JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.49.157

212.56.49.157 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 20%: ?

20%

ISP	VPN Consumer Montreal, Canada
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.49.157

Whois 212.56.49.157

IP Abuse Reports for 212.56.49.157:

This IP address has been reported a total of 60 times from 43 distinct sources. 212.56.49.157 was first reported on February 15th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jormaster3k	2026-05-18 14:48:44 (3 weeks ago)	Attack against Apache (too many 404s)	Web App Attack
Anonymous	2026-04-21 04:01:30 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.157 (CA/Canada/Quebec/Montreal/-/[redacted])	Brute-Force
🇩🇪 Hazzard	2026-04-21 02:17:30 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.157 (CA/Canada/Quebec/Montreal/-/[redacted])	Brute-Force
🇧🇷 SvrAdmin	2026-04-21 02:01:06 (1 month ago)	[101] (smtpauth) Failed SMTP AUTH login from 212.56.49.157 (CA/Canada/-): 5 in the last 3600 secs; P ... show more [101] (smtpauth) Failed SMTP AUTH login from 212.56.49.157 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-20 23:00:30 dovecot_plain authenticator failed for H=([10.28.18.194]) [212.56.49.157]:48177: 535 Incorrect authentication data ([email protected]) 2026-04-20 23:00:37 dovecot_login authenticator failed for H=([10.28.18.194]) [212.56.49.157]:48177: 535 Incorrect authentication data ([email protected]) 2026-04-20 23:00:44 dovecot_plain authenticator failed for H=([10.28.18.194]) [212.56.49.157]:21970: 535 Incorrect authentication data ([email protected]) 2026-04-20 23:00:47 dovecot_login authenticator failed for H=([10.28.18.194]) [212.56.49.157]:21970: 535 Incorrect authentication data ([email protected]) 2026-04-20 23:01:01 dovecot_plain authenticator failed for H=([10.28.18.194]) [212.56.49.157]:27304: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇨🇿 lp	2026-04-16 18:19:44 (1 month ago)	Email account brute force: 6 attempts were recorded from 212.56.49.157 2026-04-16T19:41:50+02:00 war ... show more Email account brute force: 6 attempts were recorded from 212.56.49.157 2026-04-16T19:41:50+02:00 warning: unknown[212.56.49.157]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-16T19:41:50+02:00 warning: unknown[212.56.49.157]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-16T19:41:51+02:00 warning: unknown[212.56.49.157]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-16T19:41:51+02:00 warning: unknown[212.56.49.157]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-16T19:42:11+02:00 warning: unknown[212.56.49.157]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-16T19:42:12+02:00 warning: unknown[212.56.49.157]: SASL LOGIN authentication failed: authen show less	Brute-Force
🇮🇩 xveil	2026-04-16 17:34:36 (1 month ago)	2026-04-17T00:34:33.968774 mail-honeypot postfix/submission/smtpd[26700]: warning: unknown[212.56.49 ... show more 2026-04-17T00:34:33.968774 mail-honeypot postfix/submission/smtpd[26700]: warning: unknown[212.56.49.157]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇷🇴 iulianh	2026-04-16 17:04:47 (1 month ago)	25,465,587	Brute-Force SSH
🇩🇪 SwinT	2026-03-30 22:00:11 (2 months ago)	SMTP brute-force detected by Fail2Ban in plesk-postfix jail	Email Spam Brute-Force
Anonymous	2026-03-30 19:29:23 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.157 (CA/Canada/-)	Brute-Force
🇮🇩 aaKenshin	2026-03-30 19:23:20 (2 months ago)	Suspicious activity detected from IP 212.56.49.157 based on mailserver logs. Sample logs: 2026-03-31 ... show more Suspicious activity detected from IP 212.56.49.157 based on mailserver logs. Sample logs: 2026-03-31 03:23:03,234 INFO [qtp1106043431-29440] [ip=172.16.0.182;oip=212.56.49.157;oport=23981;oproto=smtp;port=39072;soapId=10c10fab;] SoapEngine - handler exception: authentication failed for [], account not found 2026-03-31 03:23:03,234 INFO [qtp1106043431-29440] [ip=172.16.0.182;oip=212.56.49.157;oport=23981;oproto=smtp;port=39072;soapId=10c10fab;] soap - AuthRequest elapsed=0 2026-03-31 03:23:15,614 INFO [qtp1106043431-29440] [ip=172.16.0.182;oip=212.56.49.157;oport=61191;oproto=smtp;port=51712;soapId=10c10fac;] account - Error occurred during authentication: authentication failed for []. Reason: account not found. 2026-03-31 03:23:15,614 INFO [qtp1106043431-29440] [ip=172.16.0.182;oip=212.56.49.157;oport=61191;oproto=smtp;port=51712;soapId=10c10fac;] SoapEngine - handler exception: authentication failed for [**], account not found 2026-03-31 03:23:15,614 INFO [qtp1106043431-29440 show less	Brute-Force
🇪🇸 Nudisco	2026-03-30 19:22:15 (2 months ago)		Brute-Force
🇺🇸 AWSGIEMSAN7	2026-03-30 19:20:15 (2 months ago)	Mar 30 14:20:12 mail postfix/smtpd[14243]: warning: unknown[212.56.49.157]: SASL PLAIN authenticatio ... show more Mar 30 14:20:12 mail postfix/smtpd[14243]: warning: unknown[212.56.49.157]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2026-03-26 21:23:27 (2 months ago)	6x Postfix SASL LOGIN authentication failed	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-25 20:12:15 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-24 20:12:15 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.30

🇨🇳 175.30.70.233

🇧🇬 93.94.141.115

🇺🇸 20.14.78.26

🇸🇪 170.168.241.159

🇪🇸 79.117.225.206

🇨🇳 39.155.99.32

🇨🇳 27.24.141.122

🇷🇺 194.190.153.226

🇭🇰 103.52.153.215

🇭🇰 101.36.119.146

🇺🇸 65.49.1.152

🇨🇳 60.16.208.180

🇺🇸 2607:f8b0:4001:c5f::12c

🇧🇷 205.210.31.201

🇸🇬 172.253.84.216

🇮🇩 163.7.3.154

🇫🇷 51.68.34.131

🇹🇼 36.230.46.111

🇻🇪 201.249.87.203