JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.49.56

212.56.49.56 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 18%: ?

18%

ISP	VPN Consumer Montreal, Canada
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.49.56

Whois 212.56.49.56

IP Abuse Reports for 212.56.49.56:

This IP address has been reported a total of 81 times from 32 distinct sources. 212.56.49.56 was first reported on July 1st 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-10 17:14:03 (3 days ago)	ICS Labs identified 212.56.49.56 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇺🇸 bitblockit	2026-05-12 04:33:04 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 47787/tcp. Observed event time: 2026-05-12 04:33:04 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇩🇪 rh24	2026-04-23 04:59:48 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.56 (CA/Canada/-)	Brute-Force
🇯🇵 kawanchu	2026-04-23 04:35:24 (1 month ago)	Brute-force attack via SMTP AUTH. Repeated login failures on mail server.	Brute-Force
🇺🇸 bigscoots.com	2026-04-10 20:45:05 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.56 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.56 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-10 16:44:41 dovecot_plain authenticator failed for H=([10.17.18.172]) [212.56.49.56]:50312: 535 Incorrect authentication data ([email protected]) 2026-04-10 16:44:47 dovecot_login authenticator failed for H=([10.17.18.172]) [212.56.49.56]:50312: 535 Incorrect authentication data ([email protected]) 2026-04-10 16:44:54 dovecot_plain authenticator failed for H=([10.17.18.172]) [212.56.49.56]:13518: 535 Incorrect authentication data ([email protected]) 2026-04-10 16:44:56 dovecot_login authenticator failed for H=([10.17.18.172]) [212.56.49.56]:13518: 535 Incorrect authentication data ([email protected]) 2026-04-10 16:45:04 dovecot_plain authenticator failed for H=([10.17.18.172]) [212.56.49.56]:42032: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 xmission.com	2026-04-09 18:20:08 (2 months ago)	Blocked by UFW (TCP on 37490) Source port: 49976 TTL: 51 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 37490) Source port: 49976 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 212.56.49.56) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 lp	2026-04-06 12:19:44 (2 months ago)	Email account brute force: 6 attempts were recorded from 212.56.49.56 2026-04-06T13:26:31+02:00 warn ... show more Email account brute force: 6 attempts were recorded from 212.56.49.56 2026-04-06T13:26:31+02:00 warning: unknown[212.56.49.56]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-06T13:26:31+02:00 warning: unknown[212.56.49.56]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-06T13:26:32+02:00 warning: unknown[212.56.49.56]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-06T13:26:32+02:00 warning: unknown[212.56.49.56]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-06T13:26:41+02:00 warning: unknown[212.56.49.56]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-06T13:26:41+02:00 warning: unknown[212.56.49.56]: SASL LOGIN authentication failed: authenticatio show less	Brute-Force
🇷🇸 Smel	2026-04-06 11:34:35 (2 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇩🇪 rh24	2026-04-06 11:29:43 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.56 (CA/Canada/-)	Brute-Force
🇨🇿 lp	2026-03-30 06:20:00 (2 months ago)	Email account brute force: 6 attempts were recorded from 212.56.49.56 2026-03-30T07:50:00+02:00 warn ... show more Email account brute force: 6 attempts were recorded from 212.56.49.56 2026-03-30T07:50:00+02:00 warning: unknown[212.56.49.56]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-30T07:50:00+02:00 warning: unknown[212.56.49.56]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-30T07:50:02+02:00 warning: unknown[212.56.49.56]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-30T07:50:02+02:00 warning: unknown[212.56.49.56]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-30T07:50:10+02:00 warning: unknown[212.56.49.56]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-30T07:50:11+02:00 warning: unknown[212.56.49.56]: SASL LOGIN authentication failed: authenticatio show less	Brute-Force
🇺🇸 bigscoots.com	2026-03-27 04:09:04 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.56 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 212.56.49.56 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-27 00:08:37 dovecot_plain authenticator failed for H=([10.17.18.128]) [212.56.49.56]:53015: 535 Incorrect authentication data ([email protected]) 2026-03-27 00:08:43 dovecot_login authenticator failed for H=([10.17.18.128]) [212.56.49.56]:53015: 535 Incorrect authentication data ([email protected]) 2026-03-27 00:08:49 dovecot_plain authenticator failed for H=([10.17.18.128]) [212.56.49.56]:15024: 535 Incorrect authentication data ([email protected]) 2026-03-27 00:08:55 dovecot_login authenticator failed for H=([10.17.18.128]) [212.56.49.56]:15024: 535 Incorrect authentication data ([email protected]) 2026-03-27 00:09:03 dovecot_plain authenticator failed for H=([10.17.18.128]) [212.56.49.56]:21457: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇬🇧 consul.to	2026-03-14 22:54:17 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-02-26 23:32:55 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.49.56 (CA/Canada/-)	Brute-Force
🇺🇸 DiodeDave	2026-02-26 23:25:06 (3 months ago)	Attempted access after blacklisting	Email Spam
🇧🇷 hostseries	2026-02-26 02:57:59 (3 months ago)	Trigger: LF_SMTPAUTH	Brute-Force

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.7

🇹🇭 83.118.107.46

🇭🇰 172.71.218.139

🇨🇴 161.18.234.168

🇨🇳 117.22.91.12

🇫🇷 91.231.89.252

🇫🇷 91.231.89.236

🇺🇸 65.49.1.94

🇮🇶 65.20.233.110

🇲🇾 47.254.247.87

🇸🇪 45.129.59.70

🇨🇳 218.245.1.252

🇺🇸 195.184.76.112

🇰🇷 119.192.53.142

🇸🇬 103.13.206.100

🇺🇸 47.251.252.169

🇩🇪 47.245.141.41

🇳🇱 45.148.10.151

🇩🇪 194.88.98.123

🇮🇹 151.93.114.62