JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.199.156.248

134.199.156.248 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 88%: ?

88%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.199.156.248

Whois 134.199.156.248

IP Abuse Reports for 134.199.156.248:

This IP address has been reported a total of 45 times from 29 distinct sources. 134.199.156.248 was first reported on March 14th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-06 16:32:44 (1 week ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇬🇧 openstrike.co.uk	2026-07-03 05:15:26 (2 weeks ago)	4 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇳🇱 homeshowdomain.nl	2026-07-02 21:59:53 (2 weeks ago)	Auto-ban: >3000 req/min op 2026-07-02	Web App Attack SSH Hacking
🇬🇧 Smish	2026-07-02 12:41:29 (2 weeks ago)	HONEYPOT HIT --> Fail2ban time=1782996088 log=2026-07-02T13:41:28+01:00 ip=134.199.156.248 host=as21 ... show more HONEYPOT HIT --> Fail2ban time=1782996088 log=2026-07-02T13:41:28+01:00 ip=134.199.156.248 host=as210667.net method=GET uri="/.git/config" status=404 ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ref="-" rid=2267cefc7e6b9ef7886b7e1e3a344800 show less	Web App Attack
🇬🇧 Smish	2026-07-02 11:39:50 (2 weeks ago)	HONEYPOT HIT --> Fail2ban time=1782992388 log=2026-07-02T12:39:48+01:00 ip=134.199.156.248 host=as21 ... show more HONEYPOT HIT --> Fail2ban time=1782992388 log=2026-07-02T12:39:48+01:00 ip=134.199.156.248 host=as210667.net method=GET uri="/.git/config" status=404 ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ref="-" rid=6a6f09fa652fbc6d86cb55f3f27bb342 show less	Web App Attack
🇬🇧 foxxelabs	2026-07-02 10:39:01 (2 weeks ago)	Automated report from FoxxeLabs Sentinel. Path probed: /.git/config \| Project: anseo \| Reason(s): Kn ... show more Automated report from FoxxeLabs Sentinel. Path probed: /.git/config \| Project: anseo \| Reason(s): Known exploit path: /.git/config; AbuseIPDB score: 100/100 \| User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/5 show less	Web App Attack
🇬🇧 Oakley	2026-07-02 09:06:47 (2 weeks ago)	(confirmed_bot_sig) Confirmed bot	Hacking
Anonymous	2026-07-02 08:49:05 (2 weeks ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 08:44:00 (2 weeks ago)	(mod_security) mod_security (id:949110) triggered by 134.199.156.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:949110) triggered by 134.199.156.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 04:43:52.481912 2026] [security2:error] [pid 6224:tid 6224] [client 134.199.156.248:59800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "joycepelham.com"] [uri "/.git/config"] [unique_id "akYkyKO3A2xWAw7TbpdGeQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-07-02 08:13:45 (2 weeks ago)	dot file probe	Web App Attack
Anonymous	2026-07-02 07:38:55 (2 weeks ago)	134.199.156.248 - - [02/Jul/2026:07:38:54 +0000] "GET /.git/config HTTP/1.1" 404 437 "-" "Mozilla/5. ... show more 134.199.156.248 - - [02/Jul/2026:07:38:54 +0000] "GET /.git/config HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-02 06:34:02 (2 weeks ago)	Web vulnerability probing: /.git/config	Web App Attack
🇬🇧 pinguin	2026-07-02 06:23:01 (2 weeks ago)	Triggered Cloudflare WAF (firewallManaged) from AU. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from AU. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-02 05:37:51 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 134.199.156.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 134.199.156.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:37:47.242561 2026] [security2:error] [pid 28522:tid 28522] [client 134.199.156.248:50462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eagrant.com"] [uri "/.git/config"] [unique_id "akX5K-77wWCfBBRljy15HQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-07-02 05:17:18 (2 weeks ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 194.180.48.31

🇺🇸 2a04:4e40:e010:0:580:da67:3346:1533

🇩🇪 172.111.80.23

🇲🇽 147.78.1.103

🇹🇼 101.13.5.63

🇮🇳 34.100.180.213

🇧🇩 202.4.122.181

🇺🇸 162.216.149.208

🇨🇻 156.252.139.23

🇨🇦 108.162.242.91

🇺🇸 47.251.53.147

🇻🇳 45.117.177.47

🇩🇪 202.71.141.170

🇺🇸 193.36.225.93

🇺🇸 172.98.32.251

🇺🇸 172.98.32.237

🇺🇸 172.98.32.6

🇺🇸 142.251.156.4

🇺🇸 136.144.35.82

🇯🇴 92.253.93.24