This IP address has been reported a total of
95
times from
75 distinct
sources.
136.85.82.40 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Sat Oct 17 16:06:28.156056 2026] [authz_core:error] [pid 50824:tid 50824] [client 136.85.82.40:4987 ...
show more[Sat Oct 17 16:06:28.156056 2026] [authz_core:error] [pid 50824:tid 50824] [client 136.85.82.40:49872] AH01630: client denied by server configuration: /var/www/internal/.htpasswd
...
show less
[SatOct1703:37:14.0523642026][security2:error][pid929628:tid929655][client136.85.82.40:0]ModSecurity ...
show more[SatOct1703:37:14.0523642026][security2:error][pid929628:tid929655][client136.85.82.40:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".com\"][severity\"ERROR\"][hostname\"comarcosa.com\"][uri\"/z9x8c7v6b5-debug-trigger-comarcosa.com\"][unique_id\"atLRSrSwWcQApkVQtSBMEgAAABI\"]
show less
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000- ...
show moreBAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000-135)
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-15.
show less
Web App Attack
SSH
Hacking
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 136.85.82.40 (SG/Singapore/40.82.85.136 ...
show more(mod_security) mod_security triggered on hostname [redacted] 136.85.82.40 (SG/Singapore/40.82.85.136.bc.googleusercontent.com)
show less
SQL Injection
Showing 1 to
15
of 95 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