JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.199.154.99

134.199.154.99 was found in our database!

This IP was reported 293 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.199.154.99

Whois 134.199.154.99

IP Abuse Reports for 134.199.154.99:

This IP address has been reported a total of 293 times from 159 distinct sources. 134.199.154.99 was first reported on February 19th 2025, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tecnicorioja	2026-08-22 22:01:37 (11 minutes ago)	(Mod_security)	Web App Attack Brute-Force Bad Web Bot
🇩🇪 4server	2026-08-22 21:07:26 (1 hour ago)	[SatAug2223:07:20.3115582026][security2:error][pid2957844:tid2957936][client134.199.154.99:0]ModSecu ... show more [SatAug2223:07:20.3115582026][security2:error][pid2957844:tid2957936][client134.199.154.99:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"viveretrentino.it\"][uri\"/.git/config\"][unique_id\"aooPiHWfBi3tGL7bKTg4FQAAAMY\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 20:58:27 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 134.199.154.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 134.199.154.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:58:19.138536 2026] [security2:error] [pid 10515:tid 10515] [client 134.199.154.99:53040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dtla2028.com"] [uri "/.git/config"] [unique_id "aooNawBKxok0Sgg9RJb9jQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-08-22 18:23:34 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 11:45:23 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 134.199.154.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 134.199.154.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 07:45:16.943566 2026] [security2:error] [pid 1937:tid 1937] [client 134.199.154.99:58348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyqci.eu"] [uri "/.git/config"] [unique_id "aomLzCMoVMBWF6nFnHfWCAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-22 10:31:15 (11 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config show less	Hacking Web App Attack
🇺🇸 HamSammich	2026-08-22 06:33:21 (15 hours ago)	Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-08-22T06:33Z).	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:12:05 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 134.199.154.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 134.199.154.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:11:58.676419 2026] [security2:error] [pid 30993:tid 30993] [client 134.199.154.99:49364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "generationedm.com"] [uri "/.git/config"] [unique_id "aok9rpbcTmqG4t595pFe4gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-08-22 05:15:32 (16 hours ago)	3 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇨🇿 akac	2026-08-22 05:01:57 (17 hours ago)	Web vulnerability scanning: HTTP/1.1 GET /.git/config	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 02:52:52 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 134.199.154.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 134.199.154.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 22:52:45.128429 2026] [security2:error] [pid 22362:tid 22387] [client 134.199.154.99:37742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgementz.org"] [uri "/.git/config"] [unique_id "aokO_XBfbyD503xYpSSHEwAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-08-22 02:11:49 (20 hours ago)	[22/Aug/2026:05:11:48 +0300] -- 134.199.154.99 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.gi ... show more [22/Aug/2026:05:11:48 +0300] -- 134.199.154.99 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
Anonymous	2026-08-22 02:05:05 (20 hours ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇫🇷 dynamix	2026-08-22 02:04:23 (20 hours ago)	Multiple WAF Violations	Web App Attack
🇫🇷 masterguru	2026-08-22 01:55:21 (20 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack

Showing 1 to 15 of 293 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.243

🇵🇰 43.230.94.183

🇬🇧 35.203.210.214

🇺🇸 34.23.125.105

🇺🇸 20.114.196.91

🇲🇴 182.93.50.90

🇳🇱 172.253.7.221

🇺🇸 104.184.22.56

🇺🇸 66.132.172.236

🇳🇱 45.148.10.151

🇮🇳 43.225.165.29

🇬🇧 206.237.74.48

🇧🇷 205.210.31.251

🇺🇸 162.243.51.77

🇺🇸 54.215.186.208

🇩🇪 23.88.47.15

🇬🇧 13.41.204.148

🇦🇷 181.104.153.166

🇸🇪 45.84.107.54

🇧🇪 35.240.10.126