JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.54.102

212.56.54.102 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer New Jersey, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4213
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Trenton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.54.102

Whois 212.56.54.102

IP Abuse Reports for 212.56.54.102:

This IP address has been reported a total of 13 times from 12 distinct sources. 212.56.54.102 was first reported on June 20th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-09 06:03:16 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.54.102 (US/United States/New Jersey/Trenton/-/[redacte ... show more (smtpauth) Failed SMTP AUTH login from 212.56.54.102 (US/United States/New Jersey/Trenton/-/[redacted]) show less	Brute-Force
🇮🇹 VHosting	2026-03-09 05:38:40 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇦🇺 MAGIC	2026-02-10 00:32:37 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 sverson	2026-01-30 00:48:04 (4 months ago)	Automated report / Unauthorized connection attempt / Mutliple unauthorized attempts to access web re ... show more Automated report / Unauthorized connection attempt / Mutliple unauthorized attempts to access web resources show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-01-30 00:21:58 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.54.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.54.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 19:21:51.190085 2026] [security2:error] [pid 5287:tid 5287] [client 212.56.54.102:37177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|alan-ip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alan-ip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXv5nxMC4jMgPenDWWNLFQAAAA4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-01-30 00:19:05 (4 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇮🇩 xveil	2026-01-25 21:38:33 (4 months ago)	2026-01-26T04:38:29.863806 mail-honeypot postfix/submission/smtpd[30026]: warning: unknown[212.56.54 ... show more 2026-01-26T04:38:29.863806 mail-honeypot postfix/submission/smtpd[30026]: warning: unknown[212.56.54.102]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2025-11-05 16:30:27 (7 months ago)	Failed login attempt detected by Fail2Ban in plesk-proftpd jail	Brute-Force
🇧🇪 cmbplf	2025-11-03 23:28:04 (7 months ago)	507 requests with user_agent.original Mozilla/5.0 (X11; U; Linux x86_64) AppleWebKit/537.36 (KHTML, ... show more 507 requests with user_agent.original Mozilla/5.0 (X11; U; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/115.0.5738.217 Chrome/115.0.5738.217 Safari/537.36 499 requests with user_agent.original Dalvik/2.1.0 (Linux; U; Android 11; Tibuta_MasterPad-E100 Build/RP1A.201005.006) 478 requests with user_agent.original Mozilla/5.0 (Linux; Android 13; SM-F711U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.43 472 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64; SMARTEMB Build/3.12.9076) AppleWebKit/537.36 (KHTML, like Gecko) Chromium/103.0.5060.129 Chrome/103.0.5060.129 Safari/537.36 467 requests with user_agent.original Mozilla/5.0 (Linux; Android 9) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/119.0.6045.66 Mobile DuckDuckGo/1 Lilo/1.2.3 Safari/537.36 466 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021208 Debian/1.2.1-2 464 requests with user_agent.original Mozill show less	Brute-Force Bad Web Bot
Anonymous	2025-10-16 19:46:51 (8 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.16 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.16 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-16 18:51:58 (8 months ago)	This IP was involved in an brute force and password spray attack on 2025/10/16 13:50:36	Port Scan Brute-Force Exploited Host Web App Attack
🇪🇸 10dencehispahard SL	2025-08-14 06:53:40 (10 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-06-20 22:30:41 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 212.56.54.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 212.56.54.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 18:30:36.917506 2025] [security2:error] [pid 1509983:tid 1509983] [client 212.56.54.102:64796] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cnprcertificationreviews.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/instagram.com"] [unique_id "aFXhDOXXXIC6JVBB5-p_qQAAAAs"], referer: https://cnprcertificationreviews.org/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 122.165.253.37

🇳🇱 91.92.40.8

🇫🇷 85.217.140.12

🇺🇸 57.151.106.164

🇳🇱 45.198.224.120

🇺🇸 35.231.253.27

🇸🇬 206.189.147.58

🇧🇷 179.48.228.231

🇳🇱 176.65.139.254

🇸🇬 172.188.89.41

🇮🇳 103.206.131.33

🇩🇪 69.5.169.250

🇫🇮 62.238.15.231

🇬🇧 51.68.200.137

🇧🇷 20.226.81.217

🇲🇾 202.165.29.123

🇷🇺 154.83.196.237

🇨🇳 120.48.32.130

🇭🇰 103.229.125.106

🇫🇷 91.231.89.87