JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.185.90.18

134.185.90.18

Recent Activity

30 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Oracle Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS31898

Domain Name

oracle.com

Country

🇸🇬 Singapore

City

Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 134.185.90.18:

This IP address has been reported a total of 30 times from 28 distinct sources. 134.185.90.18 was first reported on July 20th 2026, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: United States of America with 8 reports; Germany with 7 reports; France with 5 reports. The most common categories in these recent reports were: Web App Attack 18 times; Hacking 9 times; Bad Web Bot 7 times; DDoS Attack 4 times; Brute-Force 3 times; Other 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-05 08:24:46 (4 hours ago)	Web Scanning Attack to Multiple Domain	DDoS Attack Ping of Death Web Spam Hacking
🇫🇷 bazter.pro	2026-09-05 06:06:52 (6 hours ago)	Auto-Ban [2026-09-05 09:06:52]: CRITICAL: .env attack; DC: Oracle Corporation [Paths: 53] \| Details: ... show more Auto-Ban [2026-09-05 09:06:52]: CRITICAL: .env attack; DC: Oracle Corporation [Paths: 53] \| Details: Exploit trap paths: /.env.production, /.env, /.env.bak, /.env.local, /.env.example \| Sensitive files/paths: /.env.production, /.env, /.env.bak, /.env.local, /.env.example \| 404 errors (52): /.env.example, /wp-login.php, /swagger/v1/swagger.json, /api/openapi.json, /.DS_Store, /console, /robots.txt, /.docker/config.json, /login, /db.sql (and 42 more) \| Other paths: / show less	Web App Attack Hacking
🇩🇪 FD-IX	2026-09-05 05:10:36 (7 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇩🇪 enjoyably	2026-09-05 05:09:20 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 jeannelboutique	2026-09-05 05:09:01 (7 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 134.185.90.18 (SG/Singapore/-)	SQL Injection
🇩🇪 pltcldvlpr	2026-09-05 04:46:02 (8 hours ago)	CMS/framework probe: 134.185.90.18 - - [05/Sep/2026:06:46:02 +0200] "GET /.env.production HTTP/1.1" ... show more CMS/framework probe: 134.185.90.18 - - [05/Sep/2026:06:46:02 +0200] "GET /.env.production HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" asn=31898 org="Oracle Corporation" country=SG ... show less	Web App Attack
🇺🇸 stechusa	2026-09-05 04:43:41 (8 hours ago)	[Askari] \| country=SG \| ASN=Oracle Corporation \| Behavior: Bot-like session, High error rate, HTTP/1 ... show more [Askari] \| country=SG \| ASN=Oracle Corporation \| Behavior: Bot-like session, High error rate, HTTP/1.1 over TLS, No referrer on deep pages, Request burst show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-09-05 04:43:41 (8 hours ago)	country=SG \| ASN=Oracle Corporation \| 60% 4xx error rate (6/10 requests) \| 50 requests with only 1 s ... show more country=SG \| ASN=Oracle Corporation \| 60% 4xx error rate (6/10 requests) \| 50 requests with only 1 static assets (2%) - likely automated \| Average 0.25s between page loads (5 pages in 1.0s) show less	Bad Web Bot DDoS Attack
🇨🇭 cybertailor	2026-09-05 04:43:32 (8 hours ago)	134.185.90.18 - - [05/Sep/2026:09:43:29 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Windows NT ... show more 134.185.90.18 - - [05/Sep/2026:09:43:29 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.185.90.18 - - [05/Sep/2026:09:43:29 +0500] "GET /.env HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.185.90.18 - - [05/Sep/2026:09:43:29 +0500] "GET /.env.local HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.185.90.18 - - [05/Sep/2026:09:43:30 +0500] "GET /.env.example HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.185.90.18 - - [05/Sep/2026:09:43:30 +0500] "GET /.env.production HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Port Scan
🇹🇷 oalver	2026-09-05 03:18:16 (9 hours ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_http. S ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_http. Sources: honeypot. First seen: 2026-09-04. Risk score: 100/100. show less	Web App Attack
🇩🇪 Ano_Nym	2026-09-04 23:58:52 (12 hours ago)	CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/http-sensitive-files	Web App Attack
🇺🇸 LMAS	2026-09-04 23:52:24 (13 hours ago)	Automated scan detected. Probe type: Zero-Day/Wildcard Probe. Requested: /width=device-width,%20init ... show more Automated scan detected. Probe type: Zero-Day/Wildcard Probe. Requested: /width=device-width,%20initial-scale=1.0 — Honeypot triggered. show less	Brute-Force Web App Attack
🇧🇾 lns.bz	2026-09-04 23:45:59 (13 hours ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 EvoX	2026-09-04 23:43:40 (13 hours ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (Windows NT ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip,deflate,br; 8000 [1] TCP show less	Hacking Bad Web Bot
🇫🇷 ✨	2026-09-04 23:14:06 (13 hours ago)	Domain : www37.verysecuresites.net Rule : env 2026-09-04 23:11:18 W3SVC450 PLESK72 79.171.34.219 GET ... show more Domain : www37.verysecuresites.net Rule : env 2026-09-04 23:11:18 W3SVC450 PLESK72 79.171.34.219 GET /.env.production - 80 - 134.185.90.18 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 - - 79.171.34.219 404 0 2 1407 226 240 - - show less	Hacking SQL Injection

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.253.9.49

🇨🇳 202.46.62.116

🇺🇸 191.96.165.251

🇧🇷 186.237.15.148

🇧🇷 177.9.97.63

🇺🇸 156.232.13.218

🇪🇪 149.5.210.7

🇮🇩 103.81.195.62

🇧🇩 103.12.205.25

🇺🇸 66.29.156.149

🇰🇷 211.227.105.4

🇪🇨 190.57.149.194

🇧🇷 187.85.147.245

🇯🇵 124.155.125.131

🇻🇳 103.147.187.182

🇮🇩 103.76.15.174

🇺🇸 73.100.227.98

🇹🇼 35.229.203.108

🇭🇰 223.255.162.158

🇯🇵 221.241.56.90