JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

135.125.164.209

Neutral Activity

Abuse confidence score ?

0% Low Risk

28 reports

20 reporters · latest 1 year ago

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

135.125.164.209 has been reported 28 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 135.125.164.209

This IP address has been reported a total of 28 times from 20 distinct sources. 135.125.164.209 was first reported on June 15th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Mehmet_The_Script_Kiddie	2025-06-24 01:08:02 (1 year ago)	CloudFlare WAF REPORT: Disobey robots.txt. Suspicious web crawler.	Bad Web Bot Web App Attack
🇫🇮 TrafficAnalyser	2025-06-23 23:41:54 (1 year ago)	Probing "GET /.env HTTP/1.1"	Web App Attack
🇺🇸 TPI-Abuse	2025-06-23 23:07:54 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 135.125.164.209 (ip209.ip-135-125-164.eu): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 135.125.164.209 (ip209.ip-135-125-164.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 19:07:46.865057 2025] [security2:error] [pid 2251705:tid 2251705] [client 135.125.164.209:62711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blacktieokc.com"] [uri "/.env"] [unique_id "aFneQvvjiY5l3bvEs0B-QAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 sabrinagoom	2025-06-23 22:59:09 (1 year ago)	Triggered WAF (firewallManaged) from DE Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint ... show more Triggered WAF (firewallManaged) from DE Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Bad Web Bot
🇮🇩 Burayot	2025-06-23 21:26:21 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 135.125.164.209 (FR/France/ip209.ip- ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 135.125.164.209 (FR/France/ip209.ip-135-125-164.eu): 1 in the last 3600 secs show less	Web App Attack
🇳🇱 ParaBug	2025-06-23 20:15:01 (1 year ago)	135.125.164.209 - - [23/Jun/2025:22:15:00 +0200] "GET /.env HTTP/1.1" 301 493 "-" "Mozilla/5.0 (X11; ... show more 135.125.164.209 - - [23/Jun/2025:22:15:00 +0200] "GET /.env HTTP/1.1" 301 493 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Phishing Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2025-06-23 19:51:01 (1 year ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/ip209.ip-135-125-164.eu	Web App Attack
🇺🇸 TPI-Abuse	2025-06-23 19:48:38 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 135.125.164.209 (ip209.ip-135-125-164.eu): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 135.125.164.209 (ip209.ip-135-125-164.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 15:48:32.754072 2025] [security2:error] [pid 3306311:tid 3306311] [client 135.125.164.209:56040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alltecmachinerepair.com"] [uri "/.env"] [unique_id "aFmvkMomxvHNZAxAh1BjCAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-23 18:58:47 (1 year ago)	Fail2ban block	Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-06-23 16:43:14 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 135.125.164.209 (ip209.ip-135-125-164.eu): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 135.125.164.209 (ip209.ip-135-125-164.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 12:43:10.200127 2025] [security2:error] [pid 1105026:tid 1105026] [client 135.125.164.209:51898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4940brooklinedr.com"] [uri "/.env"] [unique_id "aFmEHlOxbGJsv9adWAKCMAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-23 15:46:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 135.125.164.209 (ip209.ip-135-125-164.eu): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 135.125.164.209 (ip209.ip-135-125-164.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 11:45:59.806840 2025] [security2:error] [pid 2944945:tid 2944945] [client 135.125.164.209:62637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1to8.org"] [uri "/.env"] [unique_id "aFl2t0zxDrddpx7o_FV4OwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Roper123	2025-06-23 15:24:48 (1 year ago)	Web app attack	Web App Attack
🇳🇱 Site.eu	2025-06-20 18:35:42 (1 year ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 Mendip_Defender	2025-06-20 18:00:23 (1 year ago)	[20/Jun/2025:19:00:18.126309 +0100] aFWhsr6MkklGOMCsYhfC4gAAAEY 135.125.164.209 48178 188.246.206.60 ... show more [20/Jun/2025:19:00:18.126309 +0100] aFWhsr6MkklGOMCsYhfC4gAAAEY 135.125.164.209 48178 188.246.206.60 7080 [20/Jun/2025:19:00:18.240132 +0100] aFWhsr6MkklGOMCsYhfC4wAAAEk 135.125.164.209 48182 188.246.206.60 7080 ... show less	Brute-Force
🇬🇧 pinguin	2025-06-19 06:07:53 (1 year ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /_profiler/phpinfo/phpinfo.php UA: Mozilla/5.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.38

🇬🇧 89.37.172.130

🇨🇳 218.4.214.115

🇨🇳 175.43.108.74

🇫🇮 147.185.133.1

🇺🇸 134.33.96.110

🇨🇳 121.31.210.125

🇵🇱 109.205.211.23

🇸🇬 101.47.13.135

🇳🇱 93.123.109.165

🇷🇺 77.91.65.161

🇩🇪 47.245.138.87

🇧🇪 34.76.163.250

🇳🇱 195.178.110.26

🇭🇰 168.76.20.229

🇫🇮 147.185.133.88

🇮🇳 144.31.146.233

🇮🇩 113.192.54.17

🇵🇰 103.121.179.22

🇳🇬 102.88.137.145