JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

136.92.44.234

Recent Activity

Abuse confidence score ?

89% Critical

31 reports

18 reporters · latest 6 days ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	234.44.92.136.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 136.92.44.234

Export CSV

This IP address has been reported a total of 31 times from 18 distinct sources. 136.92.44.234 was first reported on October 2nd 2026, and the most recent report was 6 days ago. In the last 60 days, the top reporter locations were: United States of America with 12 reports; Germany with 5 reports; Netherlands with 4 reports. The most common categories in these recent reports were: Web App Attack 26 times; Brute-Force 18 times; Bad Web Bot 15 times; Hacking 7 times; Port Scan 4 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 updown.io	2026-10-03 07:43:24 (6 days ago)	{"level":"info","ts":1791013401.6031268,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1791013401.6031268,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.92.44.234","remote_port":"53456","client_ip":"136.92.44.234","proto":"HTTP/2.0","method":"GET","host":"status.dealdrop.com","uri":"/rclone.conf","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36"],"Accept":["/"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.dealdrop.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.00083018,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1791013401.6039596,"logger":" ... show less	DDoS Attack Web App Attack
🇬🇧 Apache	2026-10-03 07:15:51 (6 days ago)	(mod_security) mod_security (id:218420) triggered by 136.92.44.234 (DE/Germany/234.44.92.136.bc.goog ... show more (mod_security) mod_security (id:218420) triggered by 136.92.44.234 (DE/Germany/234.44.92.136.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-03 06:10:46 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 136.92.44.234 (234.44.92.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.92.44.234 (234.44.92.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 02:10:38.888953 2026] [security2:error] [pid 22418:tid 22418] [client 136.92.44.234:55686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.zacharypowers.com"] [uri "/.htpasswd"] [unique_id "asCcXskpRfFP5myHp45NAgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 itsolon	2026-10-03 01:55:33 (6 days ago)	[03/Oct/2026:03:55:33 +0200] 17909925331.057660 136.92.44.234 53428 217.154.7.177 443 [03/Oct/2026:0 ... show more [03/Oct/2026:03:55:33 +0200] 17909925331.057660 136.92.44.234 53428 217.154.7.177 443 [03/Oct/2026:03:55:33 +0200] 179099253315.960246 136.92.44.234 53428 217.154.7.177 443 [03/Oct/2026:03:55:33 +0200] 179099253391.222175 136.92.44.234 53428 217.154.7.177 443 [03/Oct/2026:03:55:33 +0200] 179099253378.184738 136.92.44.234 53428 217.154.7.177 443 [03/Oct/2026:03:55:33 +0200] 179099253313.472437 136.92.44.234 53428 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇧🇪 cmbplf	2026-10-03 01:44:07 (6 days ago)	179 requests with url.path /@fs/	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-03 00:51:44 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 136.92.44.234 (234.44.92.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.92.44.234 (234.44.92.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 20:51:37.952125 2026] [security2:error] [pid 5222:tid 5222] [client 136.92.44.234:40980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.zoesaadeh.com"] [uri "/.env.development"] [unique_id "asBRmYnbUKGk3Sg3_7nApQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-03 00:12:16 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 136.92.44.234 (234.44.92.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 136.92.44.234 (234.44.92.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 20:12:09.924924 2026] [security2:error] [pid 16918:tid 16918] [client 136.92.44.234:48842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.z-mgmt.com"] [uri "/build../.env"] [unique_id "asBIWSOq1vzc5HCgfRBecwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-10-02 19:41:03 (6 days ago)	Web scanning / probing for vulnerable paths \| URL: /document.php?modulepart=systemtools&file=../conf ... show more Web scanning / probing for vulnerable paths \| URL: /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared \| Evidence: www.zaviturviajes.com 136.92.44.234 - - [02/Oct/2026:21:39:52 +0200] \"GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1\" 403 214 \"-\" \"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)\" GEOIP_COUNTRY_CODE=DE \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: US show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-10-02 19:37:47 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 136.92.44.234 (234.44.92.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 136.92.44.234 (234.44.92.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 15:37:41.695192 2026] [security2:error] [pid 1959:tid 1959] [client 136.92.44.234:54606] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.zoticus.com\|F\|2"] [data ".zoticus.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.zoticus.com"] [uri "/z9x8c7v6b5-debug-trigger-www.zoticus.com"] [unique_id "asAIBQhWw3P_8W3PBHDG2QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-02 18:59:55 (6 days ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193) show less	Hacking
🇳🇱 Alt255	2026-10-02 18:20:15 (6 days ago)	[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.92.44.234 - - [02/Oct/2026:20:20:01 +0200] "GET /.ssh/config HTTP/2.0" 403 346 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-02 17:37:11 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 136.92.44.234 (234.44.92.136.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 136.92.44.234 (234.44.92.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 13:37:00.661688 2026] [security2:error] [pid 5206:tid 5274] [client 136.92.44.234:43434] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|yourwitch.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "yourwitch.com"] [uri "/z9x8c7v6b5-debug-trigger-yourwitch.com"] [unique_id "ar_rvCZl1z5U4v4mD3zb6QAAAIY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-10-02 15:57:31 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇬🇧 consul.to	2026-10-02 15:16:03 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 itsolon	2026-10-02 13:22:21 (6 days ago)	[02/Oct/2026:15:22:20 +0200] 179094734024.109978 136.92.44.234 45604 217.154.7.177 443 [02/Oct/2026: ... show more [02/Oct/2026:15:22:20 +0200] 179094734024.109978 136.92.44.234 45604 217.154.7.177 443 [02/Oct/2026:15:22:20 +0200] 179094734076.975916 136.92.44.234 45604 217.154.7.177 443 [02/Oct/2026:15:22:20 +0200] 179094734027.478029 136.92.44.234 45604 217.154.7.177 443 [02/Oct/2026:15:22:20 +0200] 17909473409.522307 136.92.44.234 45604 217.154.7.177 443 [02/Oct/2026:15:22:21 +0200] 179094734197.843477 136.92.44.234 45604 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.153.236.122

🇮🇳 172.69.94.30

🇧🇪 198.235.24.152

🇹🇼 198.235.24.126

🇵🇰 119.156.71.57

🇸🇬 84.75.155.64

🇮🇩 36.64.131.68

🇺🇸 3.101.240.182

🇺🇦 217.196.165.220

🇳🇱 204.76.203.231

🇨🇳 182.119.230.131

🇨🇳 125.45.66.204

🇨🇩 102.223.209.43

🇨🇦 70.54.182.130

🇬🇧 45.82.76.130

🇳🇱 195.178.110.103

🇸🇬 194.233.77.237

🇺🇸 166.239.184.117

🇧🇷 152.32.199.115

🇺🇸 137.184.32.56