AbuseIPDB » 212.56.54.233
212.56.54.233 was found in our database!
This IP was reported 8 times. Confidence of
Abuse
is 1% : ?
ISP
VPN Consumer New Jersey, United States of America
Usage Type
Data Center/Web Hosting/Transit
ASN
AS4213
Domain Name
vpnconsumer.com
Country
๐บ๐ธ
United States of America
City
Trenton, New Jersey
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 212.56.54.233 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
212.56.54.233 was first reported on
May 28th 2025 , and the most recent report was
6 days ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ณ๐ด
jad-abuse
2026-06-21 07:54:25
(6 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor( ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor(s); 60 hits.
show less
Port Scan
Bad Web Bot
Anonymous
2026-02-22 07:45:01
(4 months ago)
...
Brute-Force
๐จ๐ฟ
lp
2026-02-21 13:25:29
(4 months ago)
Email account brute force: 6 attempts were recorded from 212.56.54.233
2026-02-21T13:08:49+01:00 war ...
show more
Email account brute force: 6 attempts were recorded from 212.56.54.233
2026-02-21T13:08:49+01:00 warning: unknown[212.56.54.233]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-02-21T13:08:49+01:00 warning: unknown[212.56.54.233]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-02-21T13:08:50+01:00 warning: unknown[212.56.54.233]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-02-21T13:08:50+01:00 warning: unknown[212.56.54.233]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-02-21T13:09:04+01:00 warning: unknown[212.56.54.233]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-02-21T13:09:04+01:00 warning: unknown[212.56.54.233]: SASL LOGIN authentication failed: a
show less
Brute-Force
๐ท๐บ
DZBOT
2026-02-21 12:07:35
(4 months ago)
SMTP. Brute-force users (authenticator failed)
Brute-Force
๐ฉ๐ช
BlueWire Hosting
2026-01-24 16:49:54
(5 months ago)
SMTP brute force attempt
Brute-Force
๐ฉ๐ช
creations.works
2025-12-18 14:31:10
(6 months ago)
Blocked by UFW on atums [43493/tcp]
Source port: 65316
TTL: 52
Packet length: 60
TOS: 0x00
This rep ...
show more
Blocked by UFW on atums [43493/tcp]
Source port: 65316
TTL: 52
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ฉ๐ช
creations.works
2025-12-17 20:31:07
(6 months ago)
Blocked by UFW on atums [43493/tcp]
Source port: 42677
TTL: 52
Packet length: 60
TOS: 0x00
This rep ...
show more
Blocked by UFW on atums [43493/tcp]
Source port: 42677
TTL: 52
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2025-05-28 04:54:46
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 212.56.54.233 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 212.56.54.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 28 00:54:42.228475 2025] [security2:error] [pid 1609251:tid 1609251] [client 212.56.54.233:41687] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dalessalesandservice.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dalessalesandservice.com"] [uri "/[email protected] "] [unique_id "aDaXEsUboZLCfQxJThhX8wAAACI"], referer: http://www.dalessalesandservice.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: