158.178.138.152

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
90% Critical
80 reports
46 reporters Β· latest 18 hours ago
ISP
Oracle Svenska AB
Usage Type
Data Center/Web Hosting/Transit
ASN
AS31898
Domain Name
oracle.com
Country
πŸ‡¦πŸ‡Ί Australia
City
Sydney, New South Wales
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
80 from 46 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡«πŸ‡· France 15 πŸ‡ΊπŸ‡Έ United States of America 9 πŸ‡©πŸ‡ͺ Germany 6
Most common categories Port Scan 48 Hacking 4 Brute-Force 2 Email Spam 1 SSH 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡ΉπŸ‡· savasboluk
Auto-blocked by Seczar SecureOps β€” Port Scan Detection (200 events in 10min) at 2026-11-10 00:16
Port Scan
πŸ‡«πŸ‡· EvoX
πŸ›‘οΈ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (3 bytes of payload); 20202 [2] TCP
Port Scan
πŸ‡―πŸ‡΅ jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (130 distinct dst hosts)
Port Scan
πŸ‡«πŸ‡· Kejult
Honeypot Finding: repeated TCP service probing on TCP/20202 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
πŸ‡ΊπŸ‡Έ LotPhantom
Port Scan Hacking
πŸ‡«πŸ‡· EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
Port Scan
πŸ‡«πŸ‡· Kejult
Honeypot Finding: repeated TCP service probing on TCP/20202 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
πŸ‡§πŸ‡· chronos
dnp: Connection attempt to TCP port 20000 (Distributed Network Protocol). | Port: 20000 | Proto: TCP | AS: AS31898 Oracle Corporation | Location: Australia, Bungarribee (~20km)
Port Scan
πŸ‡ΉπŸ‡· mixnet
Port scan: SYN-only probes to 104 hosts / 5 ports (20000, 20002, 20005, 20201, 20202) in 10 minutes. Detected by Mixnet network flow monitoring.
Port Scan
πŸ‡΅πŸ‡± bart@
Automated scan detection against redacted protected targets. Hits=1; port 20002 proto 6 detection dark_ip
Port Scan
πŸ‡¬πŸ‡§ wiredalter
Blocked by fail2ban on gVPS [20202/tcp] Source Port: 48242 TTL: 246 Packet Length: 40 TOS: 0x00 Analyzed by https://ip.wiredalter.com
Brute-Force SSH
πŸ‡«πŸ‡· Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 4 application-level events across 2 target ports and 4 source port(s). Ports: 20201/service, 20202/service. Sensors: Honeytrap.
Port Scan
Anonymous
20002/tcp (1 or more attempts)
Port Scan
πŸ‡«πŸ‡· Kejult
Honeypot Finding: repeated TCP service probing on TCP/20202 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
πŸ‡«πŸ‡· Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 4 application-level events across 2 target ports and 4 source port(s). Ports: 20005/service, 20201/service. Sensors: Honeytrap.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡°πŸ‡· 222.104.76.94
πŸ‡ΊπŸ‡Έ 157.245.91.65
πŸ‡ΊπŸ‡Έ 143.198.117.135
πŸ‡§πŸ‡ͺ 104.199.31.254
πŸ‡ΊπŸ‡Έ 104.28.233.161
πŸ‡·πŸ‡΄ 80.94.92.28
πŸ‡΅πŸ‡­ 58.69.196.148
πŸ‡³πŸ‡± 45.148.10.152
πŸ‡ΉπŸ‡³ 41.225.242.220
πŸ‡³πŸ‡± 204.76.203.43
πŸ‡§πŸ‡· 189.114.136.231
πŸ‡³πŸ‡΄ 167.104.108.17
πŸ‡°πŸ‡· 118.37.214.187
πŸ‡¨πŸ‡³ 117.188.139.227
πŸ‡³πŸ‡± 109.160.32.162
πŸ‡ΊπŸ‡Έ 104.28.233.155
πŸ‡­πŸ‡° 49.213.6.30
πŸ‡³πŸ‡± 45.156.87.150
πŸ‡ΊπŸ‡Έ 43.166.136.153
πŸ‡³πŸ‡± 213.209.159.242
feedback