JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.136.48.99

135.136.48.99 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 37%: ?

37%

ISP	M247 LTD, Riyadh Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇸🇦 Saudi Arabia
City	Riyadh, Riyadh Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.136.48.99

Whois 135.136.48.99

IP Abuse Reports for 135.136.48.99:

This IP address has been reported a total of 7 times from 7 distinct sources. 135.136.48.99 was first reported on June 10th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-19 00:28:47 (6 days ago)	(mod_security) mod_security (id:240000) triggered by 135.136.48.99 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 135.136.48.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 20:28:42.707456 2026] [security2:error] [pid 10261:tid 10261] [client 135.136.48.99:59357] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|web214.dnchosting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "web214.dnchosting.com"] [uri "/images/stories/themes.php"] [unique_id "ajSNOsJj3c1vDVK4Oe_5tQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 Saec	2026-06-11 10:15:03 (2 weeks ago)	Cloudflare WAF blocked 69 requests in 1h from SA. Top paths probed: /cron.php, /api/index.php/status ... show more Cloudflare WAF blocked 69 requests in 1h from SA. Top paths probed: /cron.php, /api/index.php/status, /. Pattern: bot/scanner abuse. Auto-reported by Jarvis CF monitor. show less	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-06-11 09:38:43 (2 weeks ago)	Aggressive web search of vulnerable pages: /wp-includes/ID3/about.php /wp-content/languages/404.php ... show more Aggressive web search of vulnerable pages: /wp-includes/ID3/about.php /wp-content/languages/404.php /update/403.php /default.php /wp-includes/a ... show less	Web App Attack
Anonymous	2026-06-11 09:05:31 (2 weeks ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (64/60 min)'; Requests=64	Port Scan
🇳🇱 Site.eu	2026-06-11 05:42:42 (2 weeks ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-06-11 01:24:59 (2 weeks ago)	Aggressive web scan	Web App Attack
🇬🇧 Oakley	2026-06-10 23:40:53 (2 weeks ago)	(mod_security) mod_security (id:900191) triggered by 135.136.48.99 (SA/Saudi Arabia/-): 5 in the las ... show more (mod_security) mod_security (id:900191) triggered by 135.136.48.99 (SA/Saudi Arabia/-): 5 in the last 900 secs show less	Web App Attack Hacking

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 203.25.124.61

🇨🇳 123.191.153.122

🇷🇴 80.94.92.234

🇷🇴 2.57.122.150

🇮🇳 206.1.62.191

🇩🇪 185.220.100.240

🇺🇸 147.185.132.114

🇧🇷 143.95.213.196

🇧🇷 45.205.1.243

🇧🇷 45.205.1.73

🇺🇸 216.73.217.31

🇳🇱 195.178.110.217

🇰🇷 110.14.190.221

🇧🇾 81.30.98.142

🇮🇹 72.146.3.214

🇺🇸 50.223.176.171

🇳🇱 45.148.10.200

🇳🇱 45.148.10.157

🇫🇷 185.202.236.38

🇪🇬 156.206.55.17