JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.199.168.6

134.199.168.6 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 37%: ?

37%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.199.168.6

Whois 134.199.168.6

IP Abuse Reports for 134.199.168.6:

This IP address has been reported a total of 36 times from 31 distinct sources. 134.199.168.6 was first reported on March 10th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 maxpower	2026-07-17 06:07:08 (8 minutes ago)	(PERMBLOCK) 134.199.168.6 (AU/Australia/-) has had more than 4 temp blocks in the last 86400 secs; P ... show more (PERMBLOCK) 134.199.168.6 (AU/Australia/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇩🇪 maxpower	2026-07-17 05:04:57 (1 hour ago)	(wp_login) REGOLA 1 - WP Login Attack 134.199.168.6 (AU/Australia/-): 5 in the last 3600 secs; Ports ... show more (wp_login) REGOLA 1 - WP Login Attack 134.199.168.6 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.168.6 - - [17/Jul/2026:06:17:05 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:06:28:57 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:06:40:55 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:06:52:39 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:07:04:56 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it show less	Port Scan
🇩🇪 maxpower	2026-07-17 04:05:41 (2 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 134.199.168.6 (AU/Australia/-): 5 in the last 3600 secs; Ports ... show more (wp_login) REGOLA 1 - WP Login Attack 134.199.168.6 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.168.6 - - [17/Jul/2026:05:20:54 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:05:31:57 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:05:43:02 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:05:54:18 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:06:05:30 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it show less	Port Scan
🇩🇪 LRob	2026-07-17 03:57:04 (2 hours ago)	CrowdSec: lrob/wp-login-slow-bf \| req: /wp-login.php \| UA: Mozilla/5.0	Brute-Force Web App Attack
🇩🇪 maxpower	2026-07-17 03:09:40 (3 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 134.199.168.6 (AU/Australia/-): 5 in the last 3600 secs; Ports ... show more (wp_login) REGOLA 1 - WP Login Attack 134.199.168.6 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.168.6 - - [17/Jul/2026:04:29:25 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:04:37:14 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:04:47:30 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:04:58:38 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:05:09:37 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it show less	Port Scan
🇫🇷 masterguru	2026-07-17 02:57:19 (3 hours ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-197)	Hacking
🇩🇪 maxpower	2026-07-17 02:22:54 (3 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 134.199.168.6 (AU/Australia/-): 5 in the last 3600 secs; Ports ... show more (wp_login) REGOLA 1 - WP Login Attack 134.199.168.6 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.168.6 - - [17/Jul/2026:03:33:03 +0200] "GET /wp-login.php HTTP/1.1" 404 355 "-" "Mozilla/5.0" "-" host=mlocale.com 134.199.168.6 - - [17/Jul/2026:04:03:39 +0200] "GET /wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:04:03:40 +0200] "GET /wp-login.php HTTP/1.1" 200 11515 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:04:03:41 +0200] "GET /?author=1 HTTP/1.1" 404 157822 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it 134.199.168.6 - - [17/Jul/2026:04:22:51 +0200] "POST /wp-login.php HTTP/1.1" 200 11990 "-" "Mozilla/5.0" "-" host=ramsesconsulting.it show less	Port Scan
🇩🇪 todix	2026-07-17 01:58:46 (4 hours ago)	Web App Attack Exploid from 134.199.168.6	Web App Attack
🇩🇪 EGP Abuse Dept	2026-07-17 01:46:48 (4 hours ago)	Scanning for web/db/file exploits on www.hoorpartners.nl	SQL Injection Bad Web Bot Web App Attack
🇩🇪 FSociety	2026-04-09 13:13:23 (3 months ago)	SSH Brute Force attempt blocked by fsociety sentinel	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-03-13 01:23:50 (4 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-03-12 00:42:33 (4 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-11 20:12:00 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 aboschke	2026-03-10 15:00:22 (4 months ago)	SSH brute force attempt. Tried invalid user: unknown	Brute-Force SSH
🇩🇪 ghostwarriors	2026-03-10 14:50:38 (4 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4883:1000::c

🇩🇪 202.71.141.170

🇨🇴 190.0.63.226

🇳🇱 185.212.129.205

🇳🇱 176.65.148.2

🇺🇸 162.216.149.36

🇺🇸 159.89.234.174

🇮🇳 122.187.230.215

🇻🇳 103.189.208.13

🇺🇸 100.29.192.27

🇮🇳 98.70.32.248

🇫🇷 91.196.152.120

🇷🇴 80.94.95.217

🇺🇸 34.138.112.84

🇧🇷 20.226.26.5

🇷🇴 2.57.121.112

🇧🇷 189.50.142.78

🇦🇷 186.22.117.120

🇺🇸 172.202.9.120

🇺🇸 147.185.132.151