This IP address has been reported a total of
16
times from
14 distinct
sources.
135.136.19.173 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
United States of America
with 2
reports;
Canada
with 1
report.
The most common categories in these recent reports were:
Port Scan
11
times;
Brute-Force
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW on vhVPS [25565/tcp]
Source Port: 36882
TTL: 50
Packet Length: 60
TOS: 0x00
Analyzed ...
show moreBlocked by UFW on vhVPS [25565/tcp]
Source Port: 36882
TTL: 50
Packet Length: 60
TOS: 0x00
Analyzed by https://ip.wiredalter.com
show less
Blocked by UFW on dVPS [25565/tcp]
Source Port: 41324
TTL: 57
Packet Length: 60
TOS: 0x00
Analyzed ...
show moreBlocked by UFW on dVPS [25565/tcp]
Source Port: 41324
TTL: 57
Packet Length: 60
TOS: 0x00
Analyzed by https://ip.wiredalter.com
show less
2026-10-16 01:10:01: Minecraft server scan detected from 135.136.19.173 on port 25565 of 25e14c08-04 ...
show more2026-10-16 01:10:01: Minecraft server scan detected from 135.136.19.173 on port 25565 of 25e14c08-049e-4230-b57c-01ea490b54e1
show less
2026-10-16 01:09:46: Minecraft server scan detected from 135.136.19.173 on port 25565 of mail.cpxduc ...
show more2026-10-16 01:09:46: Minecraft server scan detected from 135.136.19.173 on port 25565 of mail.cpxducky.com
show less
(mod_security) mod_security (id:243420) triggered by 135.136.19.173 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:243420) triggered by 135.136.19.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 16:10:02.739215 2026] [security2:error] [pid 32253:tid 32253] [client 135.136.19.173:56601] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS: Preschool" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||lcoor.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lcoor.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "agzDlqMQXMefEBKB3Qu7vAAAABY"]
show less
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 135.136.19.173 (DE/Germany/-): 1 in ...
show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 135.136.19.173 (DE/Germany/-): 1 in the last 3600 secs
show less
Web App Attack
Anonymous
| Multiple SQL injection attempts from same source ip.(multiple servers)
