JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.49.152

212.56.49.152 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 20%: ?

20%

ISP	VPN Consumer Montreal, Canada
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.49.152

Whois 212.56.49.152

IP Abuse Reports for 212.56.49.152:

This IP address has been reported a total of 60 times from 34 distinct sources. 212.56.49.152 was first reported on February 14th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-05-23 02:11:20 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇧🇷 chronos	2026-05-16 22:01:04 (3 weeks ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Loca ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Location: Canada, Montreal show less	Port Scan Hacking
🇮🇳 evicky2002	2026-05-06 06:00:00 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=92, sources=3)	Hacking Brute-Force SSH
🇫🇷 basing	2026-04-22 14:35:45 (1 month ago)	2026-04-22 15:35:45 pzb SASL PLAIN auth failed: rhost=212.56.49.152...	Brute-Force
🇨🇿 lp	2026-04-20 16:15:08 (1 month ago)	Email account brute force: 5 attempts were recorded from 212.56.49.152 2026-04-17T19:09:23+02:00 war ... show more Email account brute force: 5 attempts were recorded from 212.56.49.152 2026-04-17T19:09:23+02:00 warning: unknown[212.56.49.152]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-17T19:09:23+02:00 warning: unknown[212.56.49.152]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-17T19:09:24+02:00 warning: unknown[212.56.49.152]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-17T19:09:24+02:00 warning: unknown[212.56.49.152]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-17T19:09:32+02:00 warning: unknown[212.56.49.152]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇿 lp	2026-04-16 00:19:57 (1 month ago)	Email account brute force: 6 attempts were recorded from 212.56.49.152 2026-04-16T01:32:23+02:00 war ... show more Email account brute force: 6 attempts were recorded from 212.56.49.152 2026-04-16T01:32:23+02:00 warning: unknown[212.56.49.152]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-16T01:32:23+02:00 warning: unknown[212.56.49.152]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-16T01:32:27+02:00 warning: unknown[212.56.49.152]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-16T01:32:27+02:00 warning: unknown[212.56.49.152]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-16T01:32:39+02:00 warning: unknown[212.56.49.152]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-16T01:32:39+02:00 warning: unknown[212.56.49.152]: SASL LOGIN authentication failed: authen show less	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-21 20:12:12 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 rroethof	2026-03-21 10:49:46 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.152 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.152 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2026-03-21 11:49:36 plain authenticator failed for H=([10.23.18.220]) [212.56.49.152]: 535 Incorrect authentication data ([email protected]) 2026-03-21 11:49:36 login authenticator failed for H=([10.23.18.220]) [212.56.49.152]: 535 Incorrect authentication data ([email protected]) 2026-03-21 11:49:43 plain authenticator failed for H=([10.23.18.220]) [212.56.49.152]: 535 Incorrect authentication data ([email protected]) 2026-03-21 11:49:44 login authenticator failed for H=([10.23.18.220]) [212.56.49.152]: 535 Incorrect authentication data ([email protected]) 2026-03-21 11:49:45 plain authenticator failed for H=([10.23.18.220]) [212.56.49.152]: 535 Incorrect authentication data ([email protected]) show less	Spoofing Brute-Force Bad Web Bot Web App Attack SSH
🇧🇷 SvrAdmin	2026-03-21 05:32:34 (2 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 212.56.49.152 (CA/Canada/-): 5 in the last 3600 secs; P ... show more [101] (smtpauth) Failed SMTP AUTH login from 212.56.49.152 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-03-21 02:31:58 dovecot_plain authenticator failed for H=([10.23.18.217]) [212.56.49.152]:3010: 535 Incorrect authentication data ([email protected]) 2026-03-21 02:32:04 dovecot_login authenticator failed for H=([10.23.18.217]) [212.56.49.152]:3010: 535 Incorrect authentication data ([email protected]) 2026-03-21 02:32:11 dovecot_plain authenticator failed for H=([10.23.18.217]) [212.56.49.152]:51000: 535 Incorrect authentication data ([email protected]) 2026-03-21 02:32:13 dovecot_login authenticator failed for H=([10.23.18.217]) [212.56.49.152]:51000: 535 Incorrect authentication data ([email protected]) 2026-03-21 02:32:28 dovecot_plain authenticator failed for H=([10.23.18.217]) [212.56.49.152]:41935: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇫🇷 adlp.org	2026-03-21 00:29:05 (2 months ago)	Mar 21 00:28:59 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.49.15 ... show more Mar 21 00:28:59 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.49.152;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@adlp.org$;KILL;2;Licence to kill Mar 21 00:29:02 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.49.152;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@adlp.org$;KILL;2;Licence to kill Mar 21 00:29:05 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.49.152;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
🇵🇦 iphezimbra	2026-03-21 00:01:55 (2 months ago)	Fail2Ban reported IP from jail zimbra-smtp on <hostname>	Brute-Force SSH
Anonymous	2026-03-20 23:58:57 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.152 (CA/Canada/-)	Brute-Force
🇦🇺 aglenday	2026-03-20 23:42:29 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.152 (CA/Canada/-): 1 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.152 (CA/Canada/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-03-21T10:42:27.085109+11:00 mail postfix/submission/smtpd[568718]: warning: unknown[212.56.49.152]: SASL PLAIN authentication failed: (reason unavailable), [email protected] show less	Port Scan
🇸🇮 basing	2026-03-20 22:33:55 (2 months ago)	2026-03-20 23:33:55 bs SASL PLAIN auth failed: rhost=212.56.49.152...	Brute-Force
🇮🇩 xveil	2026-03-20 22:18:45 (2 months ago)	2026-03-21T05:18:43.326325 mail-honeypot postfix/submission/smtpd[29647]: warning: unknown[212.56.49 ... show more 2026-03-21T05:18:43.326325 mail-honeypot postfix/submission/smtpd[29647]: warning: unknown[212.56.49.152]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 212.253.199.27

🇧🇷 189.30.231.20

🇩🇪 178.104.245.33

🇳🇱 176.65.139.103

🇺🇸 151.240.45.67

🇫🇮 147.185.133.121

🇩🇪 141.11.250.239

🇮🇳 103.38.219.22

🇷🇺 91.146.24.164

🇸🇬 47.79.206.127

🇺🇸 34.132.194.166

🇵🇰 223.123.43.6

🇳🇱 195.178.110.30

🇺🇸 156.244.46.207

🇨🇳 118.196.116.42

🇳🇱 45.156.128.169

🇬🇧 35.203.211.140

🇸🇬 34.87.182.153

🇮🇳 2405:201:a442:8039:498c:8ad6:e59d:98ae

🇨🇳 221.238.15.50