JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

158.94.208.28

Recent Activity

Abuse confidence score ?

63% Elevated

12 reports

11 reporters · latest 17 hours ago

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 158.94.208.28

Export CSV

This IP address has been reported a total of 12 times from 11 distinct sources. 158.94.208.28 was first reported on October 24th 2026, and the most recent report was 17 hours ago. In the last 60 days, the top reporter locations were: France with 4 reports; Netherlands with 4 reports; Canada with 1 report. The most common categories in these recent reports were: Web App Attack 9 times; Bad Web Bot 6 times; Hacking 3 times; Brute-Force 1 time; DDoS Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ams_sec_user	2026-10-26 01:05:18 (17 hours ago)	Automated requests against a hosted website: 3 requests between 00:00 and 00:59 UTC; 3 probes for ex ... show more Automated requests against a hosted website: 3 requests between 00:00 and 00:59 UTC; 3 probes for exposed secrets/config files (/.env, /api/.env, /laravel/.env). Reported automatically. show less	Hacking Bad Web Bot Web App Attack
🇺🇸 EmilGH	2026-10-25 19:38:45 (23 hours ago)	158.94.208.28 - - [25/Oct/2026:19:38:07 +0000] "GET /api/.env HTTP/1.1" 403 4578 "-" "Mozilla/5.0 (M ... show more 158.94.208.28 - - [25/Oct/2026:19:38:07 +0000] "GET /api/.env HTTP/1.1" 403 4578 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [25/Oct/2026:19:38:08 +0000] "GET /laravel/.env HTTP/1.1" 403 4578 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [25/Oct/2026:19:38:08 +0000] "GET /.env HTTP/1.1" 403 4575 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [25/Oct/2026:19:38:09 +0000] "GET /api/.env HTTP/1.1" 403 4575 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [25/Oct/2026:19:38:10 +0000] "GET /laravel/.env HTTP/1.1" 403 4575 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [25/Oct/2026:19:38:11 +0000] "GET /.env HTTP/1.1" 403 4622 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/201 ... show less	Bad Web Bot Web App Attack
🇨🇦 Anytech	2026-10-25 19:17:28 (23 hours ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
🇳🇱 Mangelot Hosting	2026-10-25 19:09:27 (23 hours ago)	(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 158.94.208.28 (DE/Germany/-): 2 ... show more (web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 158.94.208.28 (DE/Germany/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇸🇪 Juha Jurvanen	2026-10-25 18:49:02 (23 hours ago)	Blocked by Scantide Guard on iis-rdweb-protection. Rule: Immediate HTTP block: high-confidence web a ... show more Blocked by Scantide Guard on iis-rdweb-protection. Rule: Immediate HTTP block: high-confidence web attack pattern matched '/.env'.. show less	Brute-Force
🇫🇷 Baking333	2026-10-25 18:30:19 (1 day ago)	[redacted] 158.94.208.28 - - [25/Oct/2026:19:30:17 +0100] "GET /.env HTTP/2.0" 301 291 "-" "Mozilla/ ... show more [redacted] 158.94.208.28 - - [25/Oct/2026:19:30:17 +0100] "GET /.env HTTP/2.0" 301 291 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" [redacted] 158.94.208.28 - - [25/Oct/2026:19:30:17 +0100] "GET /fr/.env/ HTTP/2.0" 404 34805 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-10-25 18:20:18 (1 day ago)	gie-17 : Block hidden directories=>/.env(/)	Hacking
🇫🇷 Baking333	2026-10-25 16:29:52 (1 day ago)	[redacted] 158.94.208.28 - - [25/Oct/2026:17:29:50 +0100] "GET /.env HTTP/1.1" 302 6751 0/47897 "-" ... show more [redacted] 158.94.208.28 - - [25/Oct/2026:17:29:50 +0100] "GET /.env HTTP/1.1" 302 6751 0/47897 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 443 [redacted] 158.94.208.28 - - [25/Oct/2026:17:29:51 +0100] "GET /api/.env HTTP/1.1" 302 1566 0/44464 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 443 show less	Bad Web Bot Web App Attack
🇫🇷 YF	2026-10-25 11:31:16 (1 day ago)	Environment file probe	Web App Attack
🇫🇷 LRNP	2026-10-24 22:33:22 (1 day ago)	_:80 158.94.208.28 - - [24/Oct/2026:22:33:22 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (M ... show more _:80 158.94.208.28 - - [24/Oct/2026:22:33:22 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-24 20:16:08 (1 day ago)	[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 158.94.208.28 - - [24/Oct/2026:22:16:04 +0200] "GET /.env HTTP/2.0" 403 401 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-24 19:33:17 (1 day ago)	158.94.208.28 - - [24/Oct/2026:21:32:42 +0200] "GET /.env HTTP/1.1" 403 7982 "-" "Mozilla/5.0 (Macin ... show more 158.94.208.28 - - [24/Oct/2026:21:32:42 +0200] "GET /.env HTTP/1.1" 403 7982 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [24/Oct/2026:21:32:43 +0200] "GET /api/.env HTTP/1.1" 403 7982 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [24/Oct/2026:21:32:43 +0200] "GET /laravel/.env HTTP/1.1" 403 7982 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [24/Oct/2026:21:32:43 +0200] "GET /.env HTTP/1.1" 403 541 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [24/Oct/2026:21:32:43 +0200] "GET /api/.env HTTP/1.1" 403 541 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.94.208.28 - - [24/Oct/2026:21:32:44 +0200] "GET /laravel/.env HTTP/1.1" 403 541 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/201001 ... show less	DDoS Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.206

🇳🇱 94.154.43.186

🇧🇷 45.226.133.211

🇵🇱 34.118.34.78

🇳🇱 195.178.110.227

🇷🇸 170.62.245.187

🇻🇳 113.161.222.150

🇩🇪 103.14.32.224

🇫🇷 85.217.140.10

🇮🇹 82.57.231.195

🇮🇹 81.127.183.123

🇮🇹 79.55.170.67

🇮🇹 79.1.46.174

🇭🇰 43.129.193.109

🇺🇸 34.48.179.51

🇸🇬 14.102.84.83

🇺🇸 216.25.89.148

🇹🇭 203.170.192.251

🇳🇱 200.138.46.254

🇺🇸 195.184.76.55