JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.136.48.99

135.136.48.99 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 34%: ?

34%

ISP	M247 LTD, Riyadh Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇸🇦 Saudi Arabia
City	Riyadh, Riyadh Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.136.48.99

Whois 135.136.48.99

IP Abuse Reports for 135.136.48.99:

This IP address has been reported a total of 7 times from 7 distinct sources. 135.136.48.99 was first reported on June 10th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-19 00:28:47 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 135.136.48.99 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 135.136.48.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 20:28:42.707456 2026] [security2:error] [pid 10261:tid 10261] [client 135.136.48.99:59357] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|web214.dnchosting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "web214.dnchosting.com"] [uri "/images/stories/themes.php"] [unique_id "ajSNOsJj3c1vDVK4Oe_5tQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 Saec	2026-06-11 10:15:03 (2 weeks ago)	Cloudflare WAF blocked 69 requests in 1h from SA. Top paths probed: /cron.php, /api/index.php/status ... show more Cloudflare WAF blocked 69 requests in 1h from SA. Top paths probed: /cron.php, /api/index.php/status, /. Pattern: bot/scanner abuse. Auto-reported by Jarvis CF monitor. show less	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-06-11 09:38:43 (2 weeks ago)	Aggressive web search of vulnerable pages: /wp-includes/ID3/about.php /wp-content/languages/404.php ... show more Aggressive web search of vulnerable pages: /wp-includes/ID3/about.php /wp-content/languages/404.php /update/403.php /default.php /wp-includes/a ... show less	Web App Attack
Anonymous	2026-06-11 09:05:31 (2 weeks ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (64/60 min)'; Requests=64	Port Scan
🇳🇱 Site.eu	2026-06-11 05:42:42 (2 weeks ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-06-11 01:24:59 (2 weeks ago)	Aggressive web scan	Web App Attack
🇬🇧 Oakley	2026-06-10 23:40:53 (2 weeks ago)	(mod_security) mod_security (id:900191) triggered by 135.136.48.99 (SA/Saudi Arabia/-): 5 in the las ... show more (mod_security) mod_security (id:900191) triggered by 135.136.48.99 (SA/Saudi Arabia/-): 5 in the last 900 secs show less	Web App Attack Hacking

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.88.237.57

🇨🇳 223.73.51.251

🇩🇪 162.158.110.124

🇷🇴 94.156.152.50

🇸🇬 13.229.54.166

🇷🇺 193.233.48.169

🇻🇪 186.188.95.10

🇧🇩 165.101.222.21

🇧🇩 103.183.62.2

🇹🇷 94.154.43.181

🇬🇧 82.2.142.71

🇪🇸 185.230.124.181

🇺🇸 104.248.228.78

🇩🇪 95.90.13.168

🇩🇪 69.5.169.220

🇺🇸 66.132.172.117

🇺🇸 64.227.101.166

🇨🇳 14.17.101.98

🇷🇴 2.57.121.112

🇦🇷 181.209.97.172