JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.49.18

212.56.49.18 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 1%: ?

ISP	VPN Consumer Montreal, Canada
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.49.18

Whois 212.56.49.18

IP Abuse Reports for 212.56.49.18:

This IP address has been reported a total of 36 times from 28 distinct sources. 212.56.49.18 was first reported on September 10th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-04 18:00:07 (3 weeks ago)	ICS Labs identified 212.56.49.18 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
Anonymous	2026-04-24 08:51:23 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.18 (CA/Canada/-)	Brute-Force
🇺🇸 bigscoots.com	2026-04-24 08:35:59 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.18 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.18 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-24 04:35:34 dovecot_plain authenticator failed for H=([10.9.180.12]) [212.56.49.18]:42110: 535 Incorrect authentication data ([email protected]) 2026-04-24 04:35:40 dovecot_login authenticator failed for H=([10.9.180.12]) [212.56.49.18]:42110: 535 Incorrect authentication data ([email protected]) 2026-04-24 04:35:47 dovecot_plain authenticator failed for H=([10.9.180.12]) [212.56.49.18]:46374: 535 Incorrect authentication data ([email protected]) 2026-04-24 04:35:49 dovecot_login authenticator failed for H=([10.9.180.12]) [212.56.49.18]:46374: 535 Incorrect authentication data ([email protected]) 2026-04-24 04:35:58 dovecot_plain authenticator failed for H=([10.9.180.12]) [212.56.49.18]:57362: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-04-24 07:55:10 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.18 (CA/Canada/-)	Brute-Force
🇷🇺 DZBOT	2026-04-21 18:44:47 (2 months ago)	DZBOT. Brute-force users SMTP	Brute-Force
Anonymous	2026-04-17 21:04:40 (2 months ago)	Fail2Ban - Postfix SMTP Reject - Auth Failure	Email Spam Brute-Force
🇺🇸 bigscoots.com	2026-04-17 18:49:50 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.18 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.18 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-17 14:49:33 dovecot_plain authenticator failed for H=([10.9.18.92]) [212.56.49.18]:41421: 535 Incorrect authentication data ([email protected]) 2026-04-17 14:49:37 dovecot_plain authenticator failed for H=([10.9.18.92]) [212.56.49.18]:27361: 535 Incorrect authentication data ([email protected]) 2026-04-17 14:49:39 dovecot_login authenticator failed for H=([10.9.18.92]) [212.56.49.18]:41421: 535 Incorrect authentication data ([email protected]) 2026-04-17 14:49:45 dovecot_plain authenticator failed for H=([10.9.18.92]) [212.56.49.18]:49660: 535 Incorrect authentication data ([email protected]) 2026-04-17 14:49:47 dovecot_login authenticator failed for H=([10.9.18.92]) [212.56.49.18]:27361: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 Ghost Rider	2026-04-17 16:01:52 (2 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇨🇿 lp	2026-03-28 04:20:24 (3 months ago)	Email account brute force: 6 attempts were recorded from 212.56.49.18 2026-03-28T04:58:15+01:00 warn ... show more Email account brute force: 6 attempts were recorded from 212.56.49.18 2026-03-28T04:58:15+01:00 warning: unknown[212.56.49.18]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-28T04:58:15+01:00 warning: unknown[212.56.49.18]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-28T04:58:16+01:00 warning: unknown[212.56.49.18]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-28T04:58:16+01:00 warning: unknown[212.56.49.18]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-28T04:58:28+01:00 warning: unknown[212.56.49.18]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-28T04:58:29+01:00 warning: unknown[212.56.49.18]: SASL LOGIN authentication failed: authenticatio show less	Brute-Force
🇮🇩 aaKenshin	2026-03-22 22:40:09 (3 months ago)	Suspicious activity detected from IP 212.56.49.18 based on mailserver logs. Sample logs: 2026-03-23 ... show more Suspicious activity detected from IP 212.56.49.18 based on mailserver logs. Sample logs: 2026-03-23 06:39:37,663 INFO [qtp1106043431-542] [name=*@.id;ip=172.16.0.182;oip=212.56.49.18;oport=14418;oproto=smtp;port=50910;soapId=10c0fbad;] soap - AuthRequest elapsed=4 2026-03-23 06:39:38,244 INFO [qtp1106043431-470] [name=*@.id;ip=172.16.0.182;oip=212.56.49.18;oport=14418;oproto=smtp;port=50922;soapId=10c0fbae;] SoapEngine - handler exception: authentication failed for [], LDAP error: - unable to ldap authenticate: invalid credentials 2026-03-23 06:39:38,244 INFO [qtp1106043431-470] [name=@.id;ip=172.16.0.182;oip=212.56.49.18;oport=14418;oproto=smtp;port=50922;soapId=10c0fbae;] soap - AuthRequest elapsed=3 2026-03-23 06:39:57,744 INFO [qtp1106043431-574] [name=@.id;ip=172.16.0.182;oip=212.56.49.18;oport=21299;oproto=smtp;port=52638;soapId=10c0fbaf;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authenticate: invalid credentia show less	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-21 10:52:02 (3 months ago)	Mar 21 11:52:01 dev postfix/smtpd[327938]: warning: unknown[212.56.49.18]: SASL CRAM-MD5 authenticat ... show more Mar 21 11:52:01 dev postfix/smtpd[327938]: warning: unknown[212.56.49.18]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] Mar 21 11:52:02 dev postfix/smtpd[327938]: warning: unknown[212.56.49.18]: SASL PLAIN authentication failed: authentication failure, [email protected] Mar 21 11:52:02 dev postfix/smtpd[327938]: warning: unknown[212.56.49.18]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Hacking Brute-Force
🇨🇴 conexcol	2026-03-21 10:09:02 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.18 (CA/Canada/-): 5 in the last 3600 secs	Brute-Force
Anonymous	2026-02-28 23:17:01 (4 months ago)	failed imap login	Brute-Force
Anonymous	2026-02-28 22:06:14 (4 months ago)	postfix-aggressive	Brute-Force
🇺🇸 xmission.com	2026-02-23 20:56:08 (4 months ago)	Blocked by UFW (TCP on 1) Source port: 54453 TTL: 114 Packet length: 52 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 1) Source port: 54453 TTL: 114 Packet length: 52 TOS: 0x08 This report (for 212.56.49.18) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 154.221.20.92

🇭🇰 101.36.111.119

🇫🇷 85.217.140.34

🇹🇳 196.176.66.72

🇨🇳 183.222.14.9

🇮🇩 180.243.189.147

🇲🇽 177.227.50.79

🇺🇸 170.106.74.215

🇧🇷 167.126.6.183

🇺🇸 161.35.53.49

🇨🇳 123.191.140.14

🇮🇩 118.99.114.224

🇷🇴 92.118.39.14

🇺🇸 71.167.135.77

🇺🇸 23.134.76.12

🇩🇪 213.209.159.242

🇭🇺 193.188.192.213

🇳🇱 160.119.69.14

🇬🇧 154.16.44.143

🇳🇬 152.32.141.86