JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.54.139

212.56.54.139 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer New Jersey, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4213
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Trenton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.54.139

Whois 212.56.54.139

IP Abuse Reports for 212.56.54.139:

This IP address has been reported a total of 12 times from 10 distinct sources. 212.56.54.139 was first reported on May 12th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 alph44	2026-02-23 13:09:15 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.54.139 (US/United States/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 212.56.54.139 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: show less	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-21 20:11:41 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇰🇿 yuki	2026-02-21 17:09:23 (4 months ago)	Blocked by UFW on homeserver [31821/tcp] \| SPT: 8179 \| TTL: 49 \| LEN: 60 \| TOS: 0x08 • Reported by: ... show more Blocked by UFW on homeserver [31821/tcp] \| SPT: 8179 \| TTL: 49 \| LEN: 60 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 SpaceHost-Server	2026-02-20 23:37:41 (4 months ago)		Brute-Force Web App Attack
🇩🇪 ipcop.net	2026-02-18 11:56:21 (4 months ago)	Feb 18 12:56:18 mail.srvfarm.net postfix/submission/smtpd[275083]: lost connection after CONNECT fro ... show more Feb 18 12:56:18 mail.srvfarm.net postfix/submission/smtpd[275083]: lost connection after CONNECT from unknown[212.56.54.139] Feb 18 12:56:21 mail.srvfarm.net postfix/submission/smtpd[275109]: warning: unknown[212.56.54.139]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Feb 18 12:56:21 mail.srvfarm.net postfix/submission/smtpd[275109]: too many errors after AUTH from unknown[212.56.54.139] Feb 18 12:56:21 mail.srvfarm.net postfix/submission/smtpd[275109]: disconnect from unknown[212.56.54.139] ehlo=2 starttls=1 auth=0/1 commands=3/4 Feb 18 12:56:21 mail.srvfarm.net postfix/smtps/smtpd[275216]: lost connection after CONNECT from unknown[212.56.54.139] show less	Fraud VoIP Brute-Force
🇺🇸 TPI-Abuse	2025-11-27 19:43:49 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.54.139 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.54.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:43:43.244143 2025] [security2:error] [pid 27245:tid 27245] [client 212.56.54.139:18649] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|chameleonpcs.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chameleonpcs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSip74ycVTZImUNlh4-TFgAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-11-27 15:40:06 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 marzzzello	2025-11-11 08:00:56 (7 months ago)	Ports: 22x 60214	Port Scan
🇩🇪 marzzzello	2025-11-11 03:02:37 (7 months ago)	Ports: 23x 60214	Port Scan
🇩🇪 marzzzello	2025-10-05 02:11:03 (8 months ago)	Ports: 25x 24839	Port Scan
🇱🇻 garmtech.com	2025-09-17 22:39:34 (9 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-39.212.56.54.139.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-39.212.56.54.139.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2025-05-12 11:42:35 (1 year ago)	Form spam	Web Spam

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.175.22.56

🇹🇷 176.90.6.219

🇺🇸 162.216.150.242

🇺🇸 195.184.76.244

🇫🇮 147.185.133.181

🇮🇳 122.176.122.24

🇸🇬 114.119.153.215

🇲🇦 105.155.149.230

🇷🇺 95.24.68.252

🇮🇷 91.92.215.12

🇺🇸 85.208.96.211

🇺🇸 68.70.208.248

🇺🇸 216.25.89.144

🇺🇸 194.39.123.157

🇳🇱 176.65.148.136

🇨🇴 152.200.165.53

🇫🇷 91.231.89.225

🇫🇷 91.231.89.6

🇮🇩 43.157.203.234

🇷🇺 37.140.169.190