JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.49.109

212.56.49.109 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 41%: ?

41%

ISP	VPN Consumer Montreal, Canada
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.49.109

Whois 212.56.49.109

IP Abuse Reports for 212.56.49.109:

This IP address has been reported a total of 109 times from 68 distinct sources. 212.56.49.109 was first reported on August 16th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-26 15:24:19 (2 days ago)	Blocked by UFW (TCP on 1) Source port: 44030 TTL: 115 Packet length: 52 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 1) Source port: 44030 TTL: 115 Packet length: 52 TOS: 0x08 This report (for 212.56.49.109) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 edoram	2026-06-22 22:47:52 (6 days ago)	SSH brute-force from honeypot. 57 attempts in 24h, 0 unique usernames tried.	Brute-Force SSH
🇫🇷 edoram	2026-06-22 10:04:08 (6 days ago)	SSH brute-force from honeypot. 36 attempts in 24h, 0 unique usernames tried.	Brute-Force SSH
🇫🇷 Kimax	2026-06-22 03:37:35 (1 week ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇫🇷 Kimax	2026-06-08 18:29:52 (2 weeks ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇺🇸 DiodeDave	2026-05-05 00:45:21 (1 month ago)	Attempted access after blacklisting	Email Spam
🇳🇱 e.fierstra	2026-05-02 08:10:51 (1 month ago)	Failed SMTP logins	Brute-Force
Anonymous	2026-05-02 07:30:45 (1 month ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
🇷🇺 DZBOT	2026-05-02 07:19:17 (1 month ago)	DZBOT. Brute-force users SMTP	Brute-Force
Anonymous	2026-05-02 07:07:43 (1 month ago)	Authentication failure	Brute-Force
🇨🇿 lp	2026-05-02 06:20:10 (1 month ago)	Email account brute force: 4 attempts were recorded from 212.56.49.109 2026-05-02T07:39:40+02:00 war ... show more Email account brute force: 4 attempts were recorded from 212.56.49.109 2026-05-02T07:39:40+02:00 warning: unknown[212.56.49.109]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-05-02T07:39:40+02:00 warning: unknown[212.56.49.109]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-05-02T07:39:42+02:00 warning: unknown[212.56.49.109]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-05-02T07:39:43+02:00 warning: unknown[212.56.49.109]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇮🇹 www.tana.it	2026-05-02 05:40:49 (1 month ago)	SMTP auth dictionary attack	Brute-Force
Anonymous	2026-05-02 05:12:28 (1 month ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
🇩🇪 Click-Networks	2026-05-02 05:07:57 (1 month ago)	May 2 06:42:26 wh02 postfix/smtpd[1333516]: connect from unknown[212.56.49.109] May 2 06:42:26 wh0 ... show more May 2 06:42:26 wh02 postfix/smtpd[1333516]: connect from unknown[212.56.49.109] May 2 06:42:26 wh02 postfix/smtpd[1333516]: lost connection after CONNECT from unknown[212.56.49.109] May 2 06:42:26 wh02 postfix/smtpd[1333516]: disconnect from unknown[212.56.49.109] commands=0/0 May 2 06:42:26 wh02 postfix/smtpd[1333516]: connect from unknown[212.56.49.109] May 2 06:42:27 wh02 postfix/smtpd[1333516]: warning: unknown[212.56.49.109]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] May 2 06:42:27 wh02 postfix/smtpd[1333516]: warning: unknown[212.56.49.109]: SASL PLAIN authentication failed: authentication failure, [email protected] May 2 06:42:27 wh02 postfix/smtpd[1333516]: warning: unknown[212.56.49.109]: SASL LOGIN authentication failed: authentication failure, [email protected] May 2 06:42:27 wh02 postfix/smtpd[1333516]: disconnect from unknown[212.56.49.109] ehlo=2 starttls=1 auth=0/3 quit= show less	Email Spam Brute-Force Exploited Host
🇺🇸 bigscoots.com	2026-05-02 03:12:40 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.109 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.109 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-05-01 23:12:10 dovecot_plain authenticator failed for H=([10.10.18.249]) [212.56.49.109]:34120: 535 Incorrect authentication data ([email protected]) 2026-05-01 23:12:16 dovecot_login authenticator failed for H=([10.10.18.249]) [212.56.49.109]:34120: 535 Incorrect authentication data ([email protected]) 2026-05-01 23:12:22 dovecot_plain authenticator failed for H=([10.10.18.249]) [212.56.49.109]:60876: 535 Incorrect authentication data ([email protected]) 2026-05-01 23:12:28 dovecot_login authenticator failed for H=([10.10.18.249]) [212.56.49.109]:60876: 535 Incorrect authentication data ([email protected]) 2026-05-01 23:12:36 dovecot_plain authenticator failed for H=([10.10.18.249]) [212.56.49.109]:55526: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2001:67c:254:b0b0::abcd:18

🇦🇺 203.185.198.246

🇳🇱 185.136.15.13

🇧🇷 177.91.53.89

🇳🇱 176.65.139.102

🇨🇳 101.126.20.199

🇺🇸 73.15.234.112

🇵🇰 72.255.26.205

🇮🇪 34.251.136.239

🇮🇩 34.101.37.2

🇺🇸 20.84.153.170

🇰🇷 221.163.5.228

🇺🇸 209.222.10.98

🇧🇷 177.66.195.241

🇧🇷 177.66.193.212

🇧🇷 177.37.17.50

🇺🇸 166.62.118.147

🇺🇸 162.229.202.171

🇺🇸 134.122.125.153

🇵🇰 103.244.177.32