JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.94.208.56

158.94.208.56 was found in our database!

This IP was reported 712 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.94.208.56

Whois 158.94.208.56

IP Abuse Reports for 158.94.208.56:

This IP address has been reported a total of 712 times from 195 distinct sources. 158.94.208.56 was first reported on September 14th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-06-30 01:58:05 (2 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇷🇴 ICT	2026-06-30 01:44:09 (3 hours ago)	Jun 30 04:43:54 acad-icht postfix/smtpd[62284]: NOQUEUE: reject: RCPT from unknown[158.94.208.56]: 5 ... show more Jun 30 04:43:54 acad-icht postfix/smtpd[62284]: NOQUEUE: reject: RCPT from unknown[158.94.208.56]: 554 5.7.1 Service unavailable; Client host [158.94.208.56] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?158.94.208.56; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<PmYnBnIz> Jun 30 04:43:57 acad-icht postfix/smtpd[62284]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: authentication failure Jun 30 04:44:02 acad-icht postfix/smtpd[62284]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: authentication failure Jun 30 04:44:05 acad-icht postfix/smtpd[62284]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: authentication failure Jun 30 04:44:09 acad-icht postfix/smtpd[62284]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇷🇺 DZBOT	2026-06-29 21:56:55 (6 hours ago)	DZBOT. Brute-force users SMTP	Brute-Force
🇦🇺 jalim	2026-06-29 20:28:07 (8 hours ago)	Fail2Ban (11cc81a08e1b): 3 attempts from 158.94.208.56 triggered postfix-sasl jail. Ban time: 3600s. ... show more Fail2Ban (11cc81a08e1b): 3 attempts from 158.94.208.56 triggered postfix-sasl jail. Ban time: 3600s. Attack patterns detected in mail server logs. show less	Brute-Force
🇺🇸 Brian Minton	2026-06-29 18:40:58 (10 hours ago)	2026-06-29 13:40:41 no host name found for IP address 158.94.208.56 2026-06-29 13:40:47 no host name ... show more 2026-06-29 13:40:41 no host name found for IP address 158.94.208.56 2026-06-29 13:40:47 no host name found for IP address 158.94.208.56 2026-06-29 13:40:58 login_saslauthd_server authenticator failed for (9P5N7Tu6) [158.94.208.56]: 535 Incorrect authentication data (set_id=bminton) ... show less	Brute-Force
🇵🇱 dzpk	2026-06-29 15:36:47 (13 hours ago)	Jun 29 17:36:44 mx postfix/smtpd[3869024]: disconnect from unknown[158.94.208.56] ehlo=2 starttls=1 ... show more Jun 29 17:36:44 mx postfix/smtpd[3869024]: disconnect from unknown[158.94.208.56] ehlo=2 starttls=1 auth=0/1 commands=3/4 Jun 29 17:36:45 mx postfix/smtpd[3869024]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: no mechanism available Jun 29 17:36:45 mx postfix/smtpd[3869024]: disconnect from unknown[158.94.208.56] ehlo=2 starttls=1 auth=0/1 commands=3/4 Jun 29 17:36:46 mx postfix/smtpd[3869024]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: no mechanism available Jun 29 17:36:46 mx postfix/smtpd[3869024]: disconnect from unknown[158.94.208.56] ehlo=2 starttls=1 auth=0/1 commands=3/4 show less	Brute-Force Email Spam
🇷🇴 ICT	2026-06-29 15:23:13 (13 hours ago)	Jun 29 18:22:56 acad-icht postfix/smtpd[56800]: NOQUEUE: reject: RCPT from unknown[158.94.208.56]: 5 ... show more Jun 29 18:22:56 acad-icht postfix/smtpd[56800]: NOQUEUE: reject: RCPT from unknown[158.94.208.56]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WiBAYRzCma> Jun 29 18:23:00 acad-icht postfix/smtpd[56800]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: authentication failure Jun 29 18:23:04 acad-icht postfix/smtpd[56800]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: authentication failure Jun 29 18:23:08 acad-icht postfix/smtpd[56800]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: authentication failure Jun 29 18:23:12 acad-icht postfix/smtpd[56800]: warning: unknown[158.94.208.56]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇬🇧 iss-security-operations	2026-06-29 12:00:52 (16 hours ago)	Seen attempting a bruteforce against SMTP services	Brute-Force
🇩🇪 samba.org	2026-06-29 00:26:44 (1 day ago)	spam (f2b h2)	Brute-Force
Anonymous	2026-06-28 19:05:14 (1 day ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇺🇸 TheMadBeaker	2026-06-28 13:37:23 (1 day ago)	Fail2Ban - SMTP Bruteforce Attempt	Email Spam Brute-Force
🇫🇷 kisiek	2026-06-28 10:49:54 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 158.94.208.56 (DE/Germany/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 158.94.208.56 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-28 12:49:42 login authenticator failed for H=(izinl2W6pR) [158.94.208.56]: 535 Incorrect authentication data ([email protected]) 2026-06-28 12:49:44 login authenticator failed for H=(QwLmZl0JQ) [158.94.208.56]: 535 Incorrect authentication data ([email protected]) 2026-06-28 12:49:47 login authenticator failed for H=(j93TjdY) [158.94.208.56]: 535 Incorrect authentication data ([email protected]) 2026-06-28 12:49:49 login authenticator failed for H=(w5gn7Val) [158.94.208.56]: 535 Incorrect authentication data ([email protected]) 2026-06-28 12:49:50 login authenticator failed for H=(pqtkik) [158.94.208.56]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇷🇸 iphouse	2026-06-28 08:00:04 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Web Spam
🇸🇪 Lemmy	2026-06-28 03:13:26 (2 days ago)	email login attempts	Brute-Force
🇺🇸 rsiddall	2026-06-27 14:08:00 (2 days ago)	2026-06-27T10:07:19.715773linnet.elirion.net postfix/postscreen[24062]: DISCONNECT [158.94.208.56]:6 ... show more 2026-06-27T10:07:19.715773linnet.elirion.net postfix/postscreen[24062]: DISCONNECT [158.94.208.56]:62461 2026-06-27T10:07:28.041834linnet.elirion.net postfix/postscreen[24062]: DISCONNECT [158.94.208.56]:56031 2026-06-27T10:07:38.815544linnet.elirion.net postfix/postscreen[24062]: DISCONNECT [158.94.208.56]:63918 2026-06-27T10:07:47.334556linnet.elirion.net postfix/postscreen[24062]: DISCONNECT [158.94.208.56]:64843 2026-06-27T10:07:59.426643linnet.elirion.net postfix/postscreen[24062]: DISCONNECT [158.94.208.56]:64466 ... show less	Brute-Force

Showing 1 to 15 of 712 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 81.43.179.194

🇮🇪 20.191.45.212

🇩🇪 195.230.103.249

🇬🇧 195.140.214.29

🇰🇿 193.193.249.106

🇲🇽 177.229.197.38

🇺🇸 172.239.71.245

🇧🇷 129.121.50.86

🇨🇳 125.88.207.28

🇨🇳 106.75.26.244

🇸🇬 103.189.234.244

🇸🇪 90.224.74.107

🇳🇱 85.137.59.239

🇰🇷 43.155.214.159

🇺🇸 2a09:bac5:c82d:dcd::160:e1

🇩🇪 195.230.103.242

🇺🇸 193.3.53.4

🇺🇸 193.3.53.3

🇵🇰 192.140.150.196

🇩🇪 161.35.71.5