JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.94.208.55

158.94.208.55 was found in our database!

This IP was reported 186 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.94.208.55

Whois 158.94.208.55

IP Abuse Reports for 158.94.208.55:

This IP address has been reported a total of 186 times from 106 distinct sources. 158.94.208.55 was first reported on September 16th 2025, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 abenage	2026-05-30 17:10:56 (4 days ago)	May 30 11:10:55 [redacted] postfix/smtpd[991502]: lost connection after CONNECT from unknown[158.94. ... show more May 30 11:10:55 [redacted] postfix/smtpd[991502]: lost connection after CONNECT from unknown[158.94.208.55] show less	Brute-Force Email Spam Exploited Host
🇮🇩 hermawan	2026-05-30 16:36:28 (4 days ago)	05/30/2026-23:36:25.265511 [Drop] [] [1:920621:1] Suricata Local: Ubiquiti Discovery (5678) [] ... show more 05/30/2026-23:36:25.265511 [Drop] [] [1:920621:1] Suricata Local: Ubiquiti Discovery (5678) [] [Classification: (null)] [Priority: 3] {UDP} 158.94.208.55:137 -> 103.166.156.58:137 ... show less	Email Spam Hacking
🇸🇬 joehorn.tw	2026-05-30 14:34:58 (4 days ago)	2026-05-30T22:33:52.622488+08:00 Nebula postfix/smtpd[306434]: lost connection after CONNECT from un ... show more 2026-05-30T22:33:52.622488+08:00 Nebula postfix/smtpd[306434]: lost connection after CONNECT from unknown[158.94.208.55] 2026-05-30T22:34:42.759860+08:00 Nebula postfix/smtpd[306434]: NOQUEUE: reject: RCPT from unknown[158.94.208.55]: 450 4.7.25 Client host rejected: cannot find your hostname, [158.94.208.55]; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<158-94-208-55.domain> 2026-05-30T22:34:57.212471+08:00 Nebula postfix/smtpd[306457]: lost connection after EHLO from unknown[158.94.208.55] ... show less	Email Spam
🇳🇱 knock	2026-05-30 10:07:32 (4 days ago)	Knock-Knock honeypot brute-force: SMTP (1 total hits)	Brute-Force
🇫🇷 0xNath	2026-05-30 10:00:45 (4 days ago)	2026-05-30T12:00:28.338523+02:00 srv1.renaudna.fr dovecot[1615]: auth: passwd-file(info,158.94.208.5 ... show more 2026-05-30T12:00:28.338523+02:00 srv1.renaudna.fr dovecot[1615]: auth: passwd-file(info,158.94.208.55): unknown user 2026-05-30T12:00:34.761068+02:00 srv1.renaudna.fr dovecot[1615]: auth: passwd-file(postmaster,158.94.208.55): unknown user 2026-05-30T12:00:44.650356+02:00 srv1.renaudna.fr dovecot[1615]: auth: passwd-file(user,158.94.208.55): unknown user ... show less	Brute-Force
🇫🇷 Provost-info	2026-05-30 09:35:54 (4 days ago)	mail server - multiple authentication attempt with unknown username or bad password	Brute-Force Spoofing
🇳🇱 Hobby Bob	2026-05-30 08:52:43 (4 days ago)	May 30 10:52:43 server postfix/smtpd[1083830]: NOQUEUE: reject: RCPT from unknown[158.94.208.55]: 45 ... show more May 30 10:52:43 server postfix/smtpd[1083830]: NOQUEUE: reject: RCPT from unknown[158.94.208.55]: 454 4.7.1 : Relay access denied; from= to= proto=SMTP helo= show less	Email Spam
🇹🇷 cagatayakinci.com	2026-05-30 03:03:00 (4 days ago)	May 30 06:02:59 mail postfix/smtpd[8941]: NOQUEUE: reject: RCPT from unknown[158.94.208.55]: 554 5.7 ... show more May 30 06:02:59 mail postfix/smtpd[8941]: NOQUEUE: reject: RCPT from unknown[158.94.208.55]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<win-7n1fiecl6ic.domain> ... show less	Brute-Force Email Spam
🇧🇷 SvrAdmin	2026-05-30 01:29:38 (4 days ago)	[315] (smtpauth) Failed SMTP AUTH login from 158.94.208.55 (DE/Germany/-): 5 in the last 3600 secs; ... show more [315] (smtpauth) Failed SMTP AUTH login from 158.94.208.55 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: May 29 22:29:16 cwp01 postfix/smtpd[19216]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 22:29:21 cwp01 postfix/smtpd[19220]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 22:29:23 cwp01 postfix/smtpd[19224]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 22:29:32 cwp01 postfix/smtpd[19206]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 22:29:34 cwp01 postfix/smtpd[19211]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
🇬🇧 PeravixGroup	2026-05-30 01:05:16 (4 days ago)	Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aara ... show more Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aaran.cloud show less	Email Spam
🇫🇷 [email protected]	2026-05-29 23:07:41 (5 days ago)	May 30 01:07:24 mail6 postfix/smtpd[3594324]: warning: unknown[158.94.208.55]: SASL LOGIN authentica ... show more May 30 01:07:24 mail6 postfix/smtpd[3594324]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info May 30 01:07:29 mail6 postfix/smtpd[3660883]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info May 30 01:07:30 mail6 postfix/smtpd[3660889]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster May 30 01:07:39 mail6 postfix/smtpd[3605756]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster May 30 01:07:40 mail6 postfix/smtpd[3660924]: warning: unknown[158.94.208.55]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user ... show less	Brute-Force
🇫🇷 Kimax	2026-05-29 22:03:23 (5 days ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
Anonymous	2026-05-29 21:33:19 (5 days ago)	postfix	Email Spam Web App Attack
🇫🇮 Maxetow	2026-05-29 19:27:24 (5 days ago)	Scan port: 25 \| 1 total \| size=52B	Port Scan
🇮🇹 www.tana.it	2026-05-29 17:59:21 (5 days ago)	SMTP auth dictionary attack	Brute-Force

Showing 91 to 105 of 186 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.46.13.153

🇮🇳 116.74.225.83

🇮🇹 91.80.173.150

🇧🇷 45.165.14.197

🇺🇸 204.44.70.181

🇵🇦 190.97.165.93

🇨🇳 183.150.182.171

🇫🇷 176.191.43.176

🇫🇷 176.138.1.33

🇨🇳 113.206.181.60

🇺🇸 107.143.175.251

🇦🇪 92.98.134.91

🇯🇵 43.130.229.228

🇧🇪 34.78.29.97

🇺🇸 162.216.150.86

🇷🇺 85.142.100.138

🇱🇹 81.30.98.158

🇺🇸 69.112.28.181

🇧🇷 43.157.163.155

🇨🇳 219.134.115.44