JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.85.73.157

136.85.73.157 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	157.73.85.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.85.73.157

Whois 136.85.73.157

IP Abuse Reports for 136.85.73.157:

This IP address has been reported a total of 38 times from 35 distinct sources. 136.85.73.157 was first reported on September 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-09-23 05:15:12 (1 day ago)	2573 attacks on PHP arg injection (type 2), directory traversals, PHP URLs, env grabbing URLs (type ... show more 2573 attacks on PHP arg injection (type 2), directory traversals, PHP URLs, env grabbing URLs (type 2), config grabbing URLs (type 2), password/key grabbing URLs, env grabbing URLs, VC URLs: GET /index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=file_get_contents&vars[1][]=.env HTTP/1.1 GET /..%2f..%2f.env HTTP/1.1 POST /icecoder/lib/terminal-xhr.php HTTP/1.1 GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1 GET /config/secrets.yml HTTP/1.1 GET /.ssh/id_rsa HTTP/1.1 GET /wp/.env HTTP/1.1 GET /.git/HEAD HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-09-23 04:07:02 (1 day ago)	Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice01,ice02,mx02,wa01,wa ... show more Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice01,ice02,mx02,wa01,wa02] show less	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇬🇧 Comberton	2026-09-23 01:16:18 (1 day ago)	Ban via by F2B interproj-org-access jail	Brute-Force
🇬🇧 bensmithurst	2026-09-23 00:20:25 (1 day ago)	136.85.73.157 - - [23/Sep/2026:00:20:23 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-" 136.85.73.1 ... show more 136.85.73.157 - - [23/Sep/2026:00:20:23 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-" 136.85.73.157 - - [23/Sep/2026:00:20:23 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-" 136.85.73.157 - - [23/Sep/2026:00:20:23 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 150 "-" "-" 136.85.73.157 - - [23/Sep/2026:00:20:24 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-" 136.85.73.157 - - [23/Sep/2026:00:20:24 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇬🇧 innovacommunications	2026-09-23 00:00:12 (1 day ago)	Reported from Imunify360 blocklist	Brute-Force SSH
🇬🇧 G4zabus3r	2026-09-22 19:00:40 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 136.85.73.157 (SG/Singapore/157.73.85.1 ... show more (mod_security) mod_security triggered on hostname [redacted] 136.85.73.157 (SG/Singapore/157.73.85.136.bc.googleusercontent.com) show less	SQL Injection
🇬🇧 Aetherweb Ark	2026-09-22 17:09:13 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 136.85.73.157 (SG/Singapore/157.73.85.136.bc.go ... show more (mod_security) mod_security (id:949110) triggered by 136.85.73.157 (SG/Singapore/157.73.85.136.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇫🇮 as211431.net	2026-09-22 17:04:53 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (POST method) Endpoint: /lib/terminal-xhr.php UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 D3monite	2026-09-22 16:42:38 (1 day ago)	Attempted Brute Force (APIService)	Brute-Force
🇬🇧 Swiptly	2026-09-22 16:21:20 (1 day ago)	Excessive 403/404/405 PHP/CMS errors from scanning or broken bots ...	Web App Attack
🇬🇧 Greg Poulson	2026-09-22 15:30:09 (2 days ago)	Our website was hit by this DDOS at a rate of 163 in 5 minutes.	DDoS Attack Web Spam Brute-Force
Anonymous	2026-09-22 15:21:17 (2 days ago)	136.85.73.157 - - [22/Sep/2026:15:21:13 +0000] "GET /config/env/aws_credentials.env HTTP/2.0" 302 78 ... show more 136.85.73.157 - - [22/Sep/2026:15:21:13 +0000] "GET /config/env/aws_credentials.env HTTP/2.0" 302 78 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" ... show less	Bad Web Bot Web App Attack
🇬🇧 threewalls.co.uk	2026-09-22 15:18:05 (2 days ago)	Triggered bot honeypot on gclproducts.co.uk	Fraud Orders FTP Brute-Force Brute-Force Exploited Host
🇬🇧 gws-hostmaster	2026-09-22 14:06:41 (2 days ago)	ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subreq ... show more ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shell Code Found;Restricted File Access Attempt;The Application Returned a 500-Level Status Code;URL file extension is restricted by policy; show less	Web App Attack
🇬🇧 Apache	2026-09-22 13:40:16 (2 days ago)	(mod_security) mod_security (id:911100) triggered by 136.85.73.157 (SG/Singapore/157.73.85.136.bc.go ... show more (mod_security) mod_security (id:911100) triggered by 136.85.73.157 (SG/Singapore/157.73.85.136.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.245.102.38

🇸🇬 97.74.87.152

🇺🇸 43.135.133.241

🇬🇧 35.203.210.22

🇭🇰 223.197.146.177

🇺🇦 194.44.90.139

🇺🇸 193.36.225.185

🇨🇱 190.171.165.205

🇰🇷 183.96.175.150

🇻🇳 103.154.62.14

🇺🇸 103.81.230.108

🇫🇷 91.196.152.127

🇹🇷 84.44.39.47

🇱🇹 62.60.130.253

🇦🇺 40.82.214.8

🇺🇸 35.163.99.88

🇺🇸 34.197.70.90

🇭🇰 223.17.1.118

🇧🇴 190.129.74.148

🇦🇷 181.110.248.52