JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.54.28

212.56.54.28 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 10%: ?

10%

ISP	VPN Consumer New Jersey, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4213
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Trenton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.54.28

Whois 212.56.54.28

IP Abuse Reports for 212.56.54.28:

This IP address has been reported a total of 23 times from 23 distinct sources. 212.56.54.28 was first reported on May 23rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-06-11 00:48:01 (1 week ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 CELOS-SOC	2026-05-18 04:32:07 (1 month ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇫🇷 UM3	2026-03-16 12:49:33 (3 months ago)	Exim Auth Failed	Brute-Force
Anonymous	2026-02-22 01:27:19 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.54.28 (US/United States/New Jersey/Trenton/-/[redacted ... show more (smtpauth) Failed SMTP AUTH login from 212.56.54.28 (US/United States/New Jersey/Trenton/-/[redacted]) show less	Brute-Force
Anonymous	2026-02-22 01:27:02 (4 months ago)	...	Brute-Force
🇫🇷 adlp.org	2026-02-21 15:53:37 (4 months ago)	Feb 21 15:53:30 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.54. ... show more Feb 21 15:53:30 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.54.28;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@adlp.org$;KILL;2;Licence to kill Feb 21 15:53:33 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.54.28;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@adlp.org$;KILL;2;Licence to kill Feb 21 15:53:36 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;212.56.54.28;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
🇧🇷 hostseries	2026-02-20 20:21:41 (4 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇳🇱 maxxsense	2026-02-20 19:41:44 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.54.28 (US/United States/-)	Brute-Force
🇨🇿 lp	2026-02-20 13:25:13 (4 months ago)	Email account brute force: 6 attempts were recorded from 212.56.54.28 2026-02-20T13:28:58+01:00 warn ... show more Email account brute force: 6 attempts were recorded from 212.56.54.28 2026-02-20T13:28:58+01:00 warning: unknown[212.56.54.28]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-20T13:28:58+01:00 warning: unknown[212.56.54.28]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-20T13:28:59+01:00 warning: unknown[212.56.54.28]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-20T13:28:59+01:00 warning: unknown[212.56.54.28]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-20T13:29:07+01:00 warning: unknown[212.56.54.28]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-20T13:29:08+01:00 warning: unknown[212.56.54.28]: SASL LOGIN authentication failed: authenticatio show less	Brute-Force
🇫🇷 SpaceHost-Server	2026-02-20 12:41:36 (4 months ago)	Feb 20 13:41:35 pegasus postfix/smtpd[1741243]: warning: unknown[212.56.54.28]: SASL CRAM-MD5 authen ... show more Feb 20 13:41:35 pegasus postfix/smtpd[1741243]: warning: unknown[212.56.54.28]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] Feb 20 13:41:35 pegasus postfix/smtpd[1741243]: warning: unknown[212.56.54.28]: SASL PLAIN authentication failed: authentication failure, [email protected] Feb 20 13:41:36 pegasus postfix/smtpd[1741243]: warning: unknown[212.56.54.28]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Hacking Brute-Force
🇺🇸 bigscoots.com	2026-02-20 12:30:11 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.54.28 (US/United States/-): 5 in the last 3600 secs; P ... show more (smtpauth) Failed SMTP AUTH login from 212.56.54.28 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-20 07:29:43 dovecot_plain authenticator failed for H=([10.19.18.41]) [212.56.54.28]:50859: 535 Incorrect authentication data ([email protected]) 2026-02-20 07:29:49 dovecot_login authenticator failed for H=([10.19.18.41]) [212.56.54.28]:50859: 535 Incorrect authentication data ([email protected]) 2026-02-20 07:29:55 dovecot_plain authenticator failed for H=([10.19.18.41]) [212.56.54.28]:24676: 535 Incorrect authentication data ([email protected]) 2026-02-20 07:30:01 dovecot_login authenticator failed for H=([10.19.18.41]) [212.56.54.28]:24676: 535 Incorrect authentication data ([email protected]) 2026-02-20 07:30:09 dovecot_plain authenticator failed for H=([10.19.18.41]) [212.56.54.28]:52049: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 iNetWorker	2026-02-20 12:26:59 (4 months ago)	smtp	Brute-Force
🇩🇪 rh24	2026-02-20 12:18:59 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.54.28 (US/United States/-)	Brute-Force
🇳🇱 rroethof	2026-02-20 08:12:06 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 212.56.54.28 (US/United States/-): 5 in the last 3600 secs; P ... show more (smtpauth) Failed SMTP AUTH login from 212.56.54.28 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2026-02-20 09:11:54 plain authenticator failed for H=([10.19.18.41]) [212.56.54.28]: 535 Incorrect authentication data ([email protected]) 2026-02-20 09:11:55 login authenticator failed for H=([10.19.18.41]) [212.56.54.28]: 535 Incorrect authentication data ([email protected]) 2026-02-20 09:11:55 plain authenticator failed for H=([10.19.18.41]) [212.56.54.28]: 535 Incorrect authentication data ([email protected]) 2026-02-20 09:11:55 login authenticator failed for H=([10.19.18.41]) [212.56.54.28]: 535 Incorrect authentication data ([email protected]) 2026-02-20 09:12:03 plain authenticator failed for H=([10.19.18.41]) [212.56.54.28]: 535 Incorrect authentication data ([email protected]) show less	Spoofing Brute-Force Bad Web Bot Web App Attack SSH
🇩🇪 DAUGDE	2026-01-29 01:03:12 (4 months ago)	2026-01-29T02:03:02.709992+01:00 v2202104133598150667 5314ec35f019[1338494]: Jan 29 02:03:02 5314ec3 ... show more 2026-01-29T02:03:02.709992+01:00 v2202104133598150667 5314ec35f019[1338494]: Jan 29 02:03:02 5314ec35f019 postfix/submission/smtpd[6118]: lost connection after CONNECT from unknown[212.56.54.28] 2026-01-29T02:03:05.187363+01:00 v2202104133598150667 5314ec35f019[1338494]: Jan 29 02:03:05 5314ec35f019 postfix/submission/smtpd[6118]: warning: unknown[212.56.54.28]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-01-29T02:03:11.200214+01:00 v2202104133598150667 5314ec35f019[1338494]: Jan 29 02:03:11 5314ec35f019 postfix/submission/smtpd[6118]: warning: unknown[212.56.54.28]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Email Spam Spoofing Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:4900:c916:3bb1:d95:b3:cc3d:f12b

🇳🇱 204.76.203.219

🇧🇬 193.24.211.107

🇨🇳 125.47.32.2

🇫🇷 85.217.140.16

🇺🇸 67.85.146.216

🇱🇹 45.227.254.170

🇺🇸 2600:1900:4120:e3fb:0:31::

🇨🇦 148.113.190.153

🇺🇸 135.119.73.164

🇺🇸 107.167.34.125

🇫🇷 91.238.181.92

🇮🇷 91.92.129.231

🇬🇧 81.19.219.202

🇺🇸 47.251.98.79

🇳🇱 45.142.193.122

🇮🇷 185.112.33.84

🇳🇱 176.65.139.94

🇳🇬 152.32.143.189

🇨🇦 144.217.161.208