JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.85.38.153

Recent Activity

Abuse confidence score ?

100% Critical

59 reports

49 reporters · latest 11 hours ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	153.38.85.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 136.85.38.153

Export CSV

This IP address has been reported a total of 59 times from 49 distinct sources. 136.85.38.153 was first reported on October 7th 2026, and the most recent report was 11 hours ago. In the last 60 days, the top reporter locations were: Germany with 9 reports; United States of America with 7 reports; United Kingdom of Great Britain and Northern Ireland with 5 reports. The most common categories in these recent reports were: Web App Attack 44 times; Bad Web Bot 17 times; Brute-Force 15 times; Hacking 10 times; Port Scan 4 times; Other 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-10-11 03:09:20 (11 hours ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 136.85.38.153 172.70.93.103 - - [07/Oct/2026:14:53:54 -03 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 136.85.38.153 172.70.93.103 - - [07/Oct/2026:14:53:54 -0300] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 404 414 136.85.38.153 172.70.93.103 - - [07/Oct/2026:14:53:55 -0300] "GET /cache/original/%2e%2e/.env HTTP/1.1" 404 414 136.85.38.153 172.70.93.102 - - [07/Oct/2026:14:53:55 -0300] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 404 414 136.85.38.153 172.70.93.103 - - [07/Oct/2026:14:53:55 -0300] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-10-09 03:09:40 (2 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 136.85.38.153 172.70.93.103 - - [07/Oct/2026:14:53:54 -03 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 136.85.38.153 172.70.93.103 - - [07/Oct/2026:14:53:54 -0300] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 404 414 136.85.38.153 172.70.93.103 - - [07/Oct/2026:14:53:55 -0300] "GET /cache/original/%2e%2e/.env HTTP/1.1" 404 414 136.85.38.153 172.70.93.102 - - [07/Oct/2026:14:53:55 -0300] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 404 414 136.85.38.153 172.70.93.103 - - [07/Oct/2026:14:53:55 -0300] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇪🇸 el-brujo	2026-10-08 05:07:55 (3 days ago)	08/Oct/2026:07:07:55.375713 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 08/Oct/2026:07:07:55.375713 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 136.85.38.153] ModSecurity: Warning. Pattern match "(?i)(?:\\\\\\\\x5c\|(?:%(?:c(?:0%(?:[2aq]f\|5c\|9v)\|1%(?:[19p]c\|8s\|af))\|2(?:5(?:c(?:0%25af\|1%259c)\|2f\|5c)\|%46\|f)\|(?:(?:f(?:8%8)?0%8\|e)0%80%a\|bg%q)f\|%3(?:2(?:%(?:%6\|4)6\|F)\|5%%63)\|u(?:221[56]\|002f\|EFC8\|F025)\|1u\|5c)\|0x(?:2f\|5c)\|\\\\\\\\/))(?:%(?:(?:f(?:(?:c%80\|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "48"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [hostname "grafana.elhacker.net"] [uri "/api/proc/self/environ"] [uniqu ... show less	Hacking Web App Attack
🇧🇪 taivas.nl	2026-10-08 04:33:06 (3 days ago)	Many_bad_calls	Web App Attack
🇲🇽 octageeks.com	2026-10-08 04:18:32 (3 days ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-10-07 23:48:48 (3 days ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇬🇧 Marten Mark	2026-10-07 22:28:16 (3 days ago)	136.85.38.153 - - [07/Oct/2026:22:28:14 +0000] "POST /lib/terminal-xhr.php HTTP/2.0" 404 110 "-" "Mo ... show more 136.85.38.153 - - [07/Oct/2026:22:28:14 +0000] "POST /lib/terminal-xhr.php HTTP/2.0" 404 110 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 136.85.38.153 - - [07/Oct/2026:22:28:15 +0000] "GET /yf8orhi06sndjctybt8x HTTP/2.0" 404 5333 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 136.85.38.153 - - [07/Oct/2026:22:28:15 +0000] "GET /yf8orhi06sndjctybt8x HTTP/2.0" 404 5333 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 136.85.38.153 - - [07/Oct/2026:22:28:15 +0000] "GET /z9x8c7v6b5-debug-trigger-blog.cfi.co HTTP/2.0" 404 5333 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 136.85.38.153 - - [07/Oct/2026:22:28:15 +0000] "GET /z9x8c7v6b5-debug-trigger-blog.cfi.co HTTP/2.0" 404 5333 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 136.85.38.153 - - [07/Oct/2026:22:28:15 +0000] "GET /dist/manifest.json HTTP/2.0" 404 5333 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, li ... show less	Port Scan Web App Attack
🇧🇷 radardatelecom	2026-10-07 22:27:02 (3 days ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-10-07 22:15:49 (3 days ago)		Brute-Force Web App Attack
Anonymous	2026-10-07 21:20:03 (3 days ago)	\| Common web attack.	Web App Attack Hacking SQL Injection
🇺🇦 URAN Publishing Service	2026-10-07 21:10:52 (3 days ago)	[08/Oct/2026:00:10:52 +0300] -- 136.85.38.153 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET / ... show more [08/Oct/2026:00:10:52 +0300] -- 136.85.38.153 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /static/manifest.json HTTP/1.1 show less	Bad Web Bot Web App Attack
🇩🇪 on-com	2026-10-07 20:58:13 (3 days ago)	URL scan	Brute-Force Web App Attack
🇸🇬 khairilgunawan	2026-10-07 20:41:37 (3 days ago)	ZonaKuota Sentinel: Malicious automated scanner/exploit probe trapped. Blocked.	Web App Attack Bad Web Bot
Anonymous	2026-10-07 20:39:44 (3 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇬🇧 threewalls.co.uk	2026-10-07 19:44:02 (3 days ago)	Triggered bot honeypot on thegardenrange.co.uk. Ignored nofollow and disallow directives.	Fraud Orders FTP Brute-Force Brute-Force Exploited Host

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 23.234.99.253

🇫🇷 213.199.46.212

🇸🇬 152.69.221.133

🇧🇩 103.228.1.187

🇻🇳 103.154.63.62

🇳🇱 77.239.124.42

🇳🇱 77.91.71.91

🇨🇳 58.242.117.43

🇬🇧 31.14.254.108

🇺🇸 23.234.99.218

🇬🇧 193.32.209.251

🇦🇷 181.20.191.75

🇯🇵 172.70.49.31

🇸🇬 161.118.217.95

🇨🇳 120.211.32.165

🇺🇸 65.49.1.52

🇺🇸 23.234.99.189

🇷🇴 2.57.122.76

🇹🇭 1.2.239.151

🇺🇸 2604:a880:400:d1:0:5:2643:7001