JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.94.209.192

158.94.209.192 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 0%: ?

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.94.209.192

Whois 158.94.209.192

IP Abuse Reports for 158.94.209.192:

This IP address has been reported a total of 110 times from 77 distinct sources. 158.94.209.192 was first reported on December 26th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 guldkage	2026-03-14 10:26:44 (2 months ago)	Unauthorized connection attempt detected from IP address 158.94.209.192 to port 25 (ger-03) [b]	Brute-Force Exploited Host
🇺🇸 www.winos.me	2026-03-14 09:34:05 (2 months ago)	port scan	Port Scan
🇷🇺 DZBOT	2026-03-14 05:18:17 (2 months ago)	SMTP. Brute-force users (authenticator failed)	Brute-Force
🇹🇷 Threat.live	2026-03-14 02:20:25 (2 months ago)	Suspicious activity, tcp/25	Port Scan
🇸🇰 HILKA	2026-03-10 10:46:09 (2 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇫🇷 bongcloud.de	2026-03-09 19:56:07 (3 months ago)	Mar 9 20:56:07 web postfix/smtpd[3985910]: NOQUEUE: reject: RCPT from unknown[158.94.209.192]: 554 ... show more Mar 9 20:56:07 web postfix/smtpd[3985910]: NOQUEUE: reject: RCPT from unknown[158.94.209.192]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-7N1FIECL6IC> ... show less	Brute-Force SSH
🇵🇱 TheWojtek	2026-03-04 07:12:16 (3 months ago)	Mar 4 08:12:15 hq postfix/smtpd[3318753]: NOQUEUE: reject: RCPT from unknown[158.94.209.192]: 554 5 ... show more Mar 4 08:12:15 hq postfix/smtpd[3318753]: NOQUEUE: reject: RCPT from unknown[158.94.209.192]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-7N1FIECL6IC> ... show less	Email Spam
🇺🇸 Carltonfsck	2026-02-26 08:16:10 (3 months ago)	Feb 26 08:16:09 ssh postfix/smtpd[69698]: NOQUEUE: reject: RCPT from unknown[158.94.209.192]: 550 5. ... show more Feb 26 08:16:09 ssh postfix/smtpd[69698]: NOQUEUE: reject: RCPT from unknown[158.94.209.192]: 550 5.7.1 <WIN-7N1FIECL6IC>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-7N1FIECL6IC> Feb 26 08:16:09 ssh postfix/smtpd[69728]: NOQUEUE: reject: RCPT from unknown[158.94.209.192]: 550 5.7.1 <WIN-7N1FIECL6IC>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-7N1FIECL6IC> Feb 26 08:16:10 ssh postfix/smtpd[69730]: NOQUEUE: reject: RCPT from unknown[158.94.209.192]: 550 5.7.1 <WIN-7N1FIECL6IC>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-7N1FIECL6IC> ... show less	Hacking Brute-Force
🇩🇪 london2038.com	2026-02-25 21:44:13 (3 months ago)	Connection atttempts against closed TCP ports Feb 25 22:44:03 BLOCK SRC=158.94.209.192 LEN=52 TOS=0x ... show more Connection atttempts against closed TCP ports Feb 25 22:44:03 BLOCK SRC=158.94.209.192 LEN=52 TOS=0x02 PREC=0x00 TTL=116 ID=27741 DF PROTO=TCP SPT=58432 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN Feb 25 22:44:06 BLOCK SRC=158.94.209.192 LEN=52 TOS=0x02 PREC=0x00 TTL=116 ID=27832 DF PROTO=TCP SPT=58432 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN Feb 25 22:44:12 BLOCK SRC=158.94.209.192 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=28145 DF PROTO=TCP SPT=58432 DPT=25 WINDOW=8192 RES=0x00 SYN show less	Port Scan
🇩🇪 karger	2026-02-25 21:26:58 (3 months ago)	SMTP relay-attack	Brute-Force Email Spam
🇫🇷 ✨	2026-02-25 21:07:03 (3 months ago)	Domain : tiscali.it Rule : SMTP 02/25/26 22:05:48 1832 158.94.209.192 *hidden-privacy* ESMTP ... show more Domain : tiscali.it Rule : SMTP 02/25/26 22:05:48 1832 158.94.209.192 *hidden-privacy* ESMTP MAIL Service ready at 02/25/26 22:05:48 75 0 02/25/26 22:05:48 1832 158.94.209.192 EHLO ehlo WIN-7N1FIECL6IC *hidden-privacy* [158.94.209.192], this server offers 7 extensions 266 22 02/25/26 22:05:48 1832 158.94.209.192 RSET Rset 250 Requested mail action okay, completed 43 6 02/25/26 22:05:49 1832 158.94.209.192 MAIL Mail from:<[email protected]> 250 Requested mail action okay, completed 43 32 02/25/26 22:05:49 1832 158.94.209.192 RCPT RCPT to:<[email protected]> 503 This mail server requires authentication when attempting to send to a non-local e-mail address. Please check your mail client settings or contact your administrator to verify that the domain or address is defined for this server. 235 30 show less	Email Spam Port Scan Spoofing
🇩🇪 bescared	2026-02-25 20:43:38 (3 months ago)	F2B - Malicious activity detected. Excessive port scans.	Port Scan
🇦🇹 Pingger Shikkoken	2026-02-25 20:27:17 (3 months ago)	2026-02-25T20:27:17+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-02-25T20:27:17+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=158.94.209.192 DST=10.1.1.14 LEN=52 TOS=0x02 PREC=0x00 TTL=117 ID=31004 DF PROTO=TCP SPT=55048 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 2026-02-25T20:27:20+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=158.94.209.192 DST=10.1.1.14 LEN=52 TOS=0x02 PREC=0x00 TTL=117 ID=31124 DF PROTO=TCP SPT=55048 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 2026-02-25T20:27:26+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=158.94.209.192 DST=10.1.1.14 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=31399 DF PROTO=TCP SPT=55048 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 show less	Email Spam Hacking
🇦🇹 centurion	2026-02-25 20:25:26 (3 months ago)	Unauthorized attempt on siem [25/tcp] Source port: 64237 TTL: 118 Packet length: 52 TOS: 0x02 https: ... show more Unauthorized attempt on siem [25/tcp] Source port: 64237 TTL: 118 Packet length: 52 TOS: 0x02 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Email Spam
🇬🇧 spamverify.com	2026-02-25 00:47:20 (3 months ago)	Honeypot Hit: Port Scan (25) SMTP	Web Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 67.220.64.66

🇺🇸 66.132.186.240

🇳🇱 192.42.116.56

🇭🇰 165.154.6.75

🇹🇭 147.50.255.125

🇳🇬 102.88.137.213

🇳🇱 89.21.67.158

🇧🇪 35.241.176.243

🇧🇪 35.205.64.96

🇺🇸 172.239.51.109

🇺🇸 167.99.54.222

🇺🇸 144.126.133.198

🇺🇸 142.93.204.108

🇵🇭 136.158.79.89

🇮🇳 103.206.129.165

🇵🇱 87.251.64.144

🇬🇧 86.150.251.151

🇳🇱 77.91.71.10

🇺🇸 48.214.144.79

🇸🇬 47.84.104.148