JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.209.125.90

134.209.125.90 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.209.125.90

Whois 134.209.125.90

IP Abuse Reports for 134.209.125.90:

This IP address has been reported a total of 146 times from 119 distinct sources. 134.209.125.90 was first reported on February 12th 2025, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 aks4226	2026-06-02 10:06:04 (1 day ago)	Bot search, attacking common web applications.	Web App Attack
🇺🇸 Charlesiv	2026-06-02 10:01:33 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14061 (DigitalOcean, LLC ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14061 (DigitalOcean, LLC) Protocol: HTTP/2 (GET method) Endpoint: /.env Timestamp: 2026-06-02T08:45:15Z Ray ID: a0552e491ff5f797 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0 show less	Bad Web Bot
🇩🇰 ScamAware	2026-06-02 09:56:48 (1 day ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Web App Attack
Anonymous	2026-06-02 09:52:05 (1 day ago)	Reported from Nginx log analysis 16. Log: 134.209.125.90 - - [02/Jun/2026:xx:xx:xx 0200] "GET /.env ... show more Reported from Nginx log analysis 16. Log: 134.209.125.90 - - [02/Jun/2026:xx:xx:xx 0200] "GET /.env HTTP/2.0" xxx xxx "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" "-" "US United States North Bergen" "AS14061" "DigitalOcean, LLC" show less	Port Scan Brute-Force SSH
🇺🇸 RamSet	2026-06-02 09:47:44 (1 day ago)	HTTP-Probe on port 443. 2 distinct paths probed in 1s. Sustained 3 req/min, 2 known bad path signatu ... show more HTTP-Probe on port 443. 2 distinct paths probed in 1s. Sustained 3 req/min, 2 known bad path signatures. Paths: /.env show less	Bad Web Bot Web App Attack
🇵🇱 Kitki30.com	2026-06-02 08:58:54 (1 day ago)	HTTP Probing. Log: 134.209.125.90 - - [02/Jun/2026:10:58:53 +0200] "GET /.env HTTP/1.1" 301 162 "-" ... show more HTTP Probing. Log: 134.209.125.90 - - [02/Jun/2026:10:58:53 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rip	2026-06-02 08:58:24 (1 day ago)	Restricted File Access Attempts	Port Scan Web App Attack
🇵🇱 ketovoila.pl	2026-06-02 08:51:49 (1 day ago)	ketovoila.pl web app secret/repository scan: hits=1; unique_paths=1; sample_paths=/.env; UA="Mozilla ... show more ketovoila.pl web app secret/repository scan: hits=1; unique_paths=1; sample_paths=/.env; UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"; window=2026-06-02T08:51:49Z..2026-06-02T08:51:49Z show less	Bad Web Bot Web App Attack
🇵🇱 ketovoila.pl	2026-06-02 08:51:49 (1 day ago)	ketovoila.pl web app secret/repository scan: hits=2; unique_paths=1; sample_paths=/.env; UA="Mozilla ... show more ketovoila.pl web app secret/repository scan: hits=2; unique_paths=1; sample_paths=/.env; UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"; window=2026-06-02T08:51:49Z..2026-06-02T09:21:14Z show less	Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-06-02 08:36:35 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇫🇷 breubit	2026-06-02 08:34:33 (1 day ago)	134.209.125.90 - - [02/Jun/2026:10:34:32 +0200] "GET /.env HTTP/1.1" 404 4416 "-" "Mozilla/5.0 (Maci ... show more 134.209.125.90 - - [02/Jun/2026:10:34:32 +0200] "GET /.env HTTP/1.1" 404 4416 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 08:33:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 134.209.125.90 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 134.209.125.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 04:33:52.369444 2026] [security2:error] [pid 3928:tid 3928] [client 134.209.125.90:53998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "judithchallender.com"] [uri "/.env"] [unique_id "ah6VcP2JiBDYKE875kMERgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 ki3	2026-06-02 08:31:57 (1 day ago)	Fail2Ban: Web App Attacks and Forum Spam 134.209.125.90 1780389117.0(JST)	Web Spam Bad Web Bot Web App Attack
🇳🇴 Bots.go.to.hell	2026-06-02 08:17:09 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access	Web App Attack Hacking
🇭🇺 bcsaba	2026-06-02 08:06:22 (1 day ago)	Probing for .env file: 134.209.125.90 - - [02/Jun/2026:10:06:19 +0200] "GET /.env HTTP/2.0" 403 146 ... show more Probing for .env file: 134.209.125.90 - - [02/Jun/2026:10:06:19 +0200] "GET /.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0" show less	Web App Attack

Showing 16 to 30 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 203.242.185.211

🇧🇴 181.115.147.5

🇫🇮 147.185.133.213

🇺🇸 147.185.132.201

🇺🇸 146.70.168.240

🇺🇸 47.254.24.46

🇳🇱 45.87.249.200

🇧🇪 34.156.104.73

🇺🇸 8.229.103.240

🇺🇸 216.133.145.86

🇳🇱 195.178.110.199

🇬🇧 193.163.125.169

🇯🇵 124.155.125.131

🇩🇪 91.98.236.136

🇺🇸 72.10.32.138

🇺🇸 66.132.195.60

🇸🇬 45.82.78.104

🇮🇩 103.178.16.18

🇫🇷 85.217.140.47

🇷🇺 80.69.186.68