JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.92.4.2

Recent Activity

Abuse confidence score ?

100% Critical

21 reports

20 reporters · latest 4 minutes ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	2.4.92.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 136.92.4.2

Export CSV

This IP address has been reported a total of 21 times from 20 distinct sources. 136.92.4.2 was first reported on October 25th 2026, and the most recent report was 4 minutes ago. In the last 60 days, the top reporter locations were: Germany with 4 reports; France with 2 reports; Italy with 2 reports. The most common categories in these recent reports were: Web App Attack 16 times; Bad Web Bot 8 times; Brute-Force 6 times; Web Spam 2 times; Hacking 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 ki3	2026-10-26 21:35:20 (4 minutes ago)	Fail2Ban: Web App Attacks and Forum Spam 136.92.4.2 1793050520.0(JST)	Web Spam Bad Web Bot Web App Attack
Anonymous	2026-10-26 20:02:07 (1 hour ago)	IP matched detection query Detection of too many failed responses.	Brute-Force Bad Web Bot Hacking
🇩🇪 NewWavesApp	2026-10-26 19:44:12 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted] 136.92.4.2 (DE/Germany/2.4.92.136.bc.go ... show more (mod_security) mod_security triggered on hostname [redacted] 136.92.4.2 (DE/Germany/2.4.92.136.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇯🇵 ki3	2026-10-26 19:23:20 (2 hours ago)	Fail2Ban: Web App Attacks and Forum Spam 136.92.4.2 1793042599.0(JST)	Web Spam Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-10-26 12:03:57 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 kkw	2026-10-26 09:21:25 (12 hours ago)	[REDACTED] 136.92.4.2 - - [26/Oct/2026:10:21:25 +0100] "GET /.env?import&url&inline HTTP/2.0" 301 44 ... show more [REDACTED] 136.92.4.2 - - [26/Oct/2026:10:21:25 +0100] "GET /.env?import&url&inline HTTP/2.0" 301 441 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
🇵🇱 wHosts	2026-10-26 08:50:19 (12 hours ago)	Blocked by Fail2Ban	Web App Attack
Anonymous	2026-10-26 08:01:07 (13 hours ago)	Hit honeypot r.	Port Scan Hacking Exploited Host
🇩🇪 ghostwarriors	2026-10-26 03:20:11 (18 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-10-26 03:08:17 (18 hours ago)	136.92.4.2 - - [26/Oct/2026:04:08:15 +0100] "GET /settings/developer HTTP/2.0" 404 299 "-" "Mozilla/ ... show more 136.92.4.2 - - [26/Oct/2026:04:08:15 +0100] "GET /settings/developer HTTP/2.0" 404 299 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 136.92.4.2 - - [26/Oct/2026:04:08:15 +0100] "GET /settings/notifications HTTP/2.0" 404 299 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 136.92.4.2 - - [26/Oct/2026:04:08:15 +0100] "GET /catalog HTTP/2.0" 404 299 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 136.92.4.2 - - [26/Oct/2026:04:08:15 +0100] "GET /records HTTP/2.0" 404 299 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 136.92.4.2 - - [26/Oct/2026:04:08:15 +0100] "GET /settings/integrations HTTP/2.0" 404 299 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like show less	Bad Web Bot
🇲🇾 Rizzy	2026-10-26 02:10:21 (19 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 02:04:57 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 136.92.4.2 (2.4.92.136.bc.googleusercontent.com ... show more (mod_security) mod_security (id:210492) triggered by 136.92.4.2 (2.4.92.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 22:04:51.698842 2026] [security2:error] [pid 4856:tid 4856] [client 136.92.4.2:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gregquinn.com"] [uri "/.htpasswd"] [unique_id "at61Q-rc7j_pUkwfU8q61QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇫 www.gregorymariani.com	2026-10-26 02:00:48 (19 hours ago)		Web App Attack
🇮🇹 VHosting	2026-10-25 22:30:04 (23 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-10-25 22:21:30 (23 hours ago)	[Sun Oct 25 18:21:28.732249 2026] [authz_core:error] [pid 870099:tid 140230212220672] [client 136.92 ... show more [Sun Oct 25 18:21:28.732249 2026] [authz_core:error] [pid 870099:tid 140230212220672] [client 136.92.4.2:0] AH01630: client denied by server configuration: /var/www/vhosts/greenvillegal.com/httpdocs/serviceAccountKey.json [Sun Oct 25 18:21:29.628528 2026] [authz_core:error] [pid 870374:tid 140230312933120] [client 136.92.4.2:0] AH01630: client denied by server configuration: /var/www/vhosts/greenvillegal.com/httpdocs/netlify.toml [Sun Oct 25 18:21:29.629907 2026] [authz_core:error] [pid 870099:tid 140230195435264] [client 136.92.4.2:0] AH01630: client denied by server configuration: /var/www/vhosts/greenvillegal.com/httpdocs/.changeset [Sun Oct 25 18:21:29.630380 2026] [authz_core:error] [pid 870099:tid 140230254184192] [client 136.92.4.2:0] AH01630: client denied by server configuration: /var/www/vhosts/greenvillegal.com/httpdocs/wrangler.toml [Sun Oct 25 18:21:30.118193 2026] [authz_core:error] [pid 869959:tid 140230304540416] [client 136.92.4.2:0] AH01630: client denied by server co ... show less	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.92.155.93

🇫🇮 147.185.133.59

🇦🇺 198.251.85.244

🇳🇱 192.42.116.111

🇷🇴 92.118.39.58

🇨🇦 54.39.89.50

🇮🇳 27.7.23.8

🇷🇴 2.57.122.150

🇦🇷 181.228.80.171

🇮🇳 135.235.138.43

🇧🇧 200.50.67.106

🇦🇷 181.46.71.68

🇳🇱 167.71.75.206

🇺🇸 147.90.234.22

🇫🇷 143.244.57.84

🇻🇳 103.153.65.59

🇧🇪 79.127.164.183

🇱🇹 77.90.185.94

🇺🇸 45.42.88.54

🇺🇸 45.41.86.226