This IP address has been reported a total of
40
times from
35 distinct
sources.
136.92.28.63 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 13
reports;
France
with 5
reports;
United Kingdom of Great Britain and Northern Ireland
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
29
times;
Bad Web Bot
10
times;
Brute-Force
8
times;
Port Scan
4
times;
Hacking
4
times;
Other
9
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Banned by fail2ban (apache-modsecurity, 3 hits) [msg "Next.js middleware-bypass probe blocked (CVE-2 ...
show moreBanned by fail2ban (apache-modsecurity, 3 hits) [msg "Next.js middleware-bypass probe blocked (CVE-2025-29927, no Next.js apps on this server)"]
show less
(mod_security) mod_security triggered on hostname [redacted] 136.92.28.63 (DE/Germany/63.28.92.136.b ...
show more(mod_security) mod_security triggered on hostname [redacted] 136.92.28.63 (DE/Germany/63.28.92.136.bc.googleusercontent.com)
show less
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ...
show moreCrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-10-23T19:25:35.666115072Z. Context: http_status=200, http_status=404
show less
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/2 (POST metho ...
show moreTriggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /admin
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Observed automated probing of web application/configuration paths over completed HTTP requests. UTC ...
show moreObserved automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-10-23T18:15:01.380000+00:00 to 2026-10-23T18:15:02.109000+00:00: 10 distinct paths in 0.729s, denied HTTP 404. Trusted client-IP processing; forwarding headers accepted only from official configured Cloudflare networks. No successful compromise established. Examples: /dist/manifest.json, /dist/.env, /.env.supabase, /secrets.json, /build/.env, /.aws/config, /.aws/credentials, /docker/.env, /frontend/.env, /core/.env.
show less
