JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.48.41

212.56.48.41 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 3%: ?

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.48.41

Whois 212.56.48.41

IP Abuse Reports for 212.56.48.41:

This IP address has been reported a total of 15 times from 13 distinct sources. 212.56.48.41 was first reported on August 4th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 matthieul.dev	2026-06-16 06:40:17 (1 week ago)	Blocked by os-abuseipdb; 9 hits, proto=tcp,udp, ports=11696,26043,38786,40541	Port Scan Brute-Force
🇫🇷 masterguru	2026-04-16 11:44:13 (2 months ago)	Blocked suspicious User-Agent on wp-login POST. String match "/wp-login.php" at REQUEST_FILENAME. (5 ... show more Blocked suspicious User-Agent on wp-login POST. String match "/wp-login.php" at REQUEST_FILENAME. (5024-197) show less	Hacking
🇩🇪 LRob.fr	2026-04-16 05:30:04 (2 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇷 masterguru	2026-04-16 05:00:21 (2 months ago)	Blocked suspicious User-Agent on wp-login POST. String match "/wp-login.php" at REQUEST_FILENAME. (5 ... show more Blocked suspicious User-Agent on wp-login POST. String match "/wp-login.php" at REQUEST_FILENAME. (5024-193) show less	Hacking
🇫🇷 masterguru	2026-04-16 02:46:37 (2 months ago)	Blocked suspicious User-Agent on wp-login POST. String match "/wp-login.php" at REQUEST_FILENAME. (5 ... show more Blocked suspicious User-Agent on wp-login POST. String match "/wp-login.php" at REQUEST_FILENAME. (5024-195) show less	Hacking
🇺🇸 nationaleventpros.com	2026-04-15 22:08:50 (2 months ago)	WordPress login attempt	Brute-Force
🇨🇿 huginet	2026-04-15 17:51:19 (2 months ago)	212.56.48.41 - - [15/Apr/2026:19:51:16 +0200] "GET /wp-login.php?action=register HTTP/1.0" 302 - "ht ... show more 212.56.48.41 - - [15/Apr/2026:19:51:16 +0200] "GET /wp-login.php?action=register HTTP/1.0" 302 - "https://www.huginet.net/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 212.56.48.41 - - [15/Apr/2026:19:51:17 +0200] "GET /wp-login.php?registration=disabled HTTP/1.0" 200 10954 "https://www.huginet.net/wp-login.php?registration=disabled" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇩🇪 bsoft.de	2026-04-15 17:11:41 (2 months ago)	212.56.48.41 - - [15/Apr/2026:19:11:37 +0200] "GET /wp-login.php?action=register HTTP/1.0" 404 70575 ... show more 212.56.48.41 - - [15/Apr/2026:19:11:37 +0200] "GET /wp-login.php?action=register HTTP/1.0" 404 70575 "https://www.b-kits.com/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 212.56.48.41 - - [15/Apr/2026:19:11:38 +0200] "GET /wp-login.php?action=register HTTP/1.0" 404 70540 "https://www.b-kits.com/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 212.56.48.41 - - [15/Apr/2026:19:11:40 +0200] "GET /wp-login.php?action=register HTTP/1.0" 404 70508 "https://www.b-kits.com/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-02-15 15:21:36 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.48.41 (NL/The Netherlands/North Holland/Amsterdam/-/[r ... show more (smtpauth) Failed SMTP AUTH login from 212.56.48.41 (NL/The Netherlands/North Holland/Amsterdam/-/[redacted]) show less	Brute-Force
Anonymous	2026-02-15 04:30:30 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2026-02-08 16:30:05 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.48.41 (NL/The Netherlands/-): 6 in the last 3600 secs	Brute-Force
🇬🇧 cg-design.co.uk	2026-02-08 13:34:35 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.48.41 (NL/The Netherlands/-)	Brute-Force
🇬🇧 Hobby Bob	2026-02-08 13:33:58 (4 months ago)	Feb 8 13:33:57 mail postfix/smtps/smtpd[918809]: warning: unknown[212.56.48.41]: SASL PLAIN authenti ... show more Feb 8 13:33:57 mail postfix/smtps/smtpd[918809]: warning: unknown[212.56.48.41]: SASL PLAIN authentication failed: show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-08-04 15:52:09 (10 months ago)	Botnet - login attempts with leaked random user/pass lists	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.26

🇳🇱 45.148.10.147

🇰🇷 220.74.57.165

🇩🇪 213.209.159.228

🇷🇴 193.46.255.86

🇺🇸 184.105.139.113

🇨🇴 177.93.43.53

🇧🇬 46.10.56.170

🇳🇱 45.148.10.141

🇩🇪 45.3.44.86

🇩🇪 45.3.44.27

🇬🇧 35.203.210.166

🇺🇸 23.29.118.224

🇳🇱 176.65.139.242

🇩🇪 64.226.107.125

🇮🇳 27.96.91.92

🇬🇧 193.163.125.193

🇨🇳 183.230.155.13

🇸🇦 176.45.46.183

🇺🇸 128.14.75.249