JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.32.48.75

212.32.48.75 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 2%: ?

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6461
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.32.48.75

Whois 212.32.48.75

IP Abuse Reports for 212.32.48.75:

This IP address has been reported a total of 15 times from 13 distinct sources. 212.32.48.75 was first reported on September 23rd 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 chronos	2026-06-04 01:29:03 (2 weeks ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Loca ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Location: Canada, Toronto show less	Port Scan Hacking
Anonymous	2026-03-09 14:40:07 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-03-06 14:35:18 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-03-05 16:30:46 (3 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇷🇺 DZBOT	2026-03-05 04:13:40 (3 months ago)	SMTP. Brute-force users (authenticator failed)	Brute-Force
🇮🇹 VHosting	2026-03-05 03:32:19 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇿 lp	2026-03-05 03:05:51 (3 months ago)	Email account brute force: 5 attempts were recorded from 212.32.48.75 2026-03-05T03:12:20+01:00 warn ... show more Email account brute force: 5 attempts were recorded from 212.32.48.75 2026-03-05T03:12:20+01:00 warning: unknown[212.32.48.75]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-05T03:12:21+01:00 warning: unknown[212.32.48.75]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-05T03:12:23+01:00 warning: unknown[212.32.48.75]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-05T03:12:23+01:00 warning: unknown[212.32.48.75]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-05T03:12:34+01:00 warning: unknown[212.32.48.75]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 bigscoots.com	2026-03-05 02:03:02 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 212.32.48.75 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 212.32.48.75 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-04 21:02:36 dovecot_plain authenticator failed for H=([10.11.212.189]) [212.32.48.75]:28467: 535 Incorrect authentication data ([email protected]) 2026-03-04 21:02:42 dovecot_login authenticator failed for H=([10.11.212.189]) [212.32.48.75]:28467: 535 Incorrect authentication data ([email protected]) 2026-03-04 21:02:49 dovecot_plain authenticator failed for H=([10.11.212.189]) [212.32.48.75]:29235: 535 Incorrect authentication data ([email protected]) 2026-03-04 21:02:51 dovecot_login authenticator failed for H=([10.11.212.189]) [212.32.48.75]:29235: 535 Incorrect authentication data ([email protected]) 2026-03-04 21:02:58 dovecot_plain authenticator failed for H=([10.11.212.189]) [212.32.48.75]:30434: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 xmission.com	2026-02-19 23:20:08 (4 months ago)	Blocked by UFW (TCP on 6998) Source port: 53370 TTL: 49 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6998) Source port: 53370 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 212.32.48.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-01-01 05:00:21 (5 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇧🇷 SvrAdmin	2025-12-31 09:18:02 (5 months ago)	[315] (smtpauth) Failed SMTP AUTH login from 212.32.48.75 (CA/Canada/-): 5 in the last 3600 secs; Po ... show more [315] (smtpauth) Failed SMTP AUTH login from 212.32.48.75 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Dec 31 06:17:54 cwp01 postfix/smtpd[7049]: warning: unknown[212.32.48.75]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 31 06:17:59 cwp01 postfix/smtpd[6732]: warning: unknown[212.32.48.75]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 31 06:18:00 cwp01 postfix/smtpd[7048]: warning: unknown[212.32.48.75]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 31 06:18:00 cwp01 postfix/smtpd[7050]: warning: unknown[212.32.48.75]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 31 06:18:00 cwp01 postfix/smtpd[7051]: warning: unknown[212.32.48.75]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
🇺🇸 xmission.com	2025-12-06 22:03:44 (6 months ago)	Blocked by UFW (TCP on 37496) Source port: 51299 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 37496) Source port: 51299 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 212.32.48.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 marzzzello	2025-11-24 00:02:13 (6 months ago)	Ports: 25x 56599	Port Scan
🇩🇪 findlab	2025-09-29 03:00:07 (8 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇳🇱 thedreamer.nl	2025-09-23 18:32:33 (8 months ago)	212.32.48.75 - - [23/Sep/2025:20:32:08 +0200] "GET /wp-login.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 ... show more 212.32.48.75 - - [23/Sep/2025:20:32:08 +0200] "GET /wp-login.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "CA" "Toronto" "43.65470" "-79.36230" 212.32.48.75 - - [23/Sep/2025:20:32:08 +0200] "GET /wp/wp-login.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "CA" "Toronto" "43.65470" "-79.36230" 212.32.48.75 - - [23/Sep/2025:20:32:08 +0200] "GET /wp/wp-login.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "CA" "Toronto" "43.65470" "-79.36230" 212.32.48.75 - - [23/Sep/2025:20:32:09 +0200] "GET /wp/wp-login.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "CA" "Toronto" "43.65470" "-79.36230" ... show less	Brute-Force Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.185.22.6

🇸🇪 185.246.130.20

🇨🇳 121.204.171.142

🇮🇶 212.126.110.202

🇭🇰 199.45.154.146

🇷🇴 193.46.255.86

🇮🇳 117.235.136.26

🇨🇳 117.132.5.139

🇫🇷 91.231.89.66

🇳🇱 193.176.31.216

🇺🇸 162.216.149.48

🇫🇮 147.185.133.224

🇺🇸 141.11.88.3

🇻🇳 113.190.40.93

🇸🇪 104.23.221.39

🇷🇺 95.25.21.251

🇰🇷 61.74.224.30

🇺🇸 45.130.83.71

🇨🇳 39.76.131.92

🇬🇧 35.203.211.169