JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

135.136.19.192

Neutral Activity

Abuse Confidence Score

0% Low Risk

39 reports

31 reporters · latest 3 months ago

ISP: M247 LTD Frankfurt Infrastructure
Usage Type: Data Center/Web Hosting/Transit
ASN: AS9009
Domain Name: m247.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

135.136.19.192 has been reported 39 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

39 from 31 distinct reporters

First reported

April 1st 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-07-17 13:02:07 UTC · (3 months ago)	Web application attack detected	Hacking Web App Attack
Anonymous	2026-07-16 18:02:43 UTC · (3 months ago)	Web attack	Bad Web Bot Web App Attack
🇫🇮 danskefilm.dk	2026-07-16 16:30:01 UTC · (3 months ago)	SQL injection	SQL Injection
🇬🇧 Steve	2026-07-16 16:23:42 UTC · (3 months ago)	SQL Injection Attempts	Brute-Force SQL Injection
🇬🇧 openstrike.co.uk	2026-07-16 05:13:54 UTC · (3 months ago)	284 attacks on SQL Injections (type 4), SQL Injections (type 5), SQL Injections (type 1): GET /domain.cgi?id=180%27+AND+1%3D1--+- HTTP/1.1 GET /domain.cgi?id=180%29EXTRACTVALUE%283744%2C%2F%2A%2150000CONCAT%2A%2F%280x7e%2C%28%2F%2A%2150000SELECT%2A%2 ... show more 284 attacks on SQL Injections (type 4), SQL Injections (type 5), SQL Injections (type 1): GET /domain.cgi?id=180%27+AND+1%3D1--+- HTTP/1.1 GET /domain.cgi?id=180%29EXTRACTVALUE%283744%2C%2F%2A%2150000CONCAT%2A%2F%280x7e%2C%28%2F%2A%2150000SELECT%2A%2F%28ELT%283744%3D3744%2C1%29%29%29%2C0x7e%29%29--+- HTTP/1.1 GET /domain.cgi?id=180EXTRACTVALUE%281483%2CCONCAT%280x7e%2C%28SELECT%2F%2A%2A%2F%28ELT%281483%3D1483%2C1%29%29%29%2C0x7e%29%29%23+BJMlGrdA HTTP/1.1 show less	SQL Injection
🇨🇭 🇨🇭 Hosting	2026-07-16 05:10:03 UTC · (3 months ago)	Automated WAF report: 7000-8000 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
Anonymous	2026-07-15 13:05:21 UTC · (3 months ago)	Blocked: Reason='Possible SQL injection activity (738/60 min)'; Requests=738	SQL Injection
🇧🇪 cmbplf	2026-07-15 13:01:45 UTC · (3 months ago)	6.740 post requests in 1 hour (6d9h55m)	Brute-Force Bad Web Bot
🇳🇱 Savvii	2026-07-14 20:18:43 UTC · (3 months ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-14 20:00:50 UTC · (3 months ago)	1 attempts against mh-modsecurity-ban on frost	Brute-Force Web App Attack
🇫🇮 danskefilm.dk	2026-07-14 19:00:01 UTC · (3 months ago)	SQL injection	SQL Injection
🇺🇸 xmission.com	2026-07-11 12:17:39 UTC · (4 months ago)	Blocked by UFW (TCP on 1107) Source port: 52423 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 135.136.19.192) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇫🇷 dynamix	2026-06-19 21:52:10 UTC · (4 months ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Eric	2026-06-19 20:23:33 UTC · (4 months ago)	[Fri Jun 19 20:23:29.819086 2026] [security2:error] [pid 3595915:tid 3595915] [client 135.136.19.192:0] [client 135.136.19.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecuri ... show more [Fri Jun 19 20:23:29.819086 2026] [security2:error] [pid 3595915:tid 3595915] [client 135.136.19.192:0] [client 135.136.19.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.env"] [unique_id "ajWlQXFUnaqM1OZaqOllPgAAAAM"] [Fri Jun 19 20:23:31.027625 2026] [security2:error] [pid 3595915:tid 3595915] [client 135.136.19.192:0] [client 135.136.19.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [sev ... show less	Hacking Web App Attack
🇮🇹 VHosting	2026-06-19 16:05:02 UTC · (4 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 138.99.196.98

🇳🇬 102.88.137.213

🇬🇧 89.37.172.131

🇫🇷 85.217.140.36

🇺🇸 68.12.21.37

🇺🇸 66.132.195.31

🇧🇪 35.210.80.231

🇧🇪 35.195.41.101

🇺🇸 20.118.36.197

🇨🇭 179.43.153.10

🇵🇱 172.64.198.180

🇨🇳 119.145.167.171

🇳🇱 109.160.32.140

🇿🇦 102.130.49.90

🇳🇱 89.21.67.133

🇫🇷 88.172.82.235

🇺🇸 70.164.32.243

🇺🇸 31.134.9.34

🇬🇧 31.14.254.105

🇸🇪 213.212.48.179