JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.94.208.220

158.94.208.220

Recent Activity

45 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

OMEGATECH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS202412

Domain Name

omegatech.sc

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 158.94.208.220:

This IP address has been reported a total of 45 times from 28 distinct sources. 158.94.208.220 was first reported on November 5th 2025, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: Germany with 6 reports; United States of America with 5 reports; Spain with 4 reports. The most common categories in these recent reports were: Web App Attack 21 times; Bad Web Bot 6 times; Hacking 6 times; Brute-Force 4 times; SQL Injection 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rdpguard.com	2026-09-18 00:01:24 (2 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 MatCat	2026-09-17 23:05:09 (3 hours ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
Anonymous	2026-09-17 23:00:03 (3 hours ago)	suspicious request in access.log	Web App Attack
🇪🇸 robotstxt	2026-09-17 22:58:09 (4 hours ago)	158.94.208.220 - - [17/Sep/2026:22:57:33 +0000] "GET /.git/HEAD HTTP/1.1" 403 76260 "-" "wget/1.20.3 ... show more 158.94.208.220 - - [17/Sep/2026:22:57:33 +0000] "GET /.git/HEAD HTTP/1.1" 403 76260 "-" "wget/1.20.3" "-" edge="158.94.208.220" 158.94.208.220 - - [17/Sep/2026:22:57:33 +0000] "GET /.gitconfig HTTP/1.1" 403 76260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" edge="158.94.208.220" 158.94.208.220 - - [17/Sep/2026:22:57:34 +0000] "GET /.env HTTP/1.1" 403 76260 "-" "wget/1.20.3" "-" edge="158.94.208.220" 158.94.208.220 - - [17/Sep/2026:22:57:35 +0000] "GET /.env.production HTTP/1.1" 403 76260 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" edge="158.94.208.220" 158.94.208.220 - - [17/Sep/2026:22:57:35 +0000] "GET /.env.aws HTTP/1.1" 403 76260 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-" edge="158.94.208.220" ... show less	Web App Attack
🇩🇪 macrob	2026-09-17 22:56:13 (4 hours ago)	2026/09/17 22:56:12 [error] 3435309#3435309: 9639770 access forbidden by rule, client: 158.94.208.2 ... show more 2026/09/17 22:56:12 [error] 3435309#3435309: 9639770 access forbidden by rule, client: 158.94.208.220, server: binixo.ph, request: "GET /.git/config HTTP/1.1", host: "binixo.ph" 2026/09/17 22:56:12 [error] 3435309#3435309: 9639770 access forbidden by rule, client: 158.94.208.220, server: binixo.ph, request: "GET /.git/HEAD HTTP/1.1", host: "binixo.ph" 2026/09/17 22:56:12 [error] 3435309#3435309: 9639770 access forbidden by rule, client: 158.94.208.220, server: binixo.ph, request: "GET /.gitconfig HTTP/1.1", host: "binixo.ph" ... show less	Web App Attack
🇫🇷 Entalpi.net	2026-09-17 22:54:40 (4 hours ago)	Repeated requests against sensitive web endpoints	Web App Attack
🇫🇷 arsonist	2026-09-17 22:53:50 (4 hours ago)	[fail2ban] 2026-09-17T22:53:50.249154+00:00 arson caddy[1890453]: {"level":"info","ts":1789685630.24 ... show more [fail2ban] 2026-09-17T22:53:50.249154+00:00 arson caddy[1890453]: {"level":"info","ts":1789685630.2491264,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"158.94.208.220","remote_port":"45418","client_ip":"158.94.208.220","proto":"HTTP/1.1","method":"GET","host":"possum.city","uri":"/.git/config","headers":{"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"possum.city","ech":false}},"bytes_read":0,"user_id":"","duration":0.00005351,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}} ... show less	Bad Web Bot
🇫🇷 LRob	2026-09-17 22:51:35 (4 hours ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: / \| 2026-09-17 22:51 UTC show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-09-17 22:51:32 (4 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248	Exploited Host Web App Attack
🇺🇸 gamabe	2026-09-17 22:50:45 (4 hours ago)	Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.	Hacking
🇩🇪 Dominik Lysiak	2026-09-17 22:48:23 (4 hours ago)	158.94.208.220 - - [18/Sep/2026:00:48:22 +0200] "GET /.git/config HTTP/1.1" 200 30486 "-" "curl/7.64 ... show more 158.94.208.220 - - [18/Sep/2026:00:48:22 +0200] "GET /.git/config HTTP/1.1" 200 30486 "-" "curl/7.64.1" 158.94.208.220 - - [18/Sep/2026:00:48:22 +0200] "GET /.git/HEAD HTTP/1.1" 200 30484 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 158.94.208.220 - - [18/Sep/2026:00:48:23 +0200] "GET /.env HTTP/1.1" 200 30475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Web App Attack
🇨🇭 Sonics	2026-09-17 22:36:17 (4 hours ago)	Automated scanner: .env/.git/phpinfo scan	Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-17 22:35:57 (4 hours ago)	Multiple WAF Violations	Web App Attack
🇪🇸 el-brujo	2026-09-17 22:29:15 (4 hours ago)	158.94.208.220 - - [18/Sep/2026:00:29:14 +0200] "GET /.gitconfig HTTP/2.0" 404 15902 "-" "Mozilla/5. ... show more 158.94.208.220 - - [18/Sep/2026:00:29:14 +0200] "GET /.gitconfig HTTP/2.0" 404 15902 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 158.94.208.220 - - [18/Sep/2026:00:29:14 +0200] "GET /.env.production HTTP/2.0" 404 15902 "-" "curl/7.64.1" 158.94.208.220 - - [18/Sep/2026:00:29:14 +0200] "GET /.env.aws HTTP/2.0" 404 15902 "-" "curl/7.64.1" 158.94.208.220 - - [18/Sep/2026:00:29:14 +0200] "GET /config/config.json HTTP/2.0" 404 15902 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack Hacking
Anonymous	2026-09-17 18:14:50 (8 hours ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 191.96.196.91

🇧🇷 187.125.83.230

🇵🇱 176.53.159.197

🇺🇸 162.216.149.61

🇫🇮 147.185.133.159

🇫🇮 147.185.133.141

🇫🇮 147.185.133.73

🇨🇳 140.246.137.102

🇳🇬 102.88.137.213

🇵🇱 94.254.254.72

🇺🇿 82.215.94.244

🇩🇪 64.89.163.235

🇨🇳 61.185.178.171

🇧🇷 45.183.2.230

🇺🇸 216.180.246.187

🇺🇸 195.184.76.203

🇩🇪 193.124.20.254

🇮🇸 185.40.122.250

🇺🇸 162.216.150.119

🇺🇸 162.216.150.29