JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.209.178.158

134.209.178.158 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 80%: ?

80%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.209.178.158

Whois 134.209.178.158

IP Abuse Reports for 134.209.178.158:

This IP address has been reported a total of 40 times from 25 distinct sources. 134.209.178.158 was first reported on July 15th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-06-17 08:01:08 (1 day ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-17 07:00:09 (1 day ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 06:06:55 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 134.209.178.158 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 134.209.178.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 02:06:51.049554 2026] [security2:error] [pid 9255:tid 9263] [client 134.209.178.158:50906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.86"] [uri "/.env.save"] [unique_id "ajI5e6VRLdsCZj5L5ZrWJgAAAQU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 chronos	2026-06-17 05:58:39 (1 day ago)	Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: United K ... show more Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: United Kingdom, Slough show less	Web App Attack Bad Web Bot Hacking
🇹🇷 Threat.live	2026-06-17 05:05:03 (1 day ago)	Suspicious Connection Attempts	Brute-Force
🇳🇱 Savvii	2026-06-17 03:03:34 (1 day ago)	15 attempts against mh-modsecurity-ban on chard	Brute-Force Web App Attack
🇧🇷 SOC PR	2026-06-17 02:36:39 (1 day ago)	IPS: Web Server Enforcement Violation.	Hacking
🇺🇸 TPI-Abuse	2026-06-17 02:15:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 134.209.178.158 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 134.209.178.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 22:15:35.351405 2026] [security2:error] [pid 21725:tid 21728] [client 134.209.178.158:46952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.124"] [uri "/.git/HEAD"] [unique_id "ajIDRzBtv23mCa30TWOlTwAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-17 01:33:01 (1 day ago)	Multiple WAF Violations	Web App Attack
🇳🇱 donarev419	2026-06-17 01:14:42 (1 day ago)	Port scan detected on port 2078 (connection without data transfer)	Port Scan
Anonymous	2026-06-17 01:14:02 (1 day ago)	[Tue Jun 16 18:13:56.693140 2026] [authz_core:error] [pid 1747457] [client 134.209.178.158:38968] AH ... show more [Tue Jun 16 18:13:56.693140 2026] [authz_core:error] [pid 1747457] [client 134.209.178.158:38968] AH01630: client denied by server configuration: /home/appowner/www/sec/.git [Tue Jun 16 18:13:57.868947 2026] [authz_core:error] [pid 1747472] [client 134.209.178.158:38970] AH01630: client denied by server configuration: /home/appowner/www/sec/.git [Tue Jun 16 18:13:59.033630 2026] [authz_core:error] [pid 1747469] [client 134.209.178.158:38978] AH01630: client denied by server configuration: /home/appowner/www/sec/.git [Tue Jun 16 18:14:00.578372 2026] [authz_core:error] [pid 1747419] [client 134.209.178.158:58292] AH01630: client denied by server configuration: /home/appowner/www/sec/.git [Tue Jun 16 18:14:01.941212 2026] [authz_core:error] [pid 1747399] [client 134.209.178.158:58300] AH01630: client denied by server configuration: /home/appowner/www/sec/.git ... show less	Brute-Force SSH
🇫🇷 ingroscart.it	2026-06-17 01:13:00 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 134.209.178.158 (GB/United Kingdom/-)	SQL Injection
🇺🇸 MPL	2026-06-17 01:02:12 (1 day ago)	tcp port scan (10 or more attempts)	Port Scan
🇷🇸 Scan	2026-06-17 00:16:38 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇮🇪 AutosOnShow	2026-06-17 00:15:06 (1 day ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-17 00:14:27.807 \|	Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.227.209.27

🇺🇸 65.49.1.220

🇺🇸 64.23.203.0

🇩🇪 148.230.70.139

🇺🇸 65.49.1.98

🇷🇺 62.192.226.83

🇩🇪 46.101.166.207

🇱🇹 45.227.254.170

🇺🇸 3.132.26.232

🇩🇪 167.94.145.17

🇺🇸 162.216.150.25

🇧🇷 138.97.67.85

🇮🇪 128.251.36.118

🇺🇸 103.4.251.106

🇩🇪 80.158.109.51

🇺🇸 45.41.179.21

🇬🇧 35.203.211.6

🇺🇸 20.190.190.130

🇺🇸 20.15.225.63

🇧🇬 5.188.206.46