JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.16.54.237

178.16.54.237 was found in our database!

This IP was reported 5,256 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.16.54.237

Whois 178.16.54.237

IP Abuse Reports for 178.16.54.237:

This IP address has been reported a total of 5,256 times from 410 distinct sources. 178.16.54.237 was first reported on March 20th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sebi	2026-04-14 04:08:40 (1 month ago)	2026-04-14 04:13:03 dovecot_login authenticator failed for (178-16-54-237.domain) [178.16.54.237]: 5 ... show more 2026-04-14 04:13:03 dovecot_login authenticator failed for (178-16-54-237.domain) [178.16.54.237]: 535 Incorrect authentication data 2026-04-14 06:08:34 dovecot_login authenticator failed for (178-16-54-237.domain) [178.16.54.237]: 535 Incorrect authentication data (set_id=test) 2026-04-14 06:08:40 dovecot_login authenticator failed for (178-16-54-237.domain) [178.16.54.237]: 535 Incorrect authentication data show less	Brute-Force
🇩🇪 sebi	2026-04-14 02:08:00 (1 month ago)	2026-04-14 04:07:41 H=(178-16-54-237.domain) [178.16.54.237] F=<[email protected]> rejected RCPT <test@g ... show more 2026-04-14 04:07:41 H=(178-16-54-237.domain) [178.16.54.237] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted 2026-04-14 04:07:48 dovecot_login authenticator failed for (178-16-54-237.domain) [178.16.54.237]: 535 Incorrect authentication data (set_id=admin) 2026-04-14 04:08:00 dovecot_login authenticator failed for (178-16-54-237.domain) [178.16.54.237]: 535 Incorrect authentication data (set_id=admin) show less	Brute-Force
🇩🇪 arc21	2026-04-13 19:59:37 (1 month ago)	2026-04-13T20:59:36.468478+01:00 ptero-wings-dev kernel: [10688781.610654] [UFW BLOCK] IN=ens3 OUT= ... show more 2026-04-13T20:59:36.468478+01:00 ptero-wings-dev kernel: [10688781.610654] [UFW BLOCK] IN=ens3 OUT= MAC=00:fd:d1:ae:c2:18:88:30:37:33:03:65:08:00 SRC=178.16.54.237 DST=95.156.226.215 LEN=52 TOS=0x00 PREC=0x20 TTL=121 ID=20484 DF PROTO=TCP SPT=59713 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 ... show less	Port Scan
Anonymous	2026-04-13 17:30:04 (1 month ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 Little Iguana	2026-04-13 17:18:07 (1 month ago)	Trying to Relay Mail or Not fully qualified domain	Brute-Force Email Spam
🇸🇮 dsmidge	2026-04-13 13:31:14 (1 month ago)	2026-04-13T15:31:13.260254+02:00 server postfix/smtpd[3749223]: connect from unknown[178.16.54.237] ... show more 2026-04-13T15:31:13.260254+02:00 server postfix/smtpd[3749223]: connect from unknown[178.16.54.237] 2026-04-13T15:31:13.930568+02:00 server postfix/smtpd[3749223]: NOQUEUE: reject: RCPT from unknown[178.16.54.237]: 554 5.7.1 Service unavailable; Client host [178.16.54.237] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/178.16.54.237 / Listed by XBL, see https://check.spamhaus.org/query/ip/178.16.54.237 / Listed by SBL, see https://check.spamhaus.org/sbl/query/SBL683901 / Listed by DROP, see https://check.spamhaus.org/sbl/query/SBL683901; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<178-16-54-237> ... show less	Email Spam
