JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.92.3.158

136.92.3.158 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 48%: ?

48%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	158.3.92.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.92.3.158

Whois 136.92.3.158

IP Abuse Reports for 136.92.3.158:

This IP address has been reported a total of 14 times from 14 distinct sources. 136.92.3.158 was first reported on September 19th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jormaster3k	2026-10-26 08:08:43 (19 hours ago)	Attack against Apache (too many 404s)	Web App Attack
Anonymous	2026-10-25 16:17:08 (1 day ago)	[Sun Oct 25 16:17:07.534966 2026] [authz_core:error] [pid 2154737:tid 2154737] [client 136.92.3.158: ... show more [Sun Oct 25 16:17:07.534966 2026] [authz_core:error] [pid 2154737:tid 2154737] [client 136.92.3.158:34798] AH01630: client denied by server configuration: /var/www/html/ [Sun Oct 25 16:17:07.599175 2026] [authz_core:error] [pid 2154852:tid 2154852] [client 136.92.3.158:34814] AH01630: client denied by server configuration: /var/www/html/.local [Sun Oct 25 16:17:07.601796 2026] [authz_core:error] [pid 2153216:tid 2153216] [client 136.92.3.158:34802] AH01630: client denied by server configuration: /var/www/html/.credentials.json [Sun Oct 25 16:17:07.604745 2026] [authz_core:error] [pid 2153171:tid 2153171] [client 136.92.3.158:34826] AH01630: client denied by server configuration: /var/www/html/.codex [Sun Oct 25 16:17:07.605119 2026] [authz_core:error] [pid 2153188:tid 2153188] [client 136.92.3.158:34812] AH01630: client denied by server configuration: /var/www/html/.claude ... show less	Brute-Force
🇮🇪 AutosOnShow	2026-10-25 01:33:05 (2 days ago)	blocked for webapp attack \| path requested: /.git-credentials \| seen at 2026-10-25 01:32:17.478 \|	Web App Attack
🇩🇪 zerodaysystemde	2026-10-18 10:43:59 (1 week ago)	Port (80 tcp) Scanner - WEB - HoneyPot	Port Scan
🇺🇸 robotstxt	2026-09-30 04:08:58 (3 weeks ago)	136.92.3.158 - - [30/Sep/2026:04:08:55 +0000] "GET /auth.json HTTP/1.1" 400 291 "-" "opendirme-credh ... show more 136.92.3.158 - - [30/Sep/2026:04:08:55 +0000] "GET /auth.json HTTP/1.1" 400 291 "-" "opendirme-credhunt/gen2+2026.09.23-credhunt-gen2" "-" edge="136.92.3.158" 136.92.3.158 - - [30/Sep/2026:04:08:55 +0000] "GET /.grok/auth.json HTTP/1.1" 400 291 "-" "opendirme-credhunt/gen2+2026.09.23-credhunt-gen2" "-" edge="136.92.3.158" 136.92.3.158 - - [30/Sep/2026:04:08:55 +0000] "GET /.env HTTP/1.1" 400 291 "-" "opendirme-credhunt/gen2+2026.09.23-credhunt-gen2" "-" edge="136.92.3.158" 136.92.3.158 - - [30/Sep/2026:04:08:55 +0000] "GET /.hermes/.env HTTP/1.1" 400 291 "-" "opendirme-credhunt/gen2+2026.09.23-credhunt-gen2" "-" edge="136.92.3.158" 136.92.3.158 - - [30/Sep/2026:04:08:55 +0000] "GET /.openclaw/openclaw.json HTTP/1.1" 400 291 "-" "opendirme-credhunt/gen2+2026.09.23-credhunt-gen2" "-" edge="136.92.3.158" ... show less	Web Spam Web App Attack
🇮🇹 abuseiphack	2026-09-28 11:50:35 (4 weeks ago)	Automatic report for brute force attack	Bad Web Bot
🇩🇪 NewGastroline	2026-09-25 06:13:59 (1 month ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇫🇷 pm33	2026-09-20 23:19:08 (1 month ago)	Unauthorized connections HTTP 403	Web App Attack
