Notable Threat
IP 136.90.54.236 rated 8/10 from 86 verified reports.
Multiple security incidents attributed to this IP. Confidence: 100%.
More threatening than 90% of monitored IPs
IP Address
136.90.54.236
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
United States
Location
Google LLC
ASN 396982
86
Reports
Mixed
Data Source
Threat Categories
Web App Attack
28
SQL Injection
27
Bad Web Bot
1
WP Version Scanning
1
WP Plugin Scanning
1
WP Config Exposure
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
23. September 2026
Last Activity
25. September 2026
Recent (7 days)
86 incidents
Cloud Infrastructure
This IP operates from Google Cloud Platform cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement appropriate security controls.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
25. Sep 2026
100%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | Bad Web Bot Web App Attack | Community | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
| New | WP Login Brute Force WP Admin Brute Force | Honeypot x2 | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
| New | SQL Injection Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 136.90.54.236
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS396982
- ISP
- Google LLC
DNS Information
- Reverse DNS
- 236.54.90.136.bc.googleusercontent.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 86
- First Reported
- 23 Sep 2026
- Last Reported
- 25 Sep 2026, 23:46
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS396982
Google LLC
JP
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
4,147
Total IPs Monitored
193,206
Total Reports
46.6
Reports per IP
Network Context
This IP address belongs to Google LLC (AS396982), which manages 4,147 IP addresses in our monitoring system. Out of these, 193,206 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 785,975 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
86
avg: 9
++
Network Comparison
Compared against 39,936 IPs in ASN 396982
Threat Level
8/10
network avg: 6.5
+
Total Reports
86
network avg: 10
++
Network Google LLC has overall threat level 2/10
Geographic Comparison
Compared against 139,330 IPs in US
Threat Level
8/10
country avg: 6.4
+
Total Reports
86
country avg: 19
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
25 Sep 2026
35 reports
Daily Average
2.9
reports/day
Most Active
Friday
35 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
79
SQL Injection
70
WP Login Brute Force
4
WP Admin Brute Force
4
WP Plugin Scanning
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
714,997 threat incidents tracked globally • Last 24h: 26,792 Logs
FEED
Top Threat Sources
-
01
United States139,305 19.5% -
02
Brazil109,999 15.4%
-
03
India78,674 11%
-
04
China43,864 6.1%
-
05
SC29,207 4.1%
-
06
Netherlands16,871 2.4%
-
07
Germany16,576 2.3%
-
08
Argentina16,117 2.3%
-
09
Pakistan15,837 2.2%
-
10
Colombia15,104 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.8/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
34.73.51.143
10/10
Confidence
100%
Reports
234
Location
US
US
34.23.203.140
10/10
Confidence
100%
Reports
153
Location
US
US
35.226.7.126
8/10
Confidence
100%
Reports
131
Location
US
US
34.75.89.130
10/10
Confidence
100%
Reports
120
Location
US
US
104.155.29.73
8/10
Confidence
100%
Reports
110
Location
BE
BE
34.138.27.236
10/10
Confidence
100%
Reports
110
Location
US
US
35.243.137.193
10/10
Confidence
100%
Reports
106
Location
US
US
136.108.88.147
10/10
Confidence
100%
Reports
103
Location
US
US
35.227.168.26
10/10
Confidence
100%
Reports
81
Location
US
US
34.73.62.26
10/10
Confidence
100%
Reports
80
Location
US
US
136.92.16.48
10/10
Confidence
100%
Reports
77
Location
DE
DE
35.229.217.244
10/10
Confidence
100%
Reports
72
Location
TW
TW
35.185.126.54
10/10
Confidence
100%
Reports
66
Location
US
US
136.69.137.147
10/10
Confidence
100%
Reports
66
Location
US
US
207.175.213.233
10/10
Confidence
100%
Reports
65
Location
BE
BE
35.229.254.62
10/10
Confidence
100%
Reports
62
Location
TW
TW
136.67.195.126
10/10
Confidence
100%
Reports
61
Location
US
US
136.70.123.89
10/10
Confidence
100%
Reports
58
Location
US
US
136.90.53.160
10/10
Confidence
100%
Reports
58
Location
US
US
35.229.20.236
10/10
Confidence
100%
Reports
56
Location
US
US
IPs from the same subnet range, likely same network segment.
4
Related IPs
9/10
Avg Threat
87%
Avg Confidence
4
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
50.6.7.129
8/10
Confidence
100%
Reports
447
ISP
ORACLE-BMC-31898
72.167.150.128
8/10
Confidence
100%
Reports
429
ISP
GO-DADDY-COM-LLC
50.6.229.148
8/10
Confidence
100%
Reports
346
ISP
ORACLE-BMC-31898
92.118.39.77
10/10
Confidence
100%
Reports
307
ISP
Unmanaged Ltd
87.121.84.30
8/10
Confidence
100%
Reports
295
ISP
Vpsvault.host Ltd
34.73.51.143
10/10
Confidence
100%
Reports
234
ISP
Google LLC
50.6.226.221
10/10
Confidence
100%
Reports
223
ISP
ORACLE-BMC-31898
31.57.184.107
8/10
Confidence
100%
Reports
202
ISP
Netiface LLC
64.31.25.250
8/10
Confidence
100%
Reports
177
ISP
Limestone Netwo...
34.23.203.140
10/10
Confidence
100%
Reports
153
ISP
Google LLC
97.74.93.24
10/10
Confidence
100%
Reports
149
ISP
GoDaddy.com, LLC
74.206.180.196
8/10
Confidence
100%
Reports
143
ISP
MOJOHOST
35.226.7.126
8/10
Confidence
100%
Reports
131
ISP
Google LLC
147.135.37.185
8/10
Confidence
100%
Reports
131
ISP
OVH SAS
72.167.50.103
8/10
Confidence
100%
Reports
129
ISP
GoDaddy.com, LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.137
10/10
Confidence
100%
Reports
1,449
Location
BG
BG
213.177.179.195
10/10
Confidence
100%
Reports
806
Location
TW
TW
103.127.30.137
8/10
Confidence
100%
Reports
720
Location
IN
IN
213.209.159.208
10/10
Confidence
100%
Reports
670
Location
DE
DE
176.65.139.181
10/10
Confidence
100%
Reports
614
Location
LU
LU
185.242.3.195
10/10
Confidence
100%
Reports
601
Location
NL
NL
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
45.148.10.204
8/10
Confidence
100%
Reports
509
Location
NL
NL
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
195.178.110.217
10/10
Confidence
100%
Reports
404
Location
BG
BG
195.178.110.227
10/10
Confidence
100%
Reports
369
Location
BG
BG
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.164
- 66.132.172.162
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 66.132.172.163
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 192.161.49.2
- 18.116.101.220
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 3.130.168.2
- 5.187.35.26