JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.243.194

91.92.243.194 was found in our database!

This IP was reported 344 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.243.194

Whois 91.92.243.194

IP Abuse Reports for 91.92.243.194:

This IP address has been reported a total of 344 times from 81 distinct sources. 91.92.243.194 was first reported on December 21st 2025, and the most recent report was 29 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 BrateloSlava	2026-10-27 03:05:06 (29 minutes ago)	SMTP attack	Brute-Force
Anonymous	2026-10-27 03:04:02 (30 minutes ago)	Oct 26 21:04:00 mail postfix/submission/smtpd[3453028]: lost connection after CONNECT from unknown[9 ... show more Oct 26 21:04:00 mail postfix/submission/smtpd[3453028]: lost connection after CONNECT from unknown[91.92.243.194]\nOct 26 21:04:01 mail postfix/submission/smtpd[3453030]: NOQUEUE: reject: RCPT from unknown[91.92.243.194]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[91.92.243.194]>\nOct 26 21:04:01 mail postfix/submission/smtpd[3453030]: disconnect from unknown[91.92.243.194] ehlo=2 starttls=1 mail=1 rcpt=0/1 rset=1 commands=5/6 show less	Email Spam Brute-Force
🇺🇸 drewf.ink	2026-10-27 02:37:45 (56 minutes ago)	[02:37] Attempted to relay mail to 1 recipient(s) (subject: '=?utf-8?q?HELLO_SMTPS_WORKS?=')	Email Spam Brute-Force
🇩🇪 n0t404.com	2026-10-27 02:02:45 (1 hour ago)	[n0t404 Labs] Security Incident: POSTFIX-SPAM \| Origin: Railnet LLC (US) \| Trigger: spam-attemptspam ... show more [n0t404 Labs] Security Incident: POSTFIX-SPAM \| Origin: Railnet LLC (US) \| Trigger: spam-attemptspam-attemptspam-attemptspam-attemptspam-attempt \| Status: Blocked show less	Port Scan Brute-Force Bad Web Bot
🇬🇧 stom	2026-10-27 02:00:20 (1 hour ago)	2026-10-27T02:00:18.601628ls2.tom2.co.uk postfix/smtpd[8816]: NOQUEUE: reject: RCPT from unknown[91. ... show more 2026-10-27T02:00:18.601628ls2.tom2.co.uk postfix/smtpd[8816]: NOQUEUE: reject: RCPT from unknown[91.92.243.194]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[91.92.243.194]> ... show less	Brute-Force Email Spam
Anonymous	2026-10-26 23:09:24 (4 hours ago)	2026-10-26 23:09:24.083 [24054] H=([91.92.243.194]) [91.92.243.194]:56192 I=[192.168.0.29]:587 Ci=62 ... show more 2026-10-26 23:09:24.083 [24054] H=([91.92.243.194]) [91.92.243.194]:56192 I=[192.168.0.29]:587 Ci=6220548 X=TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted ... show less	Brute-Force
🇮🇹 CoreTech srl	2026-10-26 22:40:27 (4 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇨🇭 SOC [GOLINE SA]	2026-10-26 22:08:20 (5 hours ago)	[RoutePulse \| 2026-10-26T22:08:20Z \| RTBH-INJECTED] ATTACK CLASS: mail_correlation SOURCE: 91.92.243 ... show more [RoutePulse \| 2026-10-26T22:08:20Z \| RTBH-INJECTED] ATTACK CLASS: mail_correlation SOURCE: 91.92.243.194 · AS202412 Omegatech LTD · United States EVIDENCE: Mail correlation auto: score 100, belief 0.74, intent + identity, phases delivery — listed by Dataplane SMTP greet (warning, confidence 70); host reputation 100/100 on this platform DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring ACTION: BGP null route injected at RoutePulse network edge show less	Hacking
🇩🇪 janbro	2026-10-26 21:39:10 (5 hours ago)	Automated mail authentication brute-force detected by CrowdSec	Brute-Force
Anonymous	2026-10-26 21:33:35 (6 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/postfix-spam	Email Spam Brute-Force
🇩🇪 mattk	2026-10-26 21:22:20 (6 hours ago)	Oct 26 21:22:19 postfix/smtpd[33634]: disconnect from unknown[91.92.243.194] ehlo=2 starttls=1 mail= ... show more Oct 26 21:22:19 postfix/smtpd[33634]: disconnect from unknown[91.92.243.194] ehlo=2 starttls=1 mail=1 rcpt=0/1 commands=4/5 show less	Email Spam Brute-Force
Anonymous	2026-10-26 20:01:43 (7 hours ago)	Fail2Ban - Brute-force attack detected ...	Brute-Force
🇩🇪 NewGastroline	2026-10-26 19:48:09 (7 hours ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇩🇪 karger	2026-10-26 17:41:24 (9 hours ago)	SMTP relay-attack	Brute-Force Email Spam
🇩🇪 MarkGGN	2026-10-26 17:09:18 (10 hours ago)	SMTP Bruteforce. 2026-10-26T19:09:16.383192+02:00 [HOST] postfix/submission/smtpd[1557980]: NOQUEUE: ... show more SMTP Bruteforce. 2026-10-26T19:09:16.383192+02:00 [HOST] postfix/submission/smtpd[1557980]: NOQUEUE: reject: RCPT from unknown[91.92.243.194]: 554 5.7.1 <unknown[91.92.243.194]>: Client host rejected: Access denied; from=<support@[HOST]> to=<makkar377@[HOST]> proto=ESMTP helo=<[91.92.243.194]> 2026-10-26T19:09:18.005109+02:00 [HOST] postfix/submission/smtpd[1557980]: NOQUEUE: reject: RCPT from unknown[91.92.243.194]: 554 5.7.1 <unknown[91.92.243.194]>: Client host rejected: Access denied; from=<support@[HOST]> to=<makkar377@[HOST]> proto=ESMTP helo=<[91.92.243.194]> show less	Brute-Force

Showing 1 to 15 of 344 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 176.117.202.82

🇫🇷 169.58.218.3

🇺🇸 162.216.150.111

🇨🇳 124.226.219.166

🇧🇪 104.155.49.21

🇬🇧 87.236.176.144

🇦🇹 68.210.120.110

🇸🇬 43.153.203.254

🇬🇧 35.203.211.33

🇺🇸 23.234.116.202

🇸🇬 8.222.197.220

🇪🇸 5.22.217.183

🇧🇩 180.94.24.244

🇻🇳 171.234.8.129

🇨🇳 171.217.70.151

🇺🇸 147.185.132.27

🇺🇸 138.89.156.42

🇨🇳 122.158.251.10

🇲🇾 103.71.176.189

🇮🇳 103.51.116.158