JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.54.43

212.56.54.43 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 3%: ?

ISP	VPN Consumer New Jersey, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4213
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Trenton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.54.43

Whois 212.56.54.43

IP Abuse Reports for 212.56.54.43:

This IP address has been reported a total of 16 times from 10 distinct sources. 212.56.54.43 was first reported on June 25th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-06-15 04:29:34 (2 days ago)	Fail2Ban banned 212.56.54.43 for security violations in jail wp-armour. Log: 2026/06/15 04:29:34 [er ... show more Fail2Ban banned 212.56.54.43 for security violations in jail wp-armour. Log: 2026/06/15 04:29:34 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 212.56.54.43 \| Target: wplogin" , client: 212.56.54.43, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED] ... show less	Web Spam
Anonymous	2026-03-09 18:40:06 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-03-06 18:35:32 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-03-03 18:35:19 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇿 lp	2026-02-22 03:05:47 (3 months ago)	Email account brute force: 6 attempts were recorded from 212.56.54.43 2026-02-22T03:50:29+01:00 warn ... show more Email account brute force: 6 attempts were recorded from 212.56.54.43 2026-02-22T03:50:29+01:00 warning: unknown[212.56.54.43]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-22T03:50:29+01:00 warning: unknown[212.56.54.43]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-22T03:50:30+01:00 warning: unknown[212.56.54.43]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-22T03:50:30+01:00 warning: unknown[212.56.54.43]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-22T03:50:38+01:00 warning: unknown[212.56.54.43]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-22T03:50:38+01:00 warning: unknown[212.56.54.43]: SASL LOGIN authentication failed: authenticatio show less	Brute-Force
Anonymous	2026-02-22 02:55:43 (3 months ago)	Authentication failure	Brute-Force
🇷🇺 DZBOT	2026-02-21 13:02:28 (3 months ago)	SMTP. Brute-force users (authenticator failed)	Brute-Force
🇵🇱 IT RDC	2026-02-21 04:45:04 (3 months ago)	Feb 21 05:45:02 rdcmail postfix/submission/smtpd[193783]: warning: unknown[212.56.54.43]: SASL PLAIN ... show more Feb 21 05:45:02 rdcmail postfix/submission/smtpd[193783]: warning: unknown[212.56.54.43]: SASL PLAIN authentication failed: authentication failure, [email protected] Feb 21 05:45:02 rdcmail postfix/submission/smtpd[193783]: warning: unknown[212.56.54.43]: SASL LOGIN authentication failed: authentication failure, [email protected] Feb 21 05:45:03 rdcmail postfix/smtps/smtpd[193917]: warning: unknown[212.56.54.43]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇮🇩 sockominfo	2026-02-01 19:00:02 (4 months ago)	Postfix: Multiple SASL authentication failures.. Threat Score: 7.4/10 (HIGH). CVSS: 6.8/10 (Medium). ... show more Postfix: Multiple SASL authentication failures.. Threat Score: 7.4/10 (HIGH). CVSS: 6.8/10 (Medium). Bayesian: 87%. MITRE: T1071. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Exploited Host
🇮🇩 sockominfo	2026-02-01 18:00:25 (4 months ago)	Postfix: Multiple SASL authentication failures.. Threat Score: 5/10 (MEDIUM). Reported by TangerangK ... show more Postfix: Multiple SASL authentication failures.. Threat Score: 5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-01 16:00:21 (4 months ago)	Postfix: Multiple SASL authentication failures.. Threat Score: 5.2/10 (MEDIUM). Reported by Tangeran ... show more Postfix: Multiple SASL authentication failures.. Threat Score: 5.2/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-01 15:00:02 (4 months ago)	Postfix: Multiple SASL authentication failures.. Threat Score: 7.4/10 (HIGH). CVSS: 6.8/10 (Medium). ... show more Postfix: Multiple SASL authentication failures.. Threat Score: 7.4/10 (HIGH). CVSS: 6.8/10 (Medium). Bayesian: 86%. MITRE: T1071. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Exploited Host
🇮🇩 sockominfo	2026-02-01 14:05:33 (4 months ago)	[WAZUH] Postfix: Multiple SASL authentication failures.	Hacking Web App Attack
🇱🇻 garmtech.com	2025-12-15 04:32:48 (6 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇳🇱 bontekoe.technology	2025-10-02 17:44:39 (8 months ago)	212.56.54.43 banned on rtr - Threshold reached: 5 failures	SSH

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.85.235.99

🇬🇧 185.127.95.173

🇸🇦 51.235.114.90

🇲🇽 187.168.189.138

🇺🇸 165.154.162.176

🇺🇸 136.144.42.60

🇰🇪 102.215.33.50

🇱🇹 79.98.27.7

🇺🇸 67.147.23.193

🇺🇸 66.132.195.56

🇺🇸 47.253.214.177

🇺🇸 44.220.185.84

🇺🇸 15.204.165.54

🇷🇺 5.104.57.42

🇺🇸 205.210.31.92

🇰🇪 197.248.207.139

🇺🇸 195.184.76.75

🇧🇷 189.8.5.118

🇸🇬 152.32.218.244

🇷🇺 109.75.206.90