JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.94.210.148

158.94.210.148 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Fixed Line ISP
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.94.210.148

Whois 158.94.210.148

IP Abuse Reports for 158.94.210.148:

This IP address has been reported a total of 38 times from 32 distinct sources. 158.94.210.148 was first reported on May 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 IRISIO	2026-07-06 09:37:50 (1 day ago)	scans/SQL injection/spam posts : 12 queries	Web App Attack SQL Injection
🇳🇱 Mangelot Hosting	2026-07-04 08:53:44 (3 days ago)	(modsecurity) srv201 ModSecurity 158.94.210.148 (NL/The Netherlands/-): 10 in the last 3600 secs; Po ... show more (modsecurity) srv201 ModSecurity 158.94.210.148 (NL/The Netherlands/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇬🇧 Mendip_Defender	2026-07-04 08:40:30 (3 days ago)	158.94.210.148 - - [04/Jul/2026:09:40:12 +0100] "GET //images/images/cache.php HTTP/1.1" 403 21392 " ... show more 158.94.210.148 - - [04/Jul/2026:09:40:12 +0100] "GET //images/images/cache.php HTTP/1.1" 403 21392 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 158.94.210.148 - - [04/Jul/2026:09:40:17 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 5068 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 158.94.210.148 - - [04/Jul/2026:09:40:21 +0100] "GET //images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 403 21392 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2026-07-04 08:38:05 (3 days ago)	Bot / scanning and/or hacking attempts: GET //cache/cache/cache.php HTTP/1.1, GET //images/images/im ... show more Bot / scanning and/or hacking attempts: GET //cache/cache/cache.php HTTP/1.1, GET //images/images/images/images/images/cache.php HTTP/1.1, GET //images/images/images/images/images/images/images/images/c, GET //blogs/media/media/cache.php HTTP/1.1, GET //assets/images/images/cache.php HTTP/1.1, GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-07-04 08:33:56 (3 days ago)	158.94.210.148 - - [04/Jul/2026:11:33:56 +0300] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1 ... show more 158.94.210.148 - - [04/Jul/2026:11:33:56 +0300] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" 404 777 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web App Attack
🇺🇸 antlac1	2026-07-04 07:31:17 (3 days ago)	crowdsecurity/http-bad-user-agent	Brute-Force Web App Attack
🇷🇺 DZBOT	2026-07-04 07:28:10 (3 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇹 Progetto1	2026-07-04 07:05:02 (3 days ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇧🇪 taivas.nl	2026-07-04 07:02:02 (3 days ago)	Wordpress_Attack	Web App Attack
🇮🇩 securejdprop	2026-07-04 06:52:51 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 31). Ip 158.94.210.148 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-07-04 06:52:50.61629784 +0000 UTC show less	Hacking Web App Attack
🇩🇪 Lino Project	2026-07-04 06:50:43 (3 days ago)	158.94.210.148 - - [04/Jul/2026:08:50:39 +0200] "GET //images/images/cache.php HTTP/1.1" 403 17615 " ... show more 158.94.210.148 - - [04/Jul/2026:08:50:39 +0200] "GET //images/images/cache.php HTTP/1.1" 403 17615 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-07-04 06:28:10 (3 days ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 todix	2026-07-04 06:14:46 (3 days ago)	WebAttack or semilar from 158.94.210.148	Web App Attack
Anonymous	2026-07-04 06:05:18 (3 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (12/60 min)'; Requests=12	Port Scan
🇮🇩 Burayot	2026-07-04 05:26:16 (3 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 158.94.210.148 (-): 1 in the last 3 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 158.94.210.148 (-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 213.24.237.157

🇬🇧 194.50.235.157

🇺🇸 44.215.219.236

🇨🇳 39.97.238.183

🇬🇧 35.203.211.178

🇧🇷 201.17.133.138

🇳🇱 192.253.248.23

🇵🇦 190.140.57.221

🇨🇱 190.13.119.166

🇧🇷 187.45.55.105

🇰🇷 119.192.59.80

🇺🇸 92.204.128.6

🇱🇹 77.90.185.42

🇹🇼 60.199.224.55

🇭🇰 47.242.122.19

🇫🇷 45.151.122.129

🇳🇱 45.148.10.157

🇷🇴 2.57.122.168

🇸🇬 203.116.129.55

🇹🇼 198.235.24.84