JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.96.225.54

134.96.225.54 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 19%: ?

19%

ISP	Universitaet des Saarlandes, Saarbruecken
Usage Type	University/College/School
ASN	AS680
Hostname(s)	hackerbait54.cispa.uni-saarland.de
Domain Name	uni-sb.de
Country	🇩🇪 Germany
City	Homburg, Saarland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.96.225.54

Whois 134.96.225.54

IP Abuse Reports for 134.96.225.54:

This IP address has been reported a total of 28 times from 17 distinct sources. 134.96.225.54 was first reported on May 21st 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Anytech	2026-06-15 18:29:33 (1 month ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇸🇪 KIDOS	2026-06-11 15:00:20 (1 month ago)	malicious activity	Web App Attack
🇺🇸 Rayulcifer	2026-06-11 05:55:22 (1 month ago)	134.96.225.54 - - [11/Jun/2026:00:54:42 -0500] "GET /server/api/security/csrf HTTP/2.0" 204 649 "htt ... show more 134.96.225.54 - - [11/Jun/2026:00:54:42 -0500] "GET /server/api/security/csrf HTTP/2.0" 204 649 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [11/Jun/2026:00:54:42 -0500] "GET /server/api/authn/status HTTP/2.0" 200 352 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [11/Jun/2026:00:54:42 -0500] "GET /server/api/config/properties/google.analytics.key HTTP/2.0" 200 240 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [11/Jun/2026:00:54:43 -0500] "GET /server/api/config/properties/registration.verification.enabled HTTP/2.0" 200 220 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0. ... show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-06-11 05:05:05 (1 month ago)	12.238 requests in 1 hour (5d14h59m)	Brute-Force Bad Web Bot
🇵🇱 Ma ma	2026-06-10 18:51:00 (1 month ago)	page scanning	Web App Attack
🇺🇸 Rayulcifer	2026-06-05 14:29:13 (1 month ago)	134.96.225.54 - - [05/Jun/2026:09:28:25 -0500] "GET /server/api/security/csrf HTTP/2.0" 204 415 "htt ... show more 134.96.225.54 - - [05/Jun/2026:09:28:25 -0500] "GET /server/api/security/csrf HTTP/2.0" 204 415 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [05/Jun/2026:09:28:25 -0500] "GET /server/api/config/properties/google.analytics.key HTTP/2.0" 200 240 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [05/Jun/2026:09:28:25 -0500] "GET /server/api/authn/status HTTP/2.0" 200 361 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [05/Jun/2026:09:28:26 -0500] "GET /server/api/config/properties/registration.verification.enabled HTTP/2.0" 200 220 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0. ... show less	Hacking Web App Attack
🇮🇩 David Koswari	2026-05-25 05:23:00 (1 month ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇸🇪 KIDOS	2026-05-23 07:30:15 (2 months ago)	malicious activity	Web App Attack
🇦🇺 Anytech	2026-05-22 12:12:59 (2 months ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇸🇪 KIDOS	2026-05-06 09:40:59 (2 months ago)	malicious activity	Web App Attack
🇺🇸 Rayulcifer	2026-05-05 21:39:05 (2 months ago)	134.96.225.54 - - [05/May/2026:16:38:19 -0500] "GET /server/api/security/csrf HTTP/2.0" 204 415 "htt ... show more 134.96.225.54 - - [05/May/2026:16:38:19 -0500] "GET /server/api/security/csrf HTTP/2.0" 204 415 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [05/May/2026:16:38:19 -0500] "GET /server/api/authn/status HTTP/2.0" 200 357 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [05/May/2026:16:38:19 -0500] "GET /server/api/config/properties/google.analytics.key HTTP/2.0" 200 249 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [05/May/2026:16:38:19 -0500] "GET /server/api/config/properties/registration.verification.enabled HTTP/2.0" 200 220 "https://tesis.pucp.edu.pe/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0. ... show less	Hacking Web App Attack
🇦🇺 Anytech	2026-04-15 02:19:12 (3 months ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇦🇺 aranguren.org	2026-04-09 07:29:10 (3 months ago)	134.96.225.54 - - [09/Apr/2026:17:28:40 +1000] "GET /cacti/include/themes/modern/jquery.multiselect. ... show more 134.96.225.54 - - [09/Apr/2026:17:28:40 +1000] "GET /cacti/include/themes/modern/jquery.multiselect.filter.css?bdc527651975f5ccfb3fd6f91af0bb93 HTTP/2.0" 200 402 "https://aranguren.org/cacti/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [09/Apr/2026:17:28:54 +1000] "GET /nagios/ HTTP/2.0" 401 1219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [09/Apr/2026:17:29:01 +1000] "GET /mrtg/mrtg-m.png HTTP/2.0" 200 414 "https://aranguren.org/mrtg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [09/Apr/2026:17:29:06 +1000] "GET /cgi-bin/mailgraph.css HTTP/2.0" 404 1156 "https://aranguren.org/cgi-bin/mailgraph.cgi" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96 ... show less	Bad Web Bot
🇦🇺 aranguren.org	2026-04-01 08:25:28 (3 months ago)	134.96.225.54 - - [01/Apr/2026:19:25:06 +1100] "GET /cacti/include/themes/modern/jquery.multiselect. ... show more 134.96.225.54 - - [01/Apr/2026:19:25:06 +1100] "GET /cacti/include/themes/modern/jquery.multiselect.filter.css?bdc527651975f5ccfb3fd6f91af0bb93 HTTP/2.0" 200 402 "https://aranguren.org/cacti/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [01/Apr/2026:19:25:14 +1100] "GET /nagios/ HTTP/2.0" 401 1219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [01/Apr/2026:19:25:19 +1100] "GET /mrtg/mrtg-m.png HTTP/2.0" 200 414 "https://aranguren.org/mrtg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96.225.54 - - [01/Apr/2026:19:25:22 +1100] "GET /cgi-bin/mailgraph.css HTTP/2.0" 404 1156 "https://aranguren.org/cgi-bin/mailgraph.cgi" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36" 134.96 ... show less	Bad Web Bot
🇩🇪 stopmalwareservice	2025-10-17 12:52:00 (9 months ago)	УЧАСТНИК БОТНЕТА MIRAI.	Hacking Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.15.16.44

🇺🇸 43.166.130.123

🇺🇸 216.126.225.6

🇵🇹 213.255.248.185

🇷🇴 193.32.162.27

🇫🇷 185.177.72.24

🇺🇦 178.212.98.189

🇺🇸 162.216.150.30

🇹🇭 158.46.167.51

🇨🇳 121.229.205.104

🇻🇳 116.99.174.58

🇭🇰 104.208.94.19

🇺🇸 104.164.201.77

🇨🇳 103.96.140.18

🇩🇪 69.5.169.232

🇺🇸 64.62.156.133

🇳🇱 45.148.10.152

🇺🇸 43.166.245.172

🇵🇹 216.170.118.60

🇧🇪 198.235.24.180