JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.118.158.8

149.118.158.8 was found in our database!

This IP was reported 269 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇲🇾 Malaysia
City	Kampung Sedenak, Johor

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.118.158.8

Whois 149.118.158.8

IP Abuse Reports for 149.118.158.8:

This IP address has been reported a total of 269 times from 185 distinct sources. 149.118.158.8 was first reported on August 3rd 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 René Hickersberger	2026-08-20 10:19:39 (8 hours ago)	malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; ... show more malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 tmiland	2026-08-20 04:42:48 (14 hours ago)	(wordpress_404) WordPress Plugins Honeypot Trap 149.118.158.8 (MY/Malaysia/-): 2 in the last 3600 se ... show more (wordpress_404) WordPress Plugins Honeypot Trap 149.118.158.8 (MY/Malaysia/-): 2 in the last 3600 secs; IP: 149.118.158.8; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 149.118.158.8 - - [20/Aug/2026:06:42:43 +0200] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 404 12634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 149.118.158.8 - - [20/Aug/2026:06:42:43 +0200] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Brute-Force
🇩🇪 FeG Deutschland	2026-08-19 21:05:07 (22 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 on-com	2026-08-18 20:24:52 (1 day ago)	URL scan	Brute-Force Web App Attack
🇦🇹 René Hickersberger	2026-08-18 20:22:24 (1 day ago)	malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; ... show more malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" show less	Web App Attack
🇩🇪 barbarella	2026-08-18 17:59:14 (2 days ago)	Multiple (2) times attack on http port 80: unauthorized access to Wordpress files (GET /wp-content/p ... show more Multiple (2) times attack on http port 80: unauthorized access to Wordpress files (GET /wp-content/plugins/pods/readme.txt) 17:59:16 unauthorized access to Wordpress files (GET /wp-content/plugins/pods/init.php) show less	Hacking Web App Attack
🇳🇱 tmiland	2026-08-18 17:22:10 (2 days ago)	(wordpress_404) WordPress Plugins Honeypot Trap 149.118.158.8 (MY/Malaysia/-): 2 in the last 3600 se ... show more (wordpress_404) WordPress Plugins Honeypot Trap 149.118.158.8 (MY/Malaysia/-): 2 in the last 3600 secs; IP: 149.118.158.8; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 149.118.158.8 - - [18/Aug/2026:19:22:09 +0200] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 404 12501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 149.118.158.8 - - [18/Aug/2026:19:22:09 +0200] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Brute-Force
🇺🇸 nationaleventpros.com	2026-08-18 17:13:51 (2 days ago)	vulnerability scan	Web App Attack
🇨🇭 4server	2026-08-18 16:56:41 (2 days ago)	[TueAug1818:56:36.5236452026][security2:error][pid4140848:tid4140875][client149.118.158.8:0]ModSecur ... show more [TueAug1818:56:36.5236452026][security2:error][pid4140848:tid4140875][client149.118.158.8:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"482\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"urbani.ch\"][uri\"/wp-content/plugins/pods/readme.txt\"][unique_id\"aoSOxJotSR6sAWpFgTqJSgAAAUg\"] show less	Hacking Web App Attack
🇨🇭 lufi	2026-08-18 14:30:03 (2 days ago)	2026-08-18T16:29:39+02:00 lufischer04 ids442 2026-08-11 21:35:11 149.118.158.8: blacklisted Pattern: ... show more 2026-08-18T16:29:39+02:00 lufischer04 ids442 2026-08-11 21:35:11 149.118.158.8: blacklisted Pattern: wp-includes/ ... show less	Web Spam Brute-Force Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-08-17 21:33:44 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇮 000rosiu	2026-08-17 20:38:06 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from MY. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from MY. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /wp-content/plugins/pods/readme.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 ELYAZ	2026-08-17 20:11:19 (2 days ago)	(y3) Failed access -byebye- from 149.118.158.8 (MY/Malaysia/-): (CF_ENABLE)	Hacking
🇩🇪 Lino Project	2026-08-17 04:58:42 (3 days ago)	149.118.158.8 - - [17/Aug/2026:06:58:39 +0200] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 404 ... show more 149.118.158.8 - - [17/Aug/2026:06:58:39 +0200] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 404 8355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2026-08-17 02:49:20 (3 days ago)	vulnerability scan	Web App Attack

Showing 1 to 15 of 269 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 172.68.151.5

🇺🇸 107.20.121.14

🇻🇳 103.200.20.41

🇭🇰 70.36.97.196

🇺🇸 34.53.57.88

🇨🇳 27.37.85.28

🇨🇳 222.174.184.86

🇭🇰 199.45.154.69

🇬🇧 195.96.139.11

🇩🇪 193.174.46.42

🇳🇱 193.47.62.69

🇺🇸 184.72.120.145

🇺🇸 173.230.136.167

🇺🇸 172.236.111.197

🇺🇸 172.232.180.51

🇫🇷 172.68.151.4

🇺🇸 136.108.79.218

🇨🇳 117.50.178.180

🇺🇸 104.196.186.151

🇩🇪 104.23.239.33