JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.199.152.167

134.199.152.167 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.199.152.167

Whois 134.199.152.167

IP Abuse Reports for 134.199.152.167:

This IP address has been reported a total of 45 times from 34 distinct sources. 134.199.152.167 was first reported on March 10th 2026, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 sid3windr	2026-03-12 20:46:39 (4 months ago)	GET /.env (Tarpitted for 1d15h8m27s, wasted 8.06MB)	Web App Attack
🇺🇸 octageeks.com	2026-03-12 04:08:49 (4 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇫🇷 service Informatique	2026-03-12 04:00:37 (4 months ago)	GET /wordpress	Web App Attack
🇳🇱 homeshowdomain.nl	2026-03-11 23:00:26 (4 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-03-10. show less	Web App Attack SSH Hacking
🇬🇧 sincler	2026-03-11 11:51:00 (4 months ago)	134.199.152.167 - - [11/Mar/2026:11:06:06 +0000] "GET /public/vendor/laravel-filemanager/js/script.j ... show more 134.199.152.167 - - [11/Mar/2026:11:06:06 +0000] "GET /public/vendor/laravel-filemanager/js/script.js HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-11 11:34:09 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 134.199.152.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 134.199.152.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 07:34:06.482380 2026] [security2:error] [pid 15672:tid 15672] [client 134.199.152.167:14732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odinsglobalsolution.com.illumoonatedtarot.com"] [uri "/.env"] [unique_id "abFTLmGRGRXAM1j-yHxEowAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gamabe	2026-03-11 11:28:32 (4 months ago)	Detected crowdsecurity/http-cve-probing attack pattern. Reported by CrowdSec IDS.	Port Scan
🇩🇪 Hary74656	2026-03-11 11:27:12 (4 months ago)	[Wed Mar 11 12:26:57.195061 2026] [security2:error] [pid 124437:tid 124584] [remote 134.199.152.167: ... show more [Wed Mar 11 12:26:57.195061 2026] [security2:error] [pid 124437:tid 124584] [remote 134.199.152.167:65140] [client 134.199.152.167] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "odin.26th.eu"] [uri "/.git/config"] [unique_id "abFRgcZHvP1PXmI-lR3uwgAC0wU"] [Wed Mar 11 12:26:57.197474 2026] [security2:error] [pid 124437:tid 124580] [remote 134.199.152.167:65140] [client 134.199.152.167] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [fi ... show less	Web App Attack
🇺🇸 Charlesiv	2026-03-11 10:00:27 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN ... show more Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC) Protocol: HTTP/2 (GET method) Endpoint: /.env Timestamp: 2026-03-11T09:38:56Z Ray ID: 9da996d0e8b5e7ec UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 Francisco Vallejo	2026-03-11 09:51:29 (4 months ago)	[Wed Mar 11 10:51:28.603741 2026] [authz_core:error] [pid 1655925:tid 135248981518016] [client 134.1 ... show more [Wed Mar 11 10:51:28.603741 2026] [authz_core:error] [pid 1655925:tid 135248981518016] [client 134.199.152.167:35332] AH01630: client denied by server configuration: proxy:http://giedi:3000/ [Wed Mar 11 10:51:28.869717 2026] [authz_core:error] [pid 1655925:tid 135248973125312] [client 134.199.152.167:35332] AH01630: client denied by server configuration: proxy:http://giedi:3000/.env [Wed Mar 11 10:51:29.137294 2026] [authz_core:error] [pid 1655925:tid 135248025208512] [client 134.199.152.167:35332] AH01630: client denied by server configuration: proxy:http://giedi:3000/wp [Wed Mar 11 10:51:29.403816 2026] [authz_core:error] [pid 1655925:tid 135248033601216] [client 134.199.152.167:35406] AH01630: client denied by server configuration: proxy:http://giedi:3000/new [Wed Mar 11 10:51:29.403816 2026] [authz_core:error] [pid 1655926:tid 135248704689856] [client 134.199.152.167:35348] AH01630: client denied by server configuration: proxy:http://giedi:3000/ ... show less	Brute-Force SSH
🇫🇮 as211431.net	2026-03-11 09:49:22 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (POST method) Endpoint: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Interceptor_HQ	2026-03-11 09:46:23 (4 months ago)	request_uri: / -- automatic report --	Brute-Force Hacking
🇫🇷 masterguru	2026-03-11 08:27:24 (4 months ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 agenciahypelab.com.br	2026-03-11 08:27:14 (4 months ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-03-11 07:49:57 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 134.199.152.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 134.199.152.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 03:49:50.142771 2026] [security2:error] [pid 6390:tid 6390] [client 134.199.152.167:15322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oceanrich.biz"] [uri "/.env"] [unique_id "abEenkgnm24EE60E2l4Q6wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.198.152

🇺🇦 109.254.160.11

🇺🇸 20.64.106.91

🇺🇸 205.210.31.110

🇬🇧 195.140.214.20

🇬🇧 192.248.150.180

🇳🇱 185.226.197.39

🇨🇴 181.49.8.57

🇺🇸 162.216.150.116

🇮🇳 152.32.156.117

🇫🇮 147.185.133.137

🇷🇴 141.98.83.48

🇯🇵 135.149.57.58

🇮🇳 122.187.229.201

🇲🇾 113.211.214.201

🇿🇦 102.182.46.102

🇺🇸 91.230.168.236

🇷🇺 89.169.22.239

🇺🇸 65.49.1.183

🇨🇳 60.204.200.202