JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.49.140

212.56.49.140 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 1%: ?

ISP	VPN Consumer Montreal, Canada
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.49.140

Whois 212.56.49.140

IP Abuse Reports for 212.56.49.140:

This IP address has been reported a total of 55 times from 38 distinct sources. 212.56.49.140 was first reported on February 14th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Agrohim	2026-05-24 00:25:52 (3 weeks ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 bigscoots.com	2026-04-19 16:17:58 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-19 12:17:31 dovecot_plain authenticator failed for H=([10.11.18.151]) [212.56.49.140]:17954: 535 Incorrect authentication data ([email protected]) 2026-04-19 12:17:37 dovecot_login authenticator failed for H=([10.11.18.151]) [212.56.49.140]:17954: 535 Incorrect authentication data ([email protected]) 2026-04-19 12:17:46 dovecot_plain authenticator failed for H=([10.11.18.151]) [212.56.49.140]:9744: 535 Incorrect authentication data ([email protected]) 2026-04-19 12:17:48 dovecot_login authenticator failed for H=([10.11.18.151]) [212.56.49.140]:9744: 535 Incorrect authentication data ([email protected]) 2026-04-19 12:17:56 dovecot_plain authenticator failed for H=([10.11.18.151]) [212.56.49.140]:1531: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇧🇷 SvrAdmin	2026-04-19 16:08:05 (2 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 3600 secs; P ... show more [101] (smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-19 13:07:53 dovecot_plain authenticator failed for H=([10.11.18.151]) [212.56.49.140]:58173: 535 Incorrect authentication data ([email protected]) 2026-04-19 13:07:57 dovecot_plain authenticator failed for H=([10.11.18.151]) [212.56.49.140]:54414: 535 Incorrect authentication data ([email protected]) 2026-04-19 13:07:57 dovecot_plain authenticator failed for H=([10.11.18.151]) [212.56.49.140]:56521: 535 Incorrect authentication data ([email protected]) 2026-04-19 13:07:57 dovecot_plain authenticator failed for H=([10.11.18.151]) [212.56.49.140]:31192: 535 Incorrect authentication data ([email protected]) 2026-04-19 13:07:59 dovecot_login authenticator failed for H=([10.11.18.151]) [212.56.49.140]:58173: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇭🇺 Lacika555	2026-04-17 19:51:42 (2 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇨🇿 lp	2026-04-06 15:19:45 (2 months ago)	Email account brute force: 4 attempts were recorded from 212.56.49.140 2026-04-06T16:44:23+02:00 war ... show more Email account brute force: 4 attempts were recorded from 212.56.49.140 2026-04-06T16:44:23+02:00 warning: unknown[212.56.49.140]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-06T16:44:23+02:00 warning: unknown[212.56.49.140]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-06T16:44:24+02:00 warning: unknown[212.56.49.140]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-06T16:44:24+02:00 warning: unknown[212.56.49.140]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇦 Julio Covolato	2026-04-06 15:15:02 (2 months ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇫🇷 UM3	2026-04-06 15:00:33 (2 months ago)	Exim Auth Failed	Brute-Force
🇺🇸 bigscoots.com	2026-04-03 11:29:37 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-03 07:29:08 dovecot_plain authenticator failed for H=([10.11.18.37]) [212.56.49.140]:21325: 535 Incorrect authentication data ([email protected]) 2026-04-03 07:29:14 dovecot_login authenticator failed for H=([10.11.18.37]) [212.56.49.140]:21325: 535 Incorrect authentication data ([email protected]) 2026-04-03 07:29:20 dovecot_plain authenticator failed for H=([10.11.18.37]) [212.56.49.140]:26226: 535 Incorrect authentication data ([email protected]) 2026-04-03 07:29:26 dovecot_login authenticator failed for H=([10.11.18.37]) [212.56.49.140]:26226: 535 Incorrect authentication data ([email protected]) 2026-04-03 07:29:35 