JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.136.51.39

135.136.51.39

Recent Activity

58 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

M247 LTD Vienna Infrastructure

Usage Type

Data Center/Web Hosting/Transit

ASN

AS9009

Domain Name

m247.com

Country

🇦🇹 Austria

City

Vienna, Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 135.136.51.39:

This IP address has been reported a total of 58 times from 40 distinct sources. 135.136.51.39 was first reported on September 9th 2026, and the most recent report was 7 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 21 reports; Poland with 7 reports; Germany with 6 reports. The most common categories in these recent reports were: Web App Attack 49 times; Bad Web Bot 29 times; Brute-Force 14 times; Port Scan 7 times; Hacking 6 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 JaRoNL	2026-09-10 12:36:55 (7 minutes ago)	135.136.51.39 - - [10/Sep/2026:14:36:52 +0200] "GET /.env.nexkit-missing-ee28a1b1bdaeca4b31e8a6deb53 ... show more 135.136.51.39 - - [10/Sep/2026:14:36:52 +0200] "GET /.env.nexkit-missing-ee28a1b1bdaeca4b31e8a6deb539904c HTTP/2.0" 404 81537 "-" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Mobile Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 craudiovizai	2026-09-10 12:30:35 (13 minutes ago)	Automated honeypot detection. honeypot against a Next.js application. Paths: /.env. Blocked at the e ... show more Automated honeypot detection. honeypot against a Next.js application. Paths: /.env. Blocked at the edge. show less	Web App Attack Bad Web Bot
🇿🇦 conure.sh	2026-09-10 12:10:22 (34 minutes ago)	csagent: score 20.8: 404 noise floor x3, secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-09-10 11:47:04 (57 minutes ago)	(mod_security) mod_security (id:210492) triggered by 135.136.51.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 135.136.51.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 07:46:59.500023 2026] [security2:error] [pid 27831:tid 27831] [client 135.136.51.39:53579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blisseventboutique.kawkacevents.com"] [uri "/.env.nexkit-missing-7448888dbe608d456d2aab685a0d4293"] [unique_id "aqKYszljLD8oHbGcb7BeGwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SLSLLC	2026-09-10 11:23:21 (1 hour ago)	135.136.51.39 - - [10/Sep/2026:11:23:20 +0000] "GET /.env.nexkit-missing-76d6048c7f6cd357ca3de05098c ... show more 135.136.51.39 - - [10/Sep/2026:11:23:20 +0000] "GET /.env.nexkit-missing-76d6048c7f6cd357ca3de05098cb9239 HTTP/2.0" 403 282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" ... show less	Brute-Force Web App Attack
🇨🇭 4server	2026-09-10 11:04:24 (1 hour ago)	[ThuSep1013:04:19.5759432026][security2:error][pid2366705:tid2366970][client135.136.51.39:0]ModSecur ... show more [ThuSep1013:04:19.5759432026][security2:error][pid2366705:tid2366970][client135.136.51.39:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"autodiscover.annunci-ticino.ch\"][uri\"/.env.nexkit-missing-31338de96f0fece699dec3a5b9c6ff98\"][unique_id\"aqKOs-tv_h8Yodjtlbw8TQAAAUc\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-09-10 10:54:17 (1 hour ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇩🇪 Dominik Lysiak	2026-09-10 09:25:53 (3 hours ago)	135.136.51.39 - - [10/Sep/2026:11:25:52 +0200] "GET /.env.nexkit-missing-1a09f8662d02afbb1943d21a53b ... show more 135.136.51.39 - - [10/Sep/2026:11:25:52 +0200] "GET /.env.nexkit-missing-1a09f8662d02afbb1943d21a53bf942f HTTP/2.0" 302 96 "-" "Mozilla/5.0 (Linux; Android 15; Pixel 9 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" 135.136.51.39 - - [10/Sep/2026:11:25:52 +0200] "GET /.env HTTP/2.0" 302 48 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" 135.136.51.39 - - [10/Sep/2026:11:25:52 +0200] "GET /.env.example HTTP/2.0" 302 56 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" ... show less	Web App Attack
