JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.85.5.129

136.85.5.129 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	129.5.85.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.85.5.129

Whois 136.85.5.129

IP Abuse Reports for 136.85.5.129:

This IP address has been reported a total of 63 times from 53 distinct sources. 136.85.5.129 was first reported on September 16th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 rzk	2026-09-19 09:08:02 (8 hours ago)	CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-eve ... show more CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-event detection. ASN: GOOGLE-CLOUD-PLATFORM. Country: US. Timestamp: 2026-09-19T09:08:02+00:00. show less	Bad Web Bot Web App Attack
🇺🇸 zcampbell	2026-09-19 00:33:54 (16 hours ago)	Web vulnerability scanning: probing for exposed sensitive files (.ssh). Detected and blocked automat ... show more Web vulnerability scanning: probing for exposed sensitive files (.ssh). Detected and blocked automatically. show less	Web App Attack Bad Web Bot
🇳🇱 taivas.nl	2026-09-18 23:30:03 (17 hours ago)	General_bad_requests	Bad Web Bot
🇵🇱 Budyn	2026-09-18 17:34:50 (23 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.budyn.wtf \| URI: / \| UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36 EdgA/151.0.0.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇬🇧 sonot	2026-09-18 10:15:25 (1 day ago)	Blocked by UFW on tunneluk01 [8443/tcp] \| SPT: 38956 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [8443/tcp] \| SPT: 38956 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 rzk	2026-09-18 08:12:05 (1 day ago)	CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-eve ... show more CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-event detection. ASN: GOOGLE-CLOUD-PLATFORM. Country: US. Timestamp: 2026-09-18T08:12:05+00:00. show less	Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-09-18 07:40:05 (1 day ago)	136.85.5.129 - - [18/Sep/2026:09:40:04 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "DuckAssistBot ... show more 136.85.5.129 - - [18/Sep/2026:09:40:04 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" "pingusmc.org" ... show less	Brute-Force Web App Attack
Anonymous	2026-09-18 06:48:37 (1 day ago)	[Fri Sep 18 08:48:30.777205 2026] [authz_core:error] [pid 1116947:tid 1116947] [client 136.85.5.129: ... show more [Fri Sep 18 08:48:30.777205 2026] [authz_core:error] [pid 1116947:tid 1116947] [client 136.85.5.129:45852] AH01630: client denied by server configuration: /var/www/html/wordpress/server-status [Fri Sep 18 08:48:36.191054 2026] [authz_core:error] [pid 1210943:tid 1210943] [client 136.85.5.129:44740] AH01630: client denied by server configuration: /var/www/html/wordpress/.htpasswd ... show less	Hacking Brute-Force
🇮🇹 CoreTech srl	2026-09-18 05:54:57 (1 day ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact	Hacking
🇩🇪 Skyrider	2026-09-18 04:22:58 (1 day ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-09-18 02:51:07 (1 day ago)	Accessed trap at '/docker-compose.yml'	Web App Attack
🇮🇩 sockominfo	2026-09-18 02:00:19 (1 day ago)	Active Response: IP 136.85.5.129 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Repo ... show more Active Response: IP 136.85.5.129 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-09-18 01:11:17 (1 day ago)	[18/Sep/2026:04:11:16 +0300] -- 136.85.5.129 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /@ ... show more [18/Sep/2026:04:11:16 +0300] -- 136.85.5.129 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /@fs/app/.env?raw?? HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-09-17 22:15:55 (1 day ago)		Brute-Force Web App Attack
🇩🇪 Ilop	2026-09-17 20:00:13 (1 day ago)	[hp-100] 172 unsolicited packets to honeypot ports 443,80 (OCI DShield sensor)	Port Scan

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 201.79.7.16

🇧🇷 189.125.111.177

🇮🇷 188.212.247.177

🇺🇸 138.2.225.106

🇸🇬 121.6.195.67

🇨🇳 115.190.235.8

🇧🇬 109.160.32.201

🇺🇦 89.251.170.176

🇺🇸 40.76.224.85

🇨🇭 31.7.57.58

🇺🇸 3.88.203.46

🇺🇸 209.163.105.2

🇨🇳 180.76.236.214

🇨🇦 144.217.13.134

🇨🇳 94.231.206.1

🇮🇩 69.5.23.222

🇧🇪 34.22.222.15

🇺🇸 3.87.196.69

🇷🇺 195.239.97.254

🇬🇧 195.96.139.133