🇩🇪 auridh	2026-09-19 16:53:51 (1 month ago)	Ip 136.92.3.158 performed 'crowdsecurity/http-probing' (11 events over 5.891093ms) at 2026-09-19 16: ... show more Ip 136.92.3.158 performed 'crowdsecurity/http-probing' (11 events over 5.891093ms) at 2026-09-19 16:53:51.378674977 +0000 UTC show less	Web App Attack
Anonymous	2026-09-19 15:42:17 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 Melle	2026-09-19 15:26:13 (1 month ago)	Blocked by CrowdSec \| Scenario: crowdsecurity/http-probing \| 136.92.3.158 triggered 11 events \| Dete ... show more Blocked by CrowdSec \| Scenario: crowdsecurity/http-probing \| 136.92.3.158 triggered 11 events \| Detected: 2026-09-19T15:26:12.106445321Z show less	Web App Attack Hacking
🇩🇪 dinginess6354	2026-09-19 13:02:10 (1 month ago)	Unauthorized Access Attempt	Port Scan Hacking Web App Attack
🇩🇪 firestorm	2026-09-19 11:36:08 (1 month ago)	136.92.3.158 - - [19/Sep/2026:13:36:07 +0200] "\x16\x03\x01\x05\xCC\x01\x00\x05\xC8\x03\x03\xF5\xAA\ ... show more 136.92.3.158 - - [19/Sep/2026:13:36:07 +0200] "\x16\x03\x01\x05\xCC\x01\x00\x05\xC8\x03\x03\xF5\xAA\x85\xD9b\x13(+\xE6\xD7\xAB?\x119e\xCF\xF1\x05%K]\x8D}\xD1M\xAB\xD9k\xA0\xE4\xCBr 7J0\x81PM\xF9\x1A3\x83\xB16\xA4\xD9p\xB6\x0E\xBD\xB9GC\xFD\xD1\xF9}\xB3\xB7\xEF\xB7X" 400 150 "-" "-" 136.92.3.158 - - [19/Sep/2026:13:36:07 +0200] "\x16\x03\x01\x05\xCC\x01\x00\x05\xC8\x03\x03y\x13\x5CFv\xE8\x19\x96w@\xCE\xF4\|rL\x9E\xBE\xEB\x5Ca\xD6\xEE\x82\x93\xDB\x93\xB2L\xDB\xFC\xC4^ X\x89\xC8\x1F\x049\x09\xCCs`\x1B\x8E\xD28\xE8\x84\x8E'\xD3r!\x1E\x88\xB2\x05w\xBE!\xD3\x82\x89\xD9\x00 \xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x13\xC0\x14\x00\x9C\x00\x9D\x00/\x005\x00" 400 150 "-" "-" 136.92.3.158 - - [19/Sep/2026:13:36:07 +0200] "\x16\x03\x01\x05\xCC\x01\x00\x05\xC8\x03\x03\x82r\xC3\xB7\xEC\xFA\xDAZ\xBA\xF1\xFDx\xEE\xD1\x95\x97\x88\x06\xAE\x8B\xB7\x16\x22\xCF\xDB\xF7\x7F\x00_\xD4\xBF\x9D \x0F1\xDF\xE6\x0FH\xE3>\x835\xEAm\xEF\x90\x94:\x8E^\x9C\x07^\xE9\x9E\xAF\xEC\x0Bc\xB6\x12\xB4G\x0B\x00 \xC0+\xC0/\xC0,\ ... show less	Brute-Force Web App Attack
🇫🇷 guillaume illien	2026-09-19 05:09:33 (1 month ago)	136.92.3.158 - - [19/Sep/2026:05:09:32 +0000] "GET /auth.json HTTP/1.1" 301 178 "-" "opendirme-credh ... show more 136.92.3.158 - - [19/Sep/2026:05:09:32 +0000] "GET /auth.json HTTP/1.1" 301 178 "-" "opendirme-credhunt/1.0" 136.92.3.158 - - [19/Sep/2026:05:09:32 +0000] "GET /.env HTTP/1.1" 301 178 "-" "opendirme-credhunt/1.0" 136.92.3.158 - - [19/Sep/2026:05:09:32 +0000] "GET /.openclaw/.env HTTP/1.1" 301 178 "-" "opendirme-credhunt/1.0" 136.92.3.158 - - [19/Sep/2026:05:09:32 +0000] "GET /.hermes/.env HTTP/1.1" 301 178 "-" "opendirme-credhunt/1.0" 136.92.3.158 - - [19/Sep/2026:05:09:32 +0000] "GET /.grok/auth.json HTTP/1.1" 301 178 "-" "opendirme-credhunt/1.0" 136.92.3.158 - - [19/Sep/2026:05:09:32 +0000] "GET /.git/config HTTP/1.1" 301 178 "-" "opendirme-credhunt/1.0" 136.92.3.158 - - [19/Sep/2026:05:09:32 +0000] "GET /.openclaw/openclaw.json HTTP/1.1" 301 178 "-" "opendirme-credhunt/1.0" ... show less	Hacking Brute-Force Web App Attack SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 203.192.232.180

🇺🇸 198.23.188.2

🇲🇾 195.86.192.66

🇧🇷 187.63.85.141

🇲🇽 177.231.78.145

🇺🇸 172.200.195.165

🇸🇪 171.25.158.171

🇺🇸 85.203.54.197

🇵🇹 83.144.175.166

🇺🇸 82.22.216.136

🇨🇳 36.33.167.165

🇧🇪 34.78.213.249

🇺🇸 23.139.36.16

🇺🇸 216.73.217.7

🇵🇸 213.6.38.218

🇻🇳 210.245.30.140

🇳🇱 195.178.110.247

🇲🇽 187.134.157.128

🇺🇸 129.121.143.242

🇬🇧 87.106.65.126