🇩🇪 kkw	2026-09-10 09:06:43 (3 hours ago)	[REDACTED] 135.136.51.39 - - [10/Sep/2026:11:06:42 +0200] "GET /.env HTTP/2.0" 404 351 "-" "Mozilla/ ... show more [REDACTED] 135.136.51.39 - - [10/Sep/2026:11:06:42 +0200] "GET /.env HTTP/2.0" 404 351 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack
Anonymous	2026-09-10 08:58:43 (3 hours ago)	(caddyscan) Scanner path probe from 135.136.51.39 (CZ/Czechia/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 135.136.51.39 (CZ/Czechia/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 135.136.51.39 - - [10/Sep/2026:08:50:41 +0000] "GET /.env HTTP/1.1" [REDACTED] 404 215 135.136.51.39 - - [10/Sep/2026:08:50:42 +0000] "GET /.env.example HTTP/1.1" [REDACTED] 200 2627 135.136.51.39 - - [10/Sep/2026:08:50:42 +0000] "GET /.env.example HTTP/1.1" [REDACTED] 200 2627 135.136.51.39 - - [10/Sep/2026:08:58:39 +0000] "GET /.env.nexkit-missing-dae9f1cdd672abd2e1559ed4e575d58d HTTP/1.1" [REDACTED] 200 2627 135.136.51.39 - - [10/Sep/2026:08:58:39 +0000] "GET /.env HTTP/1.1" show less	Port Scan
🇫🇮 as211431.net	2026-09-10 08:52:14 (3 hours ago)	Triggered Cloudflare WAF (firewallCustom) from AT. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from AT. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /.env.nexkit-missing-46b4dcdb8b4577d1c3ef360983c6165f UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14.7; rv:147.0) Gecko/20100101 Firefox/147.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 Budyn	2026-09-10 08:32:20 (4 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.budyn.xyz \| URI: /.env.nexkit-missing-89d126a0188cf191fc1ec81f1facb59c \| UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇨🇭 blinx	2026-09-10 08:18:35 (4 hours ago)	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack
Anonymous	2026-09-10 08:02:05 (4 hours ago)	Automated web vulnerability scanning and reconnaissance	Bad Web Bot Web App Attack
Anonymous	2026-09-10 07:42:31 (5 hours ago)	(caddyscan) Scanner path probe from 135.136.51.39 (CZ/Czechia/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 135.136.51.39 (CZ/Czechia/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 135.136.51.39 - - [10/Sep/2026:07:42:26 +0000] "GET /.env.nexkit-missing-a55d3483640f2c198cc9ee08624dfbbe HTTP/1.1" [REDACTED] 200 2627 135.136.51.39 - - [10/Sep/2026:07:42:27 +0000] "GET /.env.nexkit-missing-82cfc2a513643f37b0514f8a174140a1 HTTP/1.1" [REDACTED] 200 2627 135.136.51.39 - - [10/Sep/2026:07:42:27 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 135.136.51.39 - - [10/Sep/2026:07:42:27 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 135.136.51.39 - - [10/Sep/2026:07:42:27 +0000] "GET /.env.example HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 181.233.100.131

🇷🇴 92.118.39.14

🇨🇳 58.209.227.57

🇧🇪 35.195.88.83

🇰🇷 222.239.251.12

🇧🇷 200.150.115.230

🇮🇩 114.9.97.2

🇧🇬 109.160.32.117

🇮🇳 101.53.149.246

🇸🇬 101.32.243.200

🇷🇺 93.94.178.8

🇷🇺 91.219.64.211

🇵🇱 87.206.87.34

🇰🇷 211.223.41.90

🇳🇴 193.71.134.54

🇪🇨 190.110.213.26

🇸🇬 188.166.185.132

🇧🇷 186.237.142.164

🇺🇸 164.92.102.14

🇳🇱 160.119.66.49