JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.199.157.8

134.199.157.8 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.199.157.8

Whois 134.199.157.8

IP Abuse Reports for 134.199.157.8:

This IP address has been reported a total of 100 times from 56 distinct sources. 134.199.157.8 was first reported on November 14th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mail.avx.gr	2026-08-23 00:02:59 (1 hour ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 134.199.157.8 - - [22/Aug/2026:01:15:40 +0300] "G ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 134.199.157.8 - - [22/Aug/2026:01:15:40 +0300] "GET /.git/config HTTP/1.1" 403 6296 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇫🇷 dwmp	2026-08-22 21:26:39 (3 hours ago)	[22/Aug/2026:16:16:28.569158 +0200] aomvPAbYqkGMXEeqV3XPlAAAABE 134.199.157.8 41810 38.242.227.117 7 ... show more [22/Aug/2026:16:16:28.569158 +0200] aomvPAbYqkGMXEeqV3XPlAAAABE 134.199.157.8 41810 38.242.227.117 7081 [22/Aug/2026:20:36:51.300095 +0200] aonsQxbsw-CVC3Z3tkBIEwAAAIk 134.199.157.8 46076 38.242.227.117 7081 [22/Aug/2026:23:26:36.842188 +0200] aooUDKPveInzZaANSW4uGQAAAIQ 134.199.157.8 37594 38.242.227.117 7081 ... show less	Brute-Force SSH
🇫🇷 Stara	2026-08-22 20:55:41 (4 hours ago)	Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ... show more Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja) show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 19:06:29 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 134.199.157.8 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 134.199.157.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 15:06:25.090803 2026] [security2:error] [pid 10011:tid 10011] [client 134.199.157.8:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "demondomain.com"] [uri "/.git/config"] [unique_id "aonzMenI_TS0UNUqNdAD3wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-08-22 13:14:13 (11 hours ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇬🇧 Aetherweb Ark	2026-08-22 11:48:48 (13 hours ago)	(mod_security) mod_security (id:949110) triggered by 134.199.157.8 (AU/Australia/-): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 134.199.157.8 (AU/Australia/-): N in the last X secs show less	Web App Attack
🇺🇸 kosada.com	2026-08-22 09:58:22 (15 hours ago)	Web vulnerability probing: /.git/config	Web App Attack
🇵🇫 www.gregorymariani.com	2026-08-22 09:23:54 (15 hours ago)	134.199.157.8 - - [22/Aug/2026:00:08:10 +0000] "GET /.git/config HTTP/1.1" 404 179 "-" "Mozilla/5.0 ... show more 134.199.157.8 - - [22/Aug/2026:00:08:10 +0000] "GET /.git/config HTTP/1.1" 404 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 488 0.007 [default-shop-oscar-amartyne-8080] [] 10.244.41.147:8080 179 0.007 404 fc281db3dfbc98269921be4cb21de1d8 134.199.157.8 - - [22/Aug/2026:01:47:45 +0000] "GET /.git/config HTTP/1.1" 404 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 488 0.008 [default-shop-oscar-amartyne-8080] [] 10.244.41.147:8080 179 0.008 404 82507610199e0f41e378fe11c054f0f7 134.199.157.8 - - [22/Aug/2026:03:43:43 +0000] "GET /.git/config HTTP/1.1" 404 4036 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 494 0.003 [default-techdata-service-80] [] 10.244.41.130:3000 4036 0.003 404 0eb2e31162339ecb4a56c6f7009cbcc2 134.199.157.8 - - [22/Aug/2026:06:33:14 +0000] "GET /.git/config HTTP/1.1" 4 ... show less	Web App Attack
🇷🇴 iulianh	2026-08-22 09:02:44 (16 hours ago)	80,443	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-22 08:30:17 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 134.199.157.8 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 134.199.157.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 04:30:12.052882 2026] [security2:error] [pid 15512:tid 15512] [client 134.199.157.8:49894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vrmapping.net"] [uri "/.git/config"] [unique_id "aoleFAH1LrLCuSTbvZdOvwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:35:49 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 134.199.157.8 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 134.199.157.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:35:44.307107 2026] [security2:error] [pid 11733:tid 11733] [client 134.199.157.8:46306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title25.com"] [uri "/.git/config"] [unique_id "aolDQJEQaSYEwzZ5nrUR5wAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-08-22 05:15:00 (19 hours ago)	2 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇩🇪 Bedios GmbH	2026-08-22 05:13:41 (20 hours ago)	Login credentials theft attempt	Hacking
🇺🇸 ne1for23	2026-08-22 04:41:59 (20 hours ago)	Attempting to probe for sensitive information accidently exposed via git config. 134.199.157.8 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 134.199.157.8 - - [22/Aug/2026:04:41:58 +0000] "GET /.git/config HTTP/1.1" 403 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Hacking
🇺🇦 Olexiy Backend	2026-08-22 04:08:41 (21 hours ago)	134.199.157.8 ...	Bad Web Bot Web App Attack

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 184.174.37.90

🇵🇭 165.154.59.118

🇺🇸 162.214.101.10

🇷🇺 147.45.211.139

🇵🇰 111.92.157.208

🇺🇸 104.152.52.110

🇺🇸 65.49.1.129

🇿🇦 41.0.95.7

🇰🇷 221.161.235.168

🇺🇦 176.104.7.98

🇺🇸 104.152.52.109

🇺🇸 104.152.52.108

🇺🇸 84.37.241.68

🇬🇧 45.145.138.204

🇺🇸 23.26.84.20

🇨🇳 223.66.197.210

🇯🇵 205.234.228.34

🇧🇷 205.210.31.207

🇹🇼 198.235.24.113

🇹🇼 198.235.24.35