JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.94.209.56

158.94.209.56 was found in our database!

This IP was reported 409 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Fixed Line ISP
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.94.209.56

Whois 158.94.209.56

IP Abuse Reports for 158.94.209.56:

This IP address has been reported a total of 409 times from 81 distinct sources. 158.94.209.56 was first reported on April 2nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Nudisco	2026-06-30 00:23:37 (1 week ago)		Brute-Force
🇪🇸 Nudisco	2026-06-29 00:04:08 (1 week ago)		Brute-Force
🇪🇸 Nudisco	2026-06-27 23:41:08 (1 week ago)		Brute-Force
🇹🇷 ozyurterdem	2026-06-27 04:00:02 (1 week ago)	T-Pot Suricata IDS: 383 alert(s) in 24h. SiberKale Threat Intel (unknown-bad filtered).	Hacking IoT Targeted
🇹🇷 ozyurterdem	2026-06-26 04:00:02 (1 week ago)	T-Pot Suricata IDS: 385 alert(s) in 24h. SiberKale Threat Intel (unknown-bad filtered).	Hacking IoT Targeted
🇹🇼 AndCycle	2026-06-26 03:46:10 (1 week ago)	Jun 26 11:46:10 bacztwo courieresmtpd[4154848]: error,relay=::ffff:158.94.209.56,port=61365,msg="535 ... show more Jun 26 11:46:10 bacztwo courieresmtpd[4154848]: error,relay=::ffff:158.94.209.56,port=61365,msg="535 Authentication failed.",cmd: AUTH LOGIN teste ... show less	Email Spam Brute-Force
🇹🇼 AndCycle	2026-06-25 06:25:57 (1 week ago)	Jun 25 14:25:57 bacztwo courieresmtpd[1938353]: error,relay=::ffff:158.94.209.56,port=51898,msg="535 ... show more Jun 25 14:25:57 bacztwo courieresmtpd[1938353]: error,relay=::ffff:158.94.209.56,port=51898,msg="535 Authentication failed.",cmd: AUTH LOGIN DUNEUSER ... show less	Email Spam Brute-Force
🇹🇷 ozyurterdem	2026-06-25 04:00:01 (1 week ago)	T-Pot Suricata IDS: 404 alert(s) in 24h. SiberKale Threat Intel (unknown-bad filtered).	Hacking IoT Targeted
🇹🇼 AndCycle	2026-06-24 19:45:53 (1 week ago)	Jun 25 03:45:53 bacztwo courieresmtpd[921255]: error,relay=::ffff:158.94.209.56,port=62594,msg="535 ... show more Jun 25 03:45:53 bacztwo courieresmtpd[921255]: error,relay=::ffff:158.94.209.56,port=62594,msg="535 Authentication failed.",cmd: AUTH LOGIN linda ... show less	Email Spam Brute-Force
🇹🇼 AndCycle	2026-06-24 14:25:15 (1 week ago)	Jun 24 22:25:14 bacztwo courieresmtpd[3956955]: error,relay=::ffff:158.94.209.56,port=56381,msg="535 ... show more Jun 24 22:25:14 bacztwo courieresmtpd[3956955]: error,relay=::ffff:158.94.209.56,port=56381,msg="535 Authentication failed.",cmd: AUTH LOGIN test2 ... show less	Email Spam Brute-Force
🇹🇼 AndCycle	2026-06-24 11:44:15 (1 week ago)	Jun 24 19:44:14 bacztwo courieresmtpd[3699463]: error,relay=::ffff:158.94.209.56,port=63042,msg="535 ... show more Jun 24 19:44:14 bacztwo courieresmtpd[3699463]: error,relay=::ffff:158.94.209.56,port=63042,msg="535 Authentication failed.",cmd: AUTH LOGIN servidor ... show less	Email Spam Brute-Force
🇹🇼 AndCycle	2026-06-24 10:24:01 (1 week ago)	Jun 24 18:24:00 bacztwo courieresmtpd[3571591]: error,relay=::ffff:158.94.209.56,port=55725,msg="535 ... show more Jun 24 18:24:00 bacztwo courieresmtpd[3571591]: error,relay=::ffff:158.94.209.56,port=55725,msg="535 Authentication failed.",cmd: AUTH LOGIN shell ... show less	Email Spam Brute-Force
