AbuseIPDB » 136.85.21.252
136.85.21.252 was found in our database!
This IP was reported 10 times. Confidence of
Abuse
is 58% : ?
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
252.21.85.136.bc.googleusercontent.com
Domain Name
google.com
Country
๐ธ๐ฌ
Singapore
City
Singapore
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 136.85.21.252 :
This IP address has been reported a total of
10
times from
9 distinct
sources.
136.85.21.252 was first reported on
September 15th 2026 , and the most recent report was
11 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ง๐ช
taivas.nl
2026-09-16 04:32:48
(11 hours ago)
Many_bad_calls
Web App Attack
๐น๐ท
ycoskun41
2026-09-16 04:20:42
(12 hours ago)
fail2ban: plesk-modsecurity jail on genckocaeli.com
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-16 03:02:56
(13 hours ago)
20 attempts against mh-misbehave-ban on pf221113
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
taivas.nl
2026-09-15 23:32:08
(16 hours ago)
Bad_requests
Bad Web Bot
๐ช๐ธ
robotstxt
2026-09-15 22:46:44
(17 hours ago)
136.85.21.252 - - [15/Sep/2026:22:46:11 +0000] "GET /.env HTTP/1.1" 403 11769 "-" "Mozilla/5.0 (X11; ...
show more
136.85.21.252 - - [15/Sep/2026:22:46:11 +0000] "GET /.env HTTP/1.1" 403 11769 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="136.85.21.252"
136.85.21.252 - - [15/Sep/2026:22:46:12 +0000] "GET /.env.local HTTP/1.1" 403 11769 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="136.85.21.252"
136.85.21.252 - - [15/Sep/2026:22:46:13 +0000] "GET /.env.production HTTP/1.1" 403 11769 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="136.85.21.252"
136.85.21.252 - - [15/Sep/2026:22:46:14 +0000] "GET /.env.staging HTTP/1.1" 403 11769 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="136.85.21.252"
136.85.21.252 - - [15/Sep/2026:22:46:15 +0000] "GET /.env.development HTTP/1.1" 403 11769 "-" "Mozilla/5.0 (X11; Linux x86_64) Appl
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-15 19:44:08
(20 hours ago)
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.85.21.252 - - [15/Sep/2026:21:44:07 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-15 19:32:07
(20 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฎ๐น
VHosting
2026-09-15 16:40:04
(23 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-09-15 14:50:52
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-15 08:38:25
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.85.21.252 (252.21.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.21.252 (252.21.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 04:38:22.180689 2026] [security2:error] [pid 17293:tid 17293] [client 136.85.21.252:48388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eclipseespana.com"] [uri "/.git/config"] [unique_id "aqkD_hi9V_T8xkiGJI8rzgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: