JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.136.0.234

135.136.0.234 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 75%: ?

75%

ISP	M247 LTD Frankfurt Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.136.0.234

Whois 135.136.0.234

IP Abuse Reports for 135.136.0.234:

This IP address has been reported a total of 16 times from 15 distinct sources. 135.136.0.234 was first reported on April 16th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-06-24 23:20:15 (2 days ago)	VoIP Attack proto:UDP src:50700 dst:5060	Port Scan Fraud VoIP
🇩🇪 NxtGenIT	2026-06-24 23:03:30 (2 days ago)	Sentrypeer Honeypot hit, SIP Method: REGISTER, User Agent: Yealink SIP-T46G 28.73.0.40	FTP Brute-Force
🇺🇸 BirdCo Telecom	2026-06-24 22:59:43 (2 days ago)		Brute-Force Fraud VoIP
🇮🇹 Francesco Ippoliti	2026-06-24 22:48:50 (2 days ago)	[Jun 25 00:48:48] NOTICE[1974] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:101@154. ... show more [Jun 25 00:48:48] NOTICE[1974] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '135.136.0.234:50800' (callid: [email protected]) - No matching endpoint found [Jun 25 00:48:49] NOTICE[2425] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '135.136.0.234:50800' (callid: [email protected]) - No matching endpoint found ... show less	Brute-Force Port Scan
🇩🇪 ipcop.net	2026-06-24 21:52:51 (2 days ago)	[2026-06-24 23:48:25] NOTICE[28512] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:123 ... show more [2026-06-24 23:48:25] NOTICE[28512] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '135.136.0.234:52671' (callid: [email protected]) - Failed to authenticate [2026-06-24 23:48:25] SECURITY[25418] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-06-24T23:48:25.902+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="[email protected]",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/135.136.0.234/52671",Challenge="1782337705/ea582548ed19b8409ed28d474b41f5ce",Response="58b15c92b4cc720063867dadcd49d157",ExpectedResponse="" [2026-06-24 23:48:45] NOTICE[28512] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '135.136.0.234:57282' (callid: [email protected]) - Failed to authenticate [2026-06-24 23:48:45] SECURITY[25418] res_security_log.c: Securit show less	Fraud VoIP Brute-Force
🇩🇪 chwxr	2026-06-24 21:52:26 (2 days ago)	Detected by CrowdSec on chxr network infra. - contact [email protected]: crowdsec ... show more Detected by CrowdSec on chxr network infra. - contact [email protected]: crowdsecurity/asterisk_bf show less	Fraud VoIP Port Scan Brute-Force SSH
🇫🇷 Provost-info	2026-06-24 21:52:20 (2 days ago)	Attack attempt on SIP server	Brute-Force Fraud VoIP
🇩🇪 scolastico	2026-06-24 21:49:18 (2 days ago)	[automated] IP failed to authenticate or send unauthenticated INVITE requests	Brute-Force Fraud VoIP
🇨🇭 ale	2026-06-24 21:49:02 (2 days ago)	SIP auth scanning - multiple failed SIP authentication	Fraud VoIP
🇺🇸 mc4bbs	2026-06-24 21:48:34 (2 days ago)	[2026-06-24 17:48:17] NOTICE[3064] chan_sip.c: Registration from '<sip:[email protected]:50 ... show more [2026-06-24 17:48:17] NOTICE[3064] chan_sip.c: Registration from '<sip:[email protected]:5060>' failed for '135.136.0.234:63534' - Wrong password [2026-06-24 17:48:17] SECURITY[3207] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2026-06-24T17:48:17.766-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="123545654465",SessionID="0x7f6aa00481e0",LocalAddress="IPV4/UDP/108.54.115.236/5060",RemoteAddress="IPV4/UDP/135.136.0.234/63534",Challenge="7a291d60",ReceivedChallenge="7a291d60",ReceivedHash="a38c6894c3972914ff56bb8c0296efc6" [2026-06-24 17:48:33] NOTICE[3064] chan_sip.c: Registration from '<sip:[email protected]:5060>' failed for '135.136.0.234:64487' - Wrong password ... show less	Fraud VoIP Brute-Force
🇩🇪 defkev	2026-06-24 21:48:26 (2 days ago)		Fraud VoIP
🇮🇹 Francesco Ippoliti	2026-06-24 21:48:22 (2 days ago)	[Jun 24 23:48:21] NOTICE[2425] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:12354565 ... show more [Jun 24 23:48:21] NOTICE[2425] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '135.136.0.234:55421' (callid: [email protected]) - No matching endpoint found [Jun 24 23:48:21] NOTICE[1974] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '135.136.0.234:55421' (callid: [email protected]) - No matching endpoint found ... show less	Brute-Force Port Scan
Anonymous	2026-06-24 21:48:21 (2 days ago)	B: f2b asterisk aggressive 3x	Email Spam
🇺🇸 TPI-Abuse	2026-06-15 04:21:18 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 135.136.0.234 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 135.136.0.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:21:10.422407 2026] [security2:error] [pid 16757:tid 16757] [client 135.136.0.234:55130] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 135.136.0.234 (+1 hits since last alert)\|odysseydogasporlari.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odysseydogasporlari.com"] [uri "/xmlrpc.php"] [unique_id "ai99tlVMqb8Iyx5ArHXevAAAAF0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-05-06 21:30:03 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 209.87.175.140

🇺🇸 162.216.150.245

🇮🇳 139.167.208.211

🇰🇪 102.135.168.149

🇰🇿 95.57.74.207

🇺🇸 91.230.168.152

🇩🇪 69.5.169.162

🇺🇸 66.132.186.201

🇰🇷 222.110.147.56

🇳🇱 176.65.149.220

🇵🇰 175.107.36.32

🇩🇪 165.154.138.3

🇺🇸 162.216.149.203

🇳🇴 158.173.166.3

🇰🇷 121.132.27.238

🇨🇬 102.129.82.211

🇺🇸 91.230.168.156

🇩🇪 69.5.169.172

🇺🇸 66.228.53.78

🇺🇸 45.131.194.141