JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.94.208.54

158.94.208.54 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Fixed Line ISP
ASN	AS202412
Domain Name	omegatech.sc
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.94.208.54

Whois 158.94.208.54

IP Abuse Reports for 158.94.208.54:

This IP address has been reported a total of 37 times from 30 distinct sources. 158.94.208.54 was first reported on July 21st 2026, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 notelseit	2026-07-23 03:12:59 (46 minutes ago)	2026-07-23T05:12:49.662711+02:00 mail postfix/smtpd[4083706]: NOQUEUE: reject: RCPT from unknown[158 ... show more 2026-07-23T05:12:49.662711+02:00 mail postfix/smtpd[4083706]: NOQUEUE: reject: RCPT from unknown[158.94.208.54]: 450 4.7.25 Client host rejected: cannot find your hostname, [158.94.208.54]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<KbWAwA> 2026-07-23T05:12:54.241593+02:00 mail postfix/smtpd[4083682]: disconnect from unknown[158.94.208.54] ehlo=1 auth=0/1 commands=1/2 2026-07-23T05:12:58.735103+02:00 mail postfix/smtpd[4083706]: disconnect from unknown[158.94.208.54] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force Email Spam
🇳🇱 Godert Jan van Manen	2026-07-23 02:57:32 (1 hour ago)	Jul 23 04:57:06 odin postfix/smtpd[7707]: warning: unknown[158.94.208.54]: SASL LOGIN authentication ... show more Jul 23 04:57:06 odin postfix/smtpd[7707]: warning: unknown[158.94.208.54]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 23 04:57:17 odin postfix/smtpd[8584]: warning: unknown[158.94.208.54]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 23 04:57:31 odin postfix/smtpd[7707]: warning: unknown[158.94.208.54]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Brute-Force
🇩🇪 samba.org	2026-07-22 23:53:56 (4 hours ago)	spam (f2b h2)	Brute-Force
🇺🇸 vestibtech	2026-07-22 19:47:47 (8 hours ago)	2026-07-22T13:47:26.575143-06:00 Host-KLAX-C postfix/smtp/smtpd[128548]: lost connection after AUTH ... show more 2026-07-22T13:47:26.575143-06:00 Host-KLAX-C postfix/smtp/smtpd[128548]: lost connection after AUTH from unknown[158.94.208.54] 2026-07-22T13:47:35.464767-06:00 Host-KLAX-C postfix/smtp/smtpd[129283]: lost connection after AUTH from unknown[158.94.208.54] 2026-07-22T13:47:41.004967-06:00 Host-KLAX-C postfix/smtp/smtpd[129283]: lost connection after AUTH from unknown[158.94.208.54] 2026-07-22T13:47:46.495166-06:00 Host-KLAX-C postfix/smtp/smtpd[129283]: lost connection after AUTH from unknown[158.94.208.54] ... show less	DDoS Attack Port Scan
🇩🇪 celltek	2026-07-22 19:30:03 (8 hours ago)	SMTP brute-force detected	Email Spam Brute-Force
🇯🇵 kawanchu	2026-07-22 18:37:00 (9 hours ago)	Brute-force attack via SMTP AUTH. Repeated login failures on mail server.	Brute-Force
🇸🇰 Eurofluid	2026-07-22 12:01:06 (15 hours ago)	You shall not pass ! Abusive behavior blocked by EF firewall.	Port Scan Hacking Brute-Force
🇩🇪 Nerdscave Hosting	2026-07-22 11:30:33 (16 hours ago)	SMTP brute-force detected by Fail2Ban in plesk-postfix jail	Email Spam Brute-Force
🇫🇷 Sysadmin Peter	2026-07-22 10:43:38 (17 hours ago)	Jul 22 12:43:31 mail postfix/smtpd[396984]: warning: unknown[158.94.208.54]: SASL LOGIN authenticati ... show more Jul 22 12:43:31 mail postfix/smtpd[396984]: warning: unknown[158.94.208.54]: SASL LOGIN authentication failed: authentication failure Jul 22 12:43:37 mail postfix/smtpd[396984]: warning: unknown[158.94.208.54]: SASL LOGIN authentication failed: authentication failure ... show less	Email Spam
🇮🇱 Dolphi	2026-07-22 05:50:32 (22 hours ago)	Mail server brute force	Email Spam Brute-Force
🇫🇷 Dampen59	2026-07-22 04:56:10 (23 hours ago)	(smtpauth) Failed SMTP AUTH login from 158.94.208.54 (DE/Germany/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 158.94.208.54 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-22 06:55:15 dovecot_login authenticator failed for H=(NutEkKLhO) [158.94.208.54]:62570: 535 Incorrect authentication data (set_id=export.vr2m) 2026-07-22 06:55:20 dovecot_login authenticator failed for H=(P45VihpuJ) [158.94.208.54]:52548: 535 Incorrect authentication data (set_id=vr2m) 2026-07-22 06:55:41 dovecot_login authenticator failed for H=(sSiC106Dc) [158.94.208.54]:59428: 535 Incorrect authentication data (set_id=export.vr2m) 2026-07-22 06:55:50 dovecot_login authenticator failed for H=(5sQITsQUr) [158.94.208.54]:59690: 535 Incorrect authentication data (set_id=vr2m) 2026-07-22 06:56:07 dovecot_login authenticator failed for H=(5pzBabn) [158.94.208.54]:52073: 535 Incorrect authentication data (set_id=export.vr2m) show less	Port Scan
🇮🇹 CoreTech srl	2026-07-22 04:34:59 (23 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇳🇱 Godert Jan van Manen	2026-07-22 02:02:14 (1 day ago)	Jul 22 04:01:49 odin postfix/smtpd[4182]: warning: unknown[158.94.208.54]: SASL LOGIN authentication ... show more Jul 22 04:01:49 odin postfix/smtpd[4182]: warning: unknown[158.94.208.54]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 22 04:02:00 odin postfix/smtpd[7080]: warning: unknown[158.94.208.54]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 22 04:02:14 odin postfix/smtpd[4182]: warning: unknown[158.94.208.54]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Brute-Force
🇭🇺 Lacika555	2026-07-22 02:00:08 (1 day ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 SwinT	2026-07-22 02:00:05 (1 day ago)	SMTP brute-force detected by Fail2Ban in plesk-postfix jail	Email Spam Brute-Force

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 206.189.1.158

🇵🇾 201.217.28.37

🇷🇺 188.162.8.113

🇨🇳 180.76.171.14

🇩🇪 104.248.26.225

🇵🇰 103.12.123.191

🇸🇬 101.47.158.56

🇨🇦 85.217.149.49

🇺🇸 73.35.30.201

🇳🇱 64.225.72.42

🇳🇱 45.148.10.147

🇧🇪 198.235.24.222

🇦🇴 193.163.125.56

🇨🇦 168.138.90.7

🇨🇳 112.31.167.120

🇧🇬 79.124.62.134

🇳🇱 77.239.124.246

🇩🇪 69.5.169.230

🇩🇪 69.5.169.157

🇺🇸 66.132.186.249