🇫🇷 Guardian	2026-04-13 10:14:37 (1 month ago)	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇸🇮 dsmidge	2026-04-12 23:55:14 (1 month ago)	2026-04-13T01:55:13.248138+02:00 server postfix/smtpd[3627133]: connect from unknown[178.16.54.237] ... show more 2026-04-13T01:55:13.248138+02:00 server postfix/smtpd[3627133]: connect from unknown[178.16.54.237] 2026-04-13T01:55:13.703087+02:00 server postfix/smtpd[3627133]: NOQUEUE: reject: RCPT from unknown[178.16.54.237]: 554 5.7.1 Service unavailable; Client host [178.16.54.237] blocked using zen.spamhaus.org; Listed by DROP, see https://check.spamhaus.org/sbl/query/SBL683901 / Listed by CSS, see https://check.spamhaus.org/query/ip/178.16.54.237 / Listed by XBL, see https://check.spamhaus.org/query/ip/178.16.54.237 / Listed by SBL, see https://check.spamhaus.org/sbl/query/SBL683901; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<178-16-54-237> ... show less	Email Spam
🇫🇮 6kilowatti	2026-04-12 19:27:27 (1 month ago)	2026-04-12T22:27:26.480482+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-04-12T22:27:26.480482+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=178.16.54.237 DST=5.61.88.83 LEN=52 TOS=0x02 PREC=0x00 TTL=115 ID=16278 DF PROTO=TCP SPT=53216 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 ... show less	Port Scan
🇮🇩 hermawan	2026-04-12 08:39:24 (1 month ago)	04/12/2026-15:39:22.477437 [Drop] [] [1:7851261:1] Suricata NF - Outbound mail setup command EHLO ... show more 04/12/2026-15:39:22.477437 [Drop] [] [1:7851261:1] Suricata NF - Outbound mail setup command EHLO [**] [Classification: Misc activity] [Priority: 3] {TCP} 178.16.54.237:51956 -> 103.166.156.58:25 ... show less	Email Spam Hacking
🇺🇸 Cyber Crusader	2026-04-12 02:14:40 (1 month ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇯🇵 mkaraki	2026-04-11 12:23:55 (1 month ago)	1775910232 # Service_probe # SIGNATURE_SEND # source_ip:178.16.54.237 # dst_port:25 ...	Port Scan
🇩🇪 Hobby Bob	2026-04-11 09:18:41 (1 month ago)	Apr 11 09:18:41 server postfix/smtpd[1968625]: NOQUEUE: reject: RCPT from unknown[178.16.54.237]: 45 ... show more Apr 11 09:18:41 server postfix/smtpd[1968625]: NOQUEUE: reject: RCPT from unknown[178.16.54.237]: 454 4.7.1 : Relay access denied; from= to= proto=ESMTP helo= show less	Email Spam
🇩🇪 iNetWorker	2026-04-10 12:50:56 (1 month ago)	firewall-block, port(s): 25/tcp	Port Scan
🇳🇵 radheykrishna.com.np	2026-04-10 11:30:50 (1 month ago)	Apr 10 17:15:50 kernel: [980411.200861] [UFW BLOCK] IN=ens160 OUT= SRC=178.16.54.237 LEN=52 TOS=0x02 ... show more Apr 10 17:15:50 kernel: [980411.200861] [UFW BLOCK] IN=ens160 OUT= SRC=178.16.54.237 LEN=52 TOS=0x02 PREC=0x00 TTL=114 ID=5055 DF PROTO=TCP SPT=61255 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 ... show less	Port Scan

Showing 5176 to 5190 of 5256 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.199

🇦🇸 198.52.29.77

🇦🇪 198.38.94.14

🇸🇬 194.5.82.103

🇬🇧 193.163.125.44

🇳🇱 192.42.116.58

🇺🇸 172.172.30.79

🇭🇰 101.32.208.155

🇷🇺 87.226.190.225

🇫🇷 86.247.28.221

🇺🇸 65.49.1.208

🇺🇸 47.88.29.50

🇸🇬 45.82.78.100

🇬🇧 45.82.76.126

🇩🇪 43.228.157.8

🇧🇷 187.87.237.121

🇳🇱 165.22.197.84

🇺🇸 162.216.149.176

🇺🇸 159.89.38.103

🇸🇬 152.42.219.134