dovecot_plain authenticator failed for H=([10.11.18.37]) [212.56.49.140]:48706: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-03 02:35:15 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-02 22:34:45 dovecot_plain authenticator failed for H=([10.11.18.34]) [212.56.49.140]:41651: 535 Incorrect authentication data ([email protected]) 2026-04-02 22:34:51 dovecot_login authenticator failed for H=([10.11.18.34]) [212.56.49.140]:41651: 535 Incorrect authentication data ([email protected]) 2026-04-02 22:34:58 dovecot_plain authenticator failed for H=([10.11.18.34]) [212.56.49.140]:62752: 535 Incorrect authentication data ([email protected]) 2026-04-02 22:35:00 dovecot_login authenticator failed for H=([10.11.18.34]) [212.56.49.140]:62752: 535 Incorrect authentication data ([email protected]) 2026-04-02 22:35:12 dovecot_plain authenticator failed for H=([10.11.18.34]) [212.56.49.140]:43791: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 neverdown.eu	2026-04-02 23:47:43 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 60 secs; Ports: ; ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.140 (CA/Canada/-): 5 in the last 60 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-03 02:47:13 dovecot_plain authenticator failed for H=([10.11.18.239]) [212.56.49.140]:1107: 535 Incorrect authentication data ([email protected]) 2026-04-03 02:47:19 dovecot_login authenticator failed for H=([10.11.18.239]) [212.56.49.140]:1107: 535 Incorrect authentication data ([email protected]) 2026-04-03 02:47:27 dovecot_plain authenticator failed for H=([10.11.18.239]) [212.56.49.140]:45890: 535 Incorrect authentication data ([email protected]) 2026-04-03 02:47:29 dovecot_login authenticator failed for H=([10.11.18.239]) [212.56.49.140]:45890: 535 Incorrect authentication data ([email protected]) 2026-04-03 02:47:41 dovecot_plain authenticator failed for H=([10.11.18.239]) [212.56.49.140]:7269: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇫🇷 adlp.org	2026-03-26 19:20:59 (2 months ago)	Mar 26 19:20:53 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.49.140;[UNAVAILABL ... show more Mar 26 19:20:53 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.49.140;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@adlp.org$;KILL;2;Licence to kill Mar 26 19:20:56 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.49.140;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@adlp.org$;KILL;2;Licence to kill Mar 26 19:20:59 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.49.140;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
🇨🇿 lp	2026-03-26 19:20:27 (2 months ago)	Email account brute force: 2 attempts were recorded from 212.56.49.140 2026-03-26T18:55:54+01:00 war ... show more Email account brute force: 2 attempts were recorded from 212.56.49.140 2026-03-26T18:55:54+01:00 warning: unknown[212.56.49.140]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-26T18:55:54+01:00 warning: unknown[212.56.49.140]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇳🇱 FREAKISH	2026-03-26 03:02:43 (2 months ago)	2026-03-26 04:02:43: Minecraft server scan detected from 212.56.49.140 on port 25565 of 127.0.0.1	Port Scan
🇩🇪 int8	2026-03-26 03:02:19 (2 months ago)	2026-03-26T03:02:19.132822682Z Minecraft server scanner: status request	Port Scan
🇺🇸 LockBlock	2026-03-26 03:02:13 (2 months ago)	2026-03-26 03:02:13: Minecraft server scan detected from 212.56.49.140 on port 25565 of racknerd-e7e ... show more 2026-03-26 03:02:13: Minecraft server scan detected from 212.56.49.140 on port 25565 of racknerd-e7e1a9 show less	Port Scan

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.237

🇮🇪 128.251.36.118

🇮🇳 106.214.9.22

🇮🇹 95.210.105.202

🇺🇸 91.230.168.99

🇺🇸 66.132.172.236

🇨🇳 58.221.60.25

🇧🇷 187.62.80.238

🇳🇱 167.172.34.119

🇳🇱 134.122.49.164

🇺🇸 104.37.191.206

🇨🇦 85.217.149.39

🇵🇱 51.83.193.197

🇺🇸 50.116.44.20

🇳🇱 45.148.10.157

🇮🇩 27.121.83.84

🇺🇸 20.9.43.99

🇯🇵 8.216.8.253

🇨🇳 203.119.82.1

🇺🇸 172.202.118.46