JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.210.2.134

130.210.2.134 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.210.2.134

Whois 130.210.2.134

IP Abuse Reports for 130.210.2.134:

This IP address has been reported a total of 47 times from 37 distinct sources. 130.210.2.134 was first reported on August 23rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Mehmet_The_Script_Kiddie	2026-08-28 00:21:16 (1 hour ago)	CloudFlare WAF REPORT: Disobey robots.txt. Suspicious web crawler.	Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-08-27 23:02:23 (2 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇳🇱 DrLex0	2026-08-27 19:49:53 (6 hours ago)	POST on root path 130.210.2.134 443 - [27/Aug/2026:19:49:47 +0000] "POST / HTTP/1.1" 400 5434 "-" " ... show more POST on root path 130.210.2.134 443 - [27/Aug/2026:19:49:47 +0000] "POST / HTTP/1.1" 400 5434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" 130.210.2.134 443 - [27/Aug/2026:19:49:53 +0000] "HEAD / HTTP/1.1" 301 5140 "-" "python-requests/2.31.0" show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-08-27 19:12:01 (6 hours ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [mx02]	Hacking SQL Injection Web App Attack
🇺🇦 URAN Publishing Service	2026-08-27 14:42:41 (11 hours ago)	[27/Aug/2026:17:42:41 +0300] -- 130.210.2.134 Ban reason: User-Agent python-requests	Bad Web Bot Web App Attack
🇳🇴 Bots.go.to.hell	2026-08-27 14:24:30 (11 hours ago)	This IP was detected by CrowdSec triggering custom/http-bad-crawler-ban	Web App Attack Bad Web Bot
🇬🇧 Bytemark	2026-08-27 13:54:26 (12 hours ago)	130.210.2.134 - - [27/Aug/2026:14:54:25 +0100] "HEAD / HTTP/1.1" 200 6519 "-" "python-requests/2.31. ... show more 130.210.2.134 - - [27/Aug/2026:14:54:25 +0100] "HEAD / HTTP/1.1" 200 6519 "-" "python-requests/2.31.0" show less	Brute-Force Web App Attack
Anonymous	2026-08-27 12:20:14 (13 hours ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇫🇷 mrcrassi	2026-08-27 11:38:00 (14 hours ago)	Triggered Cloudflare WAF (firewallManaged) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from IN. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /pt/home UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-27 11:19:15 (14 hours ago)	Web exploit attempt:	Web App Attack
🇫🇮 paissangroup	2026-08-27 10:33:28 (15 hours ago)	Multiple WAF Violations	Web App Attack
🇯🇵 HeliJP	2026-08-27 09:45:38 (16 hours ago)	2026-08-27T09:22:52Z - Recognized attacks\bad behavior from IP address 130.210.2.134 on port 443\80 ... show more 2026-08-27T09:22:52Z - Recognized attacks\bad behavior from IP address 130.210.2.134 on port 443\80 (15 daily hits): Found User-Agent associated with scripting/generic HTTP client, Detects MySQL comments, conditions and ch(a)r injections, SQL Injection Attack: Common Injection Testing Detected, IE XSS Filters - Attack Detected, PHP Injection Attack: Low-Value PHP Function Call Found, Detects classic SQL injection probings 2/3, RCE Bypass Technique, Remote Command Execution: Wildcard bypass technique attempt, Remote Command Execution: Unix Shell Expression Found, SQL Injection Attack, SQLi bypass attempt by ticks detected, Restricted SQL Character Anomaly Detection (args): # of special characters exceeded (12), Detects classic SQL injection probings 1/3 show less	Port Scan Hacking SQL Injection Web App Attack
🇺🇸 Vianpyro	2026-08-27 08:01:39 (17 hours ago)	Honeypot: 8 request(s) in 0 min. Paths: /. Method(s): POST,HEAD. UA: python-requests/2.31.0. ASN: 31 ... show more Honeypot: 8 request(s) in 0 min. Paths: /. Method(s): POST,HEAD. UA: python-requests/2.31.0. ASN: 31898 (Oracle Corporation). show less	Web App Attack Bad Web Bot
🇫🇮 oh.mg	2026-08-27 07:33:06 (18 hours ago)	[Thu Aug 27 09:32:51.576424 2026] [security2:error] [pid 4176658:tid 4176665] [client 130.210.2.134: ... show more [Thu Aug 27 09:32:51.576424 2026] [security2:error] [pid 4176658:tid 4176665] [client 130.210.2.134:34754] [client 130.210.2.134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mail10.mrman.net"] [uri "/"] [unique_id "ao_oIzQGJHIjpcgze0h-AQAAAIU"] [Thu Aug 27 09:33:05.524887 2026] [security2:error] [pid 4150139:tid 4150165] [client 130.210.2.134:39960] [client 130.210.2.134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.10.0-dev"] [tag ... show less	Web App Attack Bad Web Bot
🇩🇪 4server	2026-08-27 07:02:54 (18 hours ago)	[ThuAug2709:02:47.8241492026][security2:error][pid831642:tid831678][client130.210.2.134:0]ModSecurit ... show more [ThuAug2709:02:47.8241492026][security2:error][pid831642:tid831678][client130.210.2.134:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$3:\$\$:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"mail.special-home.ch\"][uri\"/\"][unique_id\"ao_hF8oEc3oYNK684QkAHwAAABM\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 157.245.213.135

🇺🇸 151.244.27.169

🇨🇦 99.235.179.173

🇧🇷 2804:1684:1fc:8c00:8412:daa:f386:afff

🇧🇷 2804:14c:5bc6:9631:80df:3d02:a244:4c06

🇪🇸 194.116.184.179

🇯🇵 160.251.215.51

🇩🇪 151.243.11.235

🇵🇭 122.2.35.87

🇫🇷 91.231.89.117

🇧🇬 79.124.58.198

🇰🇷 61.72.145.120

🇸🇬 47.128.153.95

🇺🇸 45.33.115.186

🇨🇳 39.128.249.27

🇲🇽 2806:109f:8:6cf8:3d4b:d42d:ed4e:d464

🇭🇰 199.45.154.120

🇭🇰 182.239.80.74

🇿🇦 165.165.114.93

🇺🇸 162.216.150.112