JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.94.210.154

158.94.210.154 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 16%: ?

16%

ISP	OMEGATECH
Usage Type	Fixed Line ISP
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.94.210.154

Whois 158.94.210.154

IP Abuse Reports for 158.94.210.154:

This IP address has been reported a total of 15 times from 11 distinct sources. 158.94.210.154 was first reported on January 6th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BellFix	2026-05-22 14:20:25 (1 month ago)	Fail2ban reported 158.94.210.154 for npm-docker	Web App Attack
🇳🇱 BellFix	2026-05-19 16:04:52 (1 month ago)	Fail2ban reported 158.94.210.154 for npm-docker	Web App Attack
🇳🇱 BellFix	2026-05-12 01:22:14 (1 month ago)	Fail2ban reported 158.94.210.154 for npm-docker	Web App Attack
🇷🇺 cleanweb	2026-05-01 20:16:08 (1 month ago)	Looking for /sendmail3.tar.gz, Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( ... show more Looking for /sendmail3.tar.gz, Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36 show less	Brute-Force Phishing
🇳🇱 loveprod	2026-04-30 04:35:56 (1 month ago)	158.94.210.154 - - [30/Apr/2026:07:35:55 +0300] "HEAD /.env.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Wi ... show more 158.94.210.154 - - [30/Apr/2026:07:35:55 +0300] "HEAD /.env.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36" 158.94.210.154 - - [30/Apr/2026:07:35:55 +0300] "HEAD /.env.php HTTP/1.1" 403 2956 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36" ... show less	Bad Web Bot
🇩🇪 Ha1fdan	2026-04-29 19:50:18 (1 month ago)	158.94.210.154 - - [28/Apr/2026:20:39:48 +0200] "HEAD /mail_config.php HTTP/2.0" 404 0 "-" "Mozilla/ ... show more 158.94.210.154 - - [28/Apr/2026:20:39:48 +0200] "HEAD /mail_config.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36" 158.94.210.154 - - [29/Apr/2026:11:38:49 +0200] "HEAD /mail.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36" 158.94.210.154 - - [29/Apr/2026:17:46:25 +0200] "HEAD /mail1.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36" 158.94.210.154 - - [29/Apr/2026:19:43:57 +0200] "HEAD /mail2.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36" 158.94.210.154 - - [29/Apr/2026:21:50:17 +0200] "HEAD /mail3.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.495 ... show less	Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-04-28 11:00:30 (1 month ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇳🇱 BellFix	2026-04-22 06:19:56 (2 months ago)	Fail2ban reported 158.94.210.154 for npm-docker	Web App Attack
🇩🇪 2048	2026-04-15 19:56:10 (2 months ago)	2026-04-15T20:56:06.535396+01:00 machodeer kernel: [4539786.549728] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-04-15T20:56:06.535396+01:00 machodeer kernel: [4539786.549728] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=158.94.210.154 DST=REDACTED LEN=60 TOS=0x08 PREC=0x20 TTL=41 ID=21505 DF PROTO=TCP SPT=54436 DPT=80 WINDOW=1460 RES=0x00 SYN URGP=0 2026-04-15T20:56:07.565203+01:00 machodeer kernel: [4539787.579734] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=158.94.210.154 DST=REDACTED LEN=60 TOS=0x08 PREC=0x20 TTL=41 ID=21506 DF PROTO=TCP SPT=54436 DPT=80 WINDOW=1460 RES=0x00 SYN URGP=0 2026-04-15T20:56:09.579801+01:00 machodeer kernel: [4539789.594813] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=158.94.210.154 DST=REDACTED LEN=60 TOS=0x08 PREC=0x20 TTL=41 ID=21507 DF PROTO=TCP SPT=54436 DPT=80 WINDOW=1460 RES=0x00 SYN URGP=0 show less	Port Scan
🇷🇺 Agrohim	2026-03-16 01:30:19 (3 months ago)	Gate I blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
Anonymous	2026-03-12 09:59:20 (3 months ago)	[Firewall Canary] Temporary ban due to firewall rule match [URI canary:*/config.php]	Web App Attack
🇬🇧 kiwi.network	2026-01-19 19:16:30 (5 months ago)	Web application fingerprinting: Binary file (standard input) matches	Hacking Exploited Host Web App Attack
🇺🇸 xserverx.ru	2026-01-14 17:27:56 (5 months ago)	Honeypot triggered: IP: 158.94.210.154 Request to: https://horny-pot.ru/wp-includes/js/admin-bar.js ... show more Honeypot triggered: IP: 158.94.210.154 Request to: https://horny-pot.ru/wp-includes/js/admin-bar.js Method: GET Host: horny-pot.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36 Referer: Direct Country: NL ASN: Unknown Triggered rules: (wp-content/\|wp-includes/\|wp-admin/), (admin\|administrator\|root\|superuser) Timestamp: 2026-01-14T17:27:56.141Z show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-01-14 12:25:49 (5 months ago)	wordpress-trap	Web App Attack
🇷🇺 DZBOT	2026-01-06 13:02:50 (5 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 185.76.141.226

🇩🇪 167.94.146.35

🇱🇹 91.224.92.17

🇱🇻 81.30.98.62

🇺🇸 69.17.11.52

🇬🇧 46.101.77.4

🇩🇪 167.94.145.18

🇫🇮 147.185.133.152

🇺🇸 147.185.132.55

🇨🇳 106.53.51.171

🇳🇱 91.92.40.231

🇫🇮 45.82.109.136

🇺🇸 35.169.206.177

🇪🇹 196.190.41.137

🇸🇬 172.188.89.41

🇷🇴 143.20.185.207

🇳🇱 134.209.202.49

🇮🇳 103.31.221.128

🇺🇸 64.94.156.222

🇫🇷 51.68.226.87