JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.85.64.72

136.85.64.72 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 40%: ?

40%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	72.64.85.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.85.64.72

Whois 136.85.64.72

IP Abuse Reports for 136.85.64.72:

This IP address has been reported a total of 30 times from 14 distinct sources. 136.85.64.72 was first reported on September 20th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-09-30 18:59:35 (3 weeks ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇳🇱 Site.eu	2026-09-30 05:12:52 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 Catalin Negru	2026-09-28 21:06:05 (4 weeks ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇬🇧 consul.to	2026-09-28 06:04:05 (4 weeks ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-09-28 03:43:03 (4 weeks ago)	Bot / scanning and/or hacking attempts: GET /.env.uat HTTP/1.1, GET /.env.dist HTTP/1.1, GET /.env.r ... show more Bot / scanning and/or hacking attempts: GET /.env.uat HTTP/1.1, GET /.env.dist HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env1 HTTP/1.1, GET /api/.env HTTP/1.1, GET /app/.env HTTP/1.1, GET /web/.env HTTP/1.1, GET /.env~ HTTP/1.1, GET /.env_copy HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env2 HTTP/1.1, GET /.env.development HTTP/1.1, GET /public/.env HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.yml HTTP/1.1, GET /.env.txt HTTP/1.1, GET /.env.yaml HTTP/1.1, GET /apps/.env HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.json HTTP/1.1, GET /site/.env HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.backup HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-27 19:07:50 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 136.85.64.72 (72.64.85.136.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 136.85.64.72 (72.64.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 15:07:43.366826 2026] [security2:error] [pid 10824:tid 10824] [client 136.85.64.72:45174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sunnygolfvillas.com"] [uri "/.git/config"] [unique_id "arlpf2Z3j-OVfP1m6WsmjAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 xyz.rip	2026-09-27 14:07:58 (1 month ago)	WAF Violation ...	Hacking Web App Attack
🇳🇱 Site.eu	2026-09-27 07:51:02 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇧🇪 taivas.nl	2026-09-27 04:33:01 (1 month ago)	Many_bad_calls	Web App Attack
🇺🇸 TPI-Abuse	2026-09-26 15:03:14 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 136.85.64.72 (72.64.85.136.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 136.85.64.72 (72.64.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:03:10.371885 2026] [security2:error] [pid 3880:tid 3880] [client 136.85.64.72:33556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.networthbuilding.com"] [uri "/.git/config"] [unique_id "arferlWAriIRfKyHkgfSpQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-26 07:08:25 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 136.85.64.72 (72.64.85.136.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 136.85.64.72 (72.64.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 03:08:20.466680 2026] [security2:error] [pid 14773:tid 14773] [client 136.85.64.72:56678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alternative-security.com"] [uri "/.git/config"] [unique_id "ardvZMp86I_znfigvT05jAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-09-26 06:32:12 (1 month ago)	Bad_requests	Bad Web Bot
🇧🇪 taivas.nl	2026-09-26 06:02:17 (1 month ago)	Site scraper	Web App Attack
🇫🇷 Catalin Negru	2026-09-25 19:17:38 (1 month ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇫🇷 masterguru	2026-09-25 03:09:45 (1 month ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.164.103.49

🇺🇸 192.81.218.38

🇵🇹 95.94.205.12

🇩🇪 69.5.169.208

🇮🇳 59.98.148.5

🇧🇷 167.250.160.139

🇺🇸 157.245.251.34

🇩🇪 151.243.11.230

🇮🇩 139.255.254.163

🇺🇸 129.121.143.149

🇷🇺 94.241.52.43

🇺🇦 90.96.190.178

🇦🇺 58.6.164.89

🇺🇸 52.180.140.72

🇹🇿 41.59.17.54

🇨🇳 39.106.78.231

🇺🇸 34.85.241.128

🇺🇸 20.118.241.109

🇺🇸 4.150.201.26

🇳🇱 193.47.62.32