JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.94.209.225

158.94.209.225 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Fixed Line ISP
ASN	AS202412
Hostname(s)	mail.goldenpatriotcard.com
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.94.209.225

Whois 158.94.209.225

IP Abuse Reports for 158.94.209.225:

This IP address has been reported a total of 22 times from 21 distinct sources. 158.94.209.225 was first reported on April 30th 2026, and the most recent report was 50 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Mendip_Defender	2026-07-17 16:52:50 (50 minutes ago)	158.94.209.225 - - [17/Jul/2026:17:52:35 +0100] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 5845 "- ... show more 158.94.209.225 - - [17/Jul/2026:17:52:35 +0100] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 5845 "-" "Go-http-client/1.1" 158.94.209.225 - - [17/Jul/2026:17:52:35 +0100] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 5845 "-" "Go-http-client/1.1" 158.94.209.225 - - [17/Jul/2026:17:52:35 +0100] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 5845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Hacking Web App Attack
🇮🇹 mediarama.com	2026-07-17 16:03:03 (1 hour ago)	Banned by Fail2Ban	Web App Attack
🇫🇷 mail.avx.gr	2026-07-17 16:02:47 (1 hour ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 158.94.209.225 - - [17/Jul/2026:19:02:46 +0300] "G ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 158.94.209.225 - - [17/Jul/2026:19:02:46 +0300] "GET /administrator/ HTTP/1.1" 404 63392 "-" "Go-http-client/1.1" show less	Web App Attack
Anonymous	2026-07-17 15:40:13 (2 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇱🇺 conseilgouz	2026-07-17 15:13:23 (2 hours ago)	are-Joomla Admin : try to force the door...	Hacking
Anonymous	2026-07-17 14:58:00 (2 hours ago)	POST /wp-admin/admin-ajax.php - Blocked access	Web App Attack
Anonymous	2026-07-17 11:00:22 (6 hours ago)	Banned by Fail2Ban on server	Web App Attack
Anonymous	2026-07-17 10:50:09 (6 hours ago)	Command Injection Exploit Sensor - HTTP (Request) - Variant 2	Hacking
🇨🇿 ddw	2026-07-17 10:41:03 (7 hours ago)	ModSecurity detection - Rules: 949110(Inbound Anomaly Score Exceeded (Total Score: 10))	Web App Attack
🇨🇭 Origon	2026-07-17 10:37:13 (7 hours ago)	http-wordpress-scan - IP: 158.94.209.225 - time="2026-07-17T12:37:13+02:00" level=info msg="(555f66 ... show more http-wordpress-scan - IP: 158.94.209.225 - time="2026-07-17T12:37:13+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 158.94.209.225 (NL/214943) : 4h ban on Ip 158.94.209.225" module=db show less	Web App Attack
🇨🇭 4server	2026-07-17 10:26:21 (7 hours ago)	[FriJul1712:26:17.8528112026][security2:error][pid3974267:tid3974616][client158.94.209.225:0]ModSecu ... show more [FriJul1712:26:17.8528112026][security2:error][pid3974267:tid3974616][client158.94.209.225:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"larademarco.ch\"][uri\"/\"][unique_id\"aloDSa3Y44GaIjKhVZUwFQAAAMo\"] show less	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-07-17 09:48:59 (7 hours ago)	[Fri Jul 17 19:48:58.281456 2026] [security2:error] [pid 627872] [client 158.94.209.225:55246] [clie ... show more [Fri Jul 17 19:48:58.281456 2026] [security2:error] [pid 627872] [client 158.94.209.225:55246] [client 158.94.209.225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/"] [unique_id "aln6ingdxTV2bYDIOuNJYQAAABA"] ... show less	Web App Attack
🇫🇷 dynamix	2026-07-17 07:29:59 (10 hours ago)	Multiple WAF Violations	Web App Attack
🇩🇪 macrob	2026-07-17 06:58:37 (10 hours ago)	2026/07/17 06:58:35 [error] 4078987#4078987: 383062789 access forbidden by rule, client: 158.94.209 ... show more 2026/07/17 06:58:35 [error] 4078987#4078987: 383062789 access forbidden by rule, client: 158.94.209.225, server: binixo.com.ar, request: "POST /wp-admin/admin-ajax.php HTTP/2.0", host: "binixo.com.ar" 2026/07/17 06:58:35 [error] 4078988#4078988: 383062798 access forbidden by rule, client: 158.94.209.225, server: binixo.com.ar, request: "POST /wp-admin/admin-ajax.php HTTP/2.0", host: "binixo.com.ar" 2026/07/17 06:58:35 [error] 4078987#4078987: 383062799 access forbidden by rule, client: 158.94.209.225, server: binixo.com.ar, request: "POST /wp-admin/admin-ajax.php HTTP/2.0", host: "binixo.com.ar" ... show less	Web App Attack
🇺🇸 nyt	2026-07-17 06:27:39 (11 hours ago)	Sensitive File Probe, Unusual POST to admin-ajax with 400 response	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 206.62.136.109

🇬🇧 195.96.139.66

🇭🇰 152.32.189.59

🇿🇼 143.105.37.92

🇨🇦 85.217.149.74

🇳🇱 85.11.167.7

🇺🇸 3.236.255.38

🇬🇧 195.96.139.125

🇨🇳 146.56.197.150

🇺🇸 107.174.191.167

🇺🇸 104.168.67.93

🇩🇪 94.176.172.57

🇫🇷 13.140.189.26

🇺🇸 216.25.89.91

🇺🇸 195.184.76.170

🇩🇪 194.88.98.108

🇷🇴 80.94.92.55

🇺🇸 195.184.76.141

🇮🇳 103.105.97.244

🇪🇸 88.25.51.144