JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.80.131

66.56.80.131 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 21%: ?

21%

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.80.131

Whois 66.56.80.131

IP Abuse Reports for 66.56.80.131:

This IP address has been reported a total of 16 times from 14 distinct sources. 66.56.80.131 was first reported on July 20th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Squearex	2026-05-18 11:03:48 (4 weeks ago)	Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 25565)	Brute-Force SSH
🇺🇸 cpxducky	2026-05-18 11:02:26 (4 weeks ago)	2026-05-18 11:02:25: Minecraft server scan detected from 66.56.80.131 on port 25565 of mail.cpxducky ... show more 2026-05-18 11:02:25: Minecraft server scan detected from 66.56.80.131 on port 25565 of mail.cpxducky.com show less	Port Scan
🇨🇿 lp	2026-04-27 00:20:18 (1 month ago)	Email account brute force: 4 attempts were recorded from 66.56.80.131 2026-04-27T01:40:24+02:00 warn ... show more Email account brute force: 4 attempts were recorded from 66.56.80.131 2026-04-27T01:40:24+02:00 warning: unknown[66.56.80.131]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-27T01:40:24+02:00 warning: unknown[66.56.80.131]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-27T01:40:25+02:00 warning: unknown[66.56.80.131]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-27T01:40:25+02:00 warning: unknown[66.56.80.131]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2026-04-26 23:32:26 (1 month ago)	Port scanning: unknown[66.56.80.131] unknown[66.56.80.131] unknown[66.56.80.131]	Brute-Force
🇧🇷 SvrAdmin	2026-04-26 22:42:16 (1 month ago)	[101] (smtpauth) Failed SMTP AUTH login from 66.56.80.131 (CA/Canada/-): 5 in the last 3600 secs; Po ... show