JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.199.172.5

134.199.172.5 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.199.172.5

Whois 134.199.172.5

IP Abuse Reports for 134.199.172.5:

This IP address has been reported a total of 57 times from 30 distinct sources. 134.199.172.5 was first reported on August 21st 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇴 adalbertoreyes.org	2026-08-23 15:37:36 (8 hours ago)	CategoryPortScan	Port Scan
🇬🇧 openstrike.co.uk	2026-08-23 05:15:10 (18 hours ago)	7 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇺🇸 jkhorvath.com	2026-08-22 22:01:26 (1 day ago)	Request for URL /.git/config	Phishing Brute-Force Web App Attack
🇵🇱 Budyn	2026-08-22 21:14:02 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.tech \| URI: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 etu brutus	2026-08-22 20:22:27 (1 day ago)	134.199.172.5 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇬🇧 consul.to	2026-08-22 13:41:27 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 paissangroup	2026-08-22 13:09:16 (1 day ago)	M	Web App Attack
🇳🇱 wlt-blocker	2026-08-22 08:37:26 (1 day ago)	Unauthorized access to webpage admin	Web App Attack
🇫🇮 paissangroup	2026-08-22 08:04:30 (1 day ago)	Multiple WAF Violations	Web App Attack
🇩🇪 4server	2026-08-22 07:31:37 (1 day ago)	[SatAug2209:31:32.4637332026][security2:error][pid2180830:tid2180939][client134.199.172.5:0]ModSecur ... show more [SatAug2209:31:32.4637332026][security2:error][pid2180830:tid2180939][client134.199.172.5:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"dsfiduciaria.ch\"][uri\"/.git/config\"][unique_id\"aolQVOmwVn16Vl87qh9RdQAAAM4\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:18:51 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 134.199.172.5 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 134.199.172.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:18:47.137720 2026] [security2:error] [pid 19148:tid 19172] [client 134.199.172.5:50388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elevapro.com"] [uri "/.git/config"] [unique_id "aok_RyHO5xA1z4X7pMKNawAAAVU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:32:35 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 134.199.172.5 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 134.199.172.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:32:31.264393 2026] [security2:error] [pid 3836:tid 3836] [client 134.199.172.5:53464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "framestoria.com"] [uri "/.git/config"] [unique_id "aok0b5TyITGMPO733TO5IQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 GEDAL	2026-08-22 05:24:31 (1 day ago)	Fail2ban webexploits @ <hostname> : 134.199.172.5 - - [22/Aug/2026:07:24:30 +0200] "GET /.git/config ... show more Fail2ban webexploits @ <hostname> : 134.199.172.5 - - [22/Aug/2026:07:24:30 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Brute-Force SSH
Anonymous	2026-08-22 04:45:03 (1 day ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇷🇴 iulianh	2026-08-22 04:25:20 (1 day ago)	80,443	Brute-Force SSH

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.227.188.160

🇺🇸 172.252.120.91

🇨🇳 115.191.32.57

🇫🇷 91.231.89.188

🇺🇸 66.132.172.141

🇧🇷 45.163.86.2

🇸🇾 5.0.79.174

🇰🇷 218.149.159.138

🇷🇺 217.64.142.242

🇺🇿 213.230.86.32

🇳🇱 192.253.248.229

🇺🇸 166.88.178.227

🇬🇧 154.16.44.254

🇨🇳 116.237.191.235

🇨🇳 115.190.173.110

🇲🇦 105.69.25.174

🇨🇳 101.96.193.131

🇺🇸 91.230.168.148

🇬🇧 35.203.210.69

🇻🇳 27.79.7.170