JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.136.19.87

135.136.19.87

Neutral Activity

17 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

M247 LTD Frankfurt Infrastructure

Usage Type

Data Center/Web Hosting/Transit

ASN

AS9009

Domain Name

m247.com

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

135.136.19.87 has been reported 17 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 135.136.19.87:

This IP address has been reported a total of 17 times from 14 distinct sources. 135.136.19.87 was first reported on March 13th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Charlesiv	2026-04-16 04:02:46 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 9009 (M247) Protocol: HT ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 9009 (M247) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-04-16T02:44:08Z Ray ID: 9ecfd8ae889fd275 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 SCHAPPY	2026-04-15 22:07:23 (4 months ago)	Critical web app attack detected. HTTP header is restricted by policy (/accept-charset/)	Web App Attack
🇫🇷 Security_Whaller	2026-04-15 15:04:25 (4 months ago)	Malicious activity detected on Honeypot.	Brute-Force Hacking Web App Attack
🇩🇪 4server	2026-04-15 11:06:21 (4 months ago)	[WedApr1513:06:15.7508602026][security2:error][pid3665866:tid3665923][client135.136.19.87:0]ModSecur ... show more [WedApr1513:06:15.7508602026][security2:error][pid3665866:tid3665923][client135.136.19.87:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"serversvizzera.ch\"][uri\"/\"][unique_id\"ad9xJ9sghjnaKhfm5M3V4wAAAE4\"]\,referer:https://serversvizzera.ch show less	Port Scan Brute-Force Web App Attack
🇨🇭 backslash	2026-04-15 01:42:01 (4 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇩🇪 HandyTreff.de	2026-04-13 17:58:51 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -30.063 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -30.063 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.1) Gecko/20100101 Firefox/65.1 show less	Web App Attack Bad Web Bot
🇩🇪 4server	2026-04-13 08:12:15 (4 months ago)	[MonApr1310:12:10.8978982026][security2:error][pid83537:tid83594][client135.136.19.87:0]ModSecurity: ... show more [MonApr1310:12:10.8978982026][security2:error][pid83537:tid83594][client135.136.19.87:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"bozza.avcolor.ch\"][uri\"/\"][unique_id\"adylWjBErEdWUE3wSrwgMAAAAJU\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-04-12 11:29:18 (4 months ago)	Malicious activity detected	Hacking Web App Attack
🇷🇺 Danat	2026-04-12 09:49:00 (4 months ago)	attack	Web App Attack
🇪🇸 masterguru	2026-04-12 08:59:03 (4 months ago)	HTTP header is restricted by policy (/accept-charset/). String match within "/accept-charset/ /conte ... show more HTTP header is restricted by policy (/accept-charset/). String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. (920450-123) show less	Bad Web Bot
🇨🇭 4server	2026-04-12 07:41:20 (4 months ago)	[SunApr1209:41:13.5551942026][security2:error][pid383072:tid383636][client135.136.19.87:0]ModSecurit ... show more [SunApr1209:41:13.5551942026][security2:error][pid383072:tid383636][client135.136.19.87:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"swiss-web-hosting.ch\"][uri\"/\"][unique_id\"adtMmcIJKyMT1jgVSmLhCQAAAME\"] show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2026-04-11 22:48:02 (4 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/135.136.19.87 2026-04-11 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/135.136.19.87 2026-04-11 03:55:52 /favicon.ico 2026-04-11 03:55:50 / show less	Web App Attack
🇩🇪 SCHAPPY	2026-04-11 06:36:25 (4 months ago)	Critical web app attack detected. HTTP header is restricted by policy (/accept-charset/)	Web App Attack
🇵🇱 webadmin	2026-04-10 18:38:31 (4 months ago)	2026/04/10 20:37:55 [error] 3403944#3403944: 833350 directory index of "/var/www/autoconfig/" is fo ... show more 2026/04/10 20:37:55 [error] 3403944#3403944: 833350 directory index of "/var/www/autoconfig/" is forbidden, client: 135.136.19.87, server: poczta.tm.sai.pl, request: "GET / HTTP/1.1", host: "autoconfig.sai.com.pl" 2026/04/10 20:37:57 [error] 3403944#3403944: 833352 open() "/var/www/autoconfig/favicon.ico" failed (2: No such file or directory), client: 135.136.19.87, server: poczta.tm.sai.pl, request: "GET /favicon.ico HTTP/1.1", host: "autoconfig.sai.com.pl" 2026/04/10 20:38:31 [error] 3403940#3403940: 833368 directory index of "/var/www/autoconfig/" is forbidden, client: 135.136.19.87, server: poczta.tm.sai.pl, request: "GET / HTTP/1.1", host: "imap.tm.sai.pl" 2026/04/10 20:38:31 [error] 3403940#3403940: 833367 directory index of "/var/www/autoconfig/" is forbidden, client: 135.136.19.87, server: poczta.tm.sai.pl, request: "GET / HTTP/1.1", host: "imap.biuro.sai.pl" 2026/04/10 20:38:31 [error] 3403940#3403940: 833370 directory index of "/var/www/autoconfig/" is forbidden, client: ... show less	Web App Attack
🇮🇩 Burayot	2026-04-10 14:22:56 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 135.136.19.87 (DE/Germany/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 135.136.19.87 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 212.30.33.139

🇺🇸 170.106.153.232

🇫🇷 91.196.152.157

🇫🇷 91.196.152.155

🇦🇲 195.250.79.2

🇲🇽 187.140.184.99

🇮🇹 185.208.106.153

🇵🇰 103.163.239.11

🇷🇴 93.122.181.45

🇭🇰 43.135.115.233

🇮🇳 36.255.183.75

🇧🇷 35.198.60.184

🇺🇸 34.57.103.83

🇺🇸 216.73.216.222

🇮🇩 157.20.37.254

🇨🇳 116.228.233.93

🇧🇬 79.124.60.194

🇦🇲 37.157.212.188

🇬🇧 35.203.211.86

🇺🇸 34.58.89.154