner: GET /www/.git/config	Web App Attack Hacking
🇩🇪 XICTRON	2026-09-02 05:35:05 (20 hours ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 05:16:14 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.85.18.198 (198.18.85.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.85.18.198 (198.18.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:16:07.526582 2026] [security2:error] [pid 884:tid 884] [client 136.85.18.198:53012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.homecareelite.com"] [uri "/backend/.git/config"] [unique_id "apexF8R4wLdfn1cmMOWdwgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-09-02 04:54:28 (21 hours ago)	(mod_security) mod_security (id:949110) triggered by 136.85.18.198 (SG/Singapore/198.18.85.136.bc.go ... show more (mod_security) mod_security (id:949110) triggered by 136.85.18.198 (SG/Singapore/198.18.85.136.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇫🇷 dynamix	2026-09-02 03:56:14 (22 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 03:17:26 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.85.18.198 (198.18.85.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.85.18.198 (198.18.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:17:20.362310 2026] [security2:error] [pid 26690:tid 26690] [client 136.85.18.198:36030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "diary.kleens-uk.com"] [uri "/site/.git/config"] [unique_id "apeVQDK4N-yGSDtwq_olJQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-09-02 00:47:06 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇩🇪 raph	2026-09-02 00:38:36 (1 day ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 00:36:32 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 136.85.18.198 (198.18.85.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.85.18.198 (198.18.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:36:26.451247 2026] [security2:error] [pid 26987:tid 27066] [client 136.85.18.198:59860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giorgiogranozio.com"] [uri "/src/.git/config"] [unique_id "apdvir2JCLbAavCZVSki8gAAAVE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kommunos	2026-09-02 00:03:03 (1 day ago)	/.git/config	Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-01 22:00:44 (1 day ago)	Auto-ban: >3000 req/min op 2026-09-01	Web App Attack SSH Hacking
🇵🇱 lns.bz	2026-09-01 20:49:03 (1 day ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 217.196.26.102

🇦🇷 190.211.154.252

🇧🇷 177.12.139.59

🇺🇸 165.154.163.115

🇰🇷 211.56.131.201

🇩🇪 167.94.146.33

🇸🇪 158.174.210.161

🇻🇳 103.186.101.231

🇺🇸 74.126.139.179

🇺🇸 64.62.156.73

🇧🇪 34.76.225.250

🇨🇳 182.46.139.6

🇸🇬 168.144.104.56

🇺🇸 91.230.168.241

🇮🇳 65.254.81.69

🇨🇳 59.63.166.81

🇷🇺 46.188.119.26

🇸🇬 43.163.1.6

🇦🇺 27.32.245.98

🇺🇸 24.144.93.122