🇹🇼 AndCycle	2026-06-24 09:43:57 (1 week ago)	Jun 24 17:43:26 bacztwo courieresmtpd[3507228]: error,relay=::ffff:158.94.209.56,port=61044,msg="535 ... show more Jun 24 17:43:26 bacztwo courieresmtpd[3507228]: error,relay=::ffff:158.94.209.56,port=61044,msg="535 Authentication failed.",cmd: AUTH LOGIN testmail Jun 24 17:43:57 bacztwo courieresmtpd[3507432]: error,relay=::ffff:158.94.209.56,port=52297,msg="535 Authentication failed.",cmd: AUTH LOGIN training Jun 24 17:43:57 bacztwo courieresmtpd[3507432]: error,relay=::ffff:158.94.209.56,port=52297,msg="535 Authentication failed.",cmd: AUTH LOGIN training ... show less	Email Spam Brute-Force
🇹🇼 AndCycle	2026-06-24 09:11:10 (1 week ago)	Jun 24 17:09:08 bacztwo courieresmtpd[3452956]: error,relay=::ffff:158.94.209.56,port=62774,msg="535 ... show more Jun 24 17:09:08 bacztwo courieresmtpd[3452956]: error,relay=::ffff:158.94.209.56,port=62774,msg="535 Authentication failed.",cmd: AUTH LOGIN test1 Jun 24 17:09:35 bacztwo courieresmtpd[3453137]: error,relay=::ffff:158.94.209.56,port=62173,msg="535 Authentication failed.",cmd: AUTH LOGIN support Jun 24 17:10:02 bacztwo courieresmtpd[3453997]: error,relay=::ffff:158.94.209.56,port=62053,msg="535 Authentication failed.",cmd: AUTH LOGIN office Jun 24 17:10:33 bacztwo courieresmtpd[3455967]: error,relay=::ffff:158.94.209.56,port=57871,msg="535 Authentication failed.",cmd: AUTH LOGIN mail Jun 24 17:11:09 bacztwo courieresmtpd[3458298]: error,relay=::ffff:158.94.209.56,port=63898,msg="535 Authentication failed.",cmd: AUTH LOGIN webmaster ... show less	Email Spam Brute-Force
🇺🇸 mnogoweb	2026-06-24 00:28:29 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 158.94.209.56 (NL/The Netherlands/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.94.209.56 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-23 18:25:03 login authenticator failed for (User) [158.94.209.56]: 535 Incorrect authentication data (set_id=manager) 2026-06-23 18:25:23 login authenticator failed for (User) [158.94.209.56]: 535 Incorrect authentication data (set_id=soporte) 2026-06-23 18:25:44 login authenticator failed for (User) [158.94.209.56]: 535 Incorrect authentication data (set_id=staff) 2026-06-23 18:26:04 login authenticator failed for (User) [158.94.209.56]: 535 Incorrect authentication data (set_id=fax) 2026-06-23 18:28:27 login authenticator failed for (User) [158.94.209.56]: 535 Incorrect authentication data (set_id=jobs) show less	Port Scan

Showing 1 to 15 of 409 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 117.211.78.172

🇮🇳 117.201.54.57

🇮🇳 116.74.98.235

🇮🇳 116.73.91.93

🇵🇰 103.26.86.109

🇸🇬 47.128.115.28

🇵🇱 31.179.197.26

🇺🇸 192.155.88.231

🇵🇰 160.30.142.223

🇨🇳 116.196.81.183

🇨🇳 116.172.201.75

🇻🇳 116.118.2.113

🇱🇦 115.84.87.122

🇱🇦 115.84.87.120

🇻🇳 103.90.227.203

🇩🇪 84.118.20.106

🇧🇪 35.187.23.255

🇳🇱 34.91.57.95

🇺🇸 2a0a:4cc0:101:56b:98dc:46ff:fe6d:fce4

🇦🇷 186.38.26.5