JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.32.48.112

212.32.48.112 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6461
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.32.48.112

Whois 212.32.48.112

IP Abuse Reports for 212.32.48.112:

This IP address has been reported a total of 14 times from 14 distinct sources. 212.32.48.112 was first reported on August 12th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 Honzas	2026-03-28 19:50:28 (2 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇷🇴 iulianh	2026-03-23 02:27:03 (2 months ago)	25,465,587	Brute-Force SSH
🇨🇴 conexcol	2026-03-23 01:58:06 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.32.48.112 (CA/Canada/-): 5 in the last 3600 secs	Brute-Force
Anonymous	2026-03-19 06:35:04 (2 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇩🇪 Paul Smith	2026-03-02 16:56:32 (3 months ago)	Email Auth Brute force attack 6/1 in last day	Brute-Force
🇹🇭 thaizone.com	2026-02-23 14:25:22 (3 months ago)	Mail credential brute-force attack (SM6) #1	Email Spam Brute-Force
🇧🇷 hostseries	2026-02-11 08:21:39 (4 months ago)	Trigger: LF_SMTPAUTH	Brute-Force
🇺🇸 bigscoots.com	2026-02-11 08:19:53 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.32.48.112 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 212.32.48.112 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-11 03:19:24 dovecot_plain authenticator failed for H=([10.17.18.167]) [212.32.48.112]:25905: 535 Incorrect authentication data ([email protected]) 2026-02-11 03:19:30 dovecot_login authenticator failed for H=([10.17.18.167]) [212.32.48.112]:25905: 535 Incorrect authentication data ([email protected]) 2026-02-11 03:19:38 dovecot_plain authenticator failed for H=([10.17.18.167]) [212.32.48.112]:27324: 535 Incorrect authentication data ([email protected]) 2026-02-11 03:19:40 dovecot_login authenticator failed for H=([10.17.18.167]) [212.32.48.112]:27324: 535 Incorrect authentication data ([email protected]) 2026-02-11 03:19:48 dovecot_plain authenticator failed for H=([10.17.18.167]) [212.32.48.112]:12074: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇨🇿 lp	2026-02-08 13:22:42 (4 months ago)	Email account brute force: 5 attempts were recorded from 212.32.48.112 2026-02-08T12:51:46+01:00 war ... show more Email account brute force: 5 attempts were recorded from 212.32.48.112 2026-02-08T12:51:46+01:00 warning: unknown[212.32.48.112]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-08T12:51:47+01:00 warning: unknown[212.32.48.112]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-08T12:51:48+01:00 warning: unknown[212.32.48.112]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-08T12:51:48+01:00 warning: unknown[212.32.48.112]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-08T12:52:50+01:00 warning: unknown[212.32.48.112]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 FABIO EGAS	2026-02-08 11:53:44 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.32.48.112 (CA/Canada/-)	Brute-Force
🇨🇭 Kepler-1649c	2025-11-25 21:48:10 (6 months ago)	SMTP Authentication errors	Hacking Brute-Force
🇫🇷 polido	2025-09-15 17:37:55 (9 months ago)	Unauthorized connection attempt to port 443 from 212.32.48.112	Port Scan
Anonymous	2025-09-02 15:55:57 (9 months ago)	212.32.48.112 - - [02/Sep/2025:17:55:56 +0200] "GET /blog/wp-login.php HTTP/1.1" 403 4962 "-" "Mozil ... show more 212.32.48.112 - - [02/Sep/2025:17:55:56 +0200] "GET /blog/wp-login.php HTTP/1.1" 403 4962 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" ... show less	Web App Attack
🇩🇪 eskilbrun	2025-08-12 13:15:53 (10 months ago)	2025-08-12T15:15:52.493111+02:00 linode1.eskil.net dovecot[201788]: imap-login: Disconnected: Connec ... show more 2025-08-12T15:15:52.493111+02:00 linode1.eskil.net dovecot[201788]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.32.48.112, lip=194.195.241.187, session=<4Tbu1io8K3zUIDBw> 2025-08-12T15:15:53.055958+02:00 linode1.eskil.net dovecot[201788]: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=212.32.48.112, lip=194.195.241.187, session=<1M321io8vmfUIDBw> 2025-08-12T15:15:53.340103+02:00 linode1.eskil.net dovecot[201788]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=212.32.48.112, lip=194.195.241.187, session=<liT71io8O9fUIDBw> ... show less	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 169.224.104.149

🇧🇷 205.210.31.229

🇨🇳 203.189.195.8

🇺🇦 176.103.1.167

🇺🇸 138.94.219.182

🇫🇷 91.231.89.255

🇳🇱 91.92.40.37

🇱🇹 81.30.98.144

🇫🇮 80.223.190.179

🇧🇬 79.124.40.126

🇲🇾 1.9.213.2

🇳🇱 185.242.226.33

🇫🇷 158.220.111.161

🇮🇳 103.16.202.169

🇺🇸 100.29.192.50

🇺🇸 99.39.251.174

🇺🇸 71.6.199.87

🇸🇬 45.78.204.246

🇨🇳 223.15.242.2

🇺🇸 216.25.89.89