JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.49.158

212.56.49.158 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 7%: ?

ISP	VPN Consumer Montreal, Canada
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.49.158

Whois 212.56.49.158

IP Abuse Reports for 212.56.49.158:

This IP address has been reported a total of 34 times from 22 distinct sources. 212.56.49.158 was first reported on February 15th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-06 06:00:00 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=92, sources=3)	Hacking Brute-Force SSH
🇫🇷 UM3	2026-04-23 06:34:19 (1 month ago)	Exim Auth Failed	Brute-Force
🇺🇸 xmission.com	2026-04-11 01:37:48 (2 months ago)	Blocked by UFW (TCP on 58918) Source port: 37301 TTL: 51 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 58918) Source port: 37301 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 212.56.49.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇿🇦 maximonline.co.za	2026-04-10 20:30:07 (2 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
Anonymous	2026-04-10 20:14:49 (2 months ago)	2026-04-10T13:14:40.980178-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logna ... show more 2026-04-10T13:14:40.980178-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=info rhost=212.56.49.158 2026-04-10T13:14:49.302878-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=info rhost=212.56.49.158 ... show less	Brute-Force SSH
🇨🇿 lp	2026-04-07 07:50:25 (2 months ago)	Email account brute force: 5 attempts were recorded from 212.56.49.158 2026-04-07T08:21:04+02:00 war ... show more Email account brute force: 5 attempts were recorded from 212.56.49.158 2026-04-07T08:21:04+02:00 warning: unknown[212.56.49.158]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-07T08:21:05+02:00 warning: unknown[212.56.49.158]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-07T08:21:06+02:00 warning: unknown[212.56.49.158]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-07T08:21:06+02:00 warning: unknown[212.56.49.158]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-07T08:22:09+02:00 warning: unknown[212.56.49.158]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇷🇸 Smel	2026-04-07 06:35:08 (2 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇹🇷 rtbh.com.tr	2026-03-25 20:12:15 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-25 04:30:48 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 bigscoots.com	2026-03-25 01:48:32 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.158 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.158 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-24 21:43:48 dovecot_plain authenticator failed for H=([10.29.18.91]) [212.56.49.158]:56074: 535 Incorrect authentication data ([email protected]) 2026-03-24 21:43:54 dovecot_login authenticator failed for H=([10.29.18.91]) [212.56.49.158]:56074: 535 Incorrect authentication data ([email protected]) 2026-03-24 21:44:03 dovecot_plain authenticator failed for H=([10.29.18.91]) [212.56.49.158]:62492: 535 Incorrect authentication data ([email protected]) 2026-03-24 21:44:05 dovecot_login authenticator failed for H=([10.29.18.91]) [212.56.49.158]:62492: 535 Incorrect authentication data ([email protected]) 2026-03-24 21:48:31 dovecot_plain authenticator failed for H=([10.29.18.91]) [212.56.49.158]:20620: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇵🇱 IT RDC	2026-03-25 01:47:54 (2 months ago)	Mar 25 02:47:52 rdcmail postfix/submission/smtpd[3908053]: warning: unknown[212.56.49.158]: SASL PLA ... show more Mar 25 02:47:52 rdcmail postfix/submission/smtpd[3908053]: warning: unknown[212.56.49.158]: SASL PLAIN authentication failed: authentication failure, [email protected] Mar 25 02:47:52 rdcmail postfix/submission/smtpd[3908053]: warning: unknown[212.56.49.158]: SASL LOGIN authentication failed: authentication failure, [email protected] Mar 25 02:47:54 rdcmail postfix/smtps/smtpd[3909572]: warning: unknown[212.56.49.158]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Brute-Force
Anonymous	2026-03-25 01:45:25 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.158 (CA/Canada/-)	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-14 20:12:03 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-13 20:12:02 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇿 lp	2026-03-12 17:59:32 (3 months ago)	Email account brute force: 6 attempts were recorded from 212.56.49.158 2026-03-12T17:51:27+01:00 war ... show more Email account brute force: 6 attempts were recorded from 212.56.49.158 2026-03-12T17:51:27+01:00 warning: unknown[212.56.49.158]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-12T17:51:27+01:00 warning: unknown[212.56.49.158]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-12T17:51:28+01:00 warning: unknown[212.56.49.158]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-12T17:51:28+01:00 warning: unknown[212.56.49.158]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-12T17:51:38+01:00 warning: unknown[212.56.49.158]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-12T17:51:38+01:00 warning: unknown[212.56.49.158]: SASL LOGIN authentication failed: authenticat show less	Brute-Force

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 59.92.51.186

🇿🇦 196.192.181.202

🇫🇷 185.177.72.54

🇧🇩 103.134.26.118

🇫🇷 91.231.89.81

🇷🇴 80.94.92.171

🇺🇸 70.56.113.194

🇳🇱 46.151.178.13

🇨🇳 39.96.190.88

🇺🇸 20.84.119.5

🇩🇪 2a0b:f4c0:16c:15::1

🇬🇧 188.240.59.10

🇲🇰 188.44.20.32

🇸🇬 172.188.89.41

🇳🇬 152.32.141.40

🇨🇳 116.6.68.114

🇳🇱 81.19.216.77

🇺🇸 2604:a880:400:d1:0:4:9e8b:e001

🇹🇼 198.235.24.98

🇸🇬 194.61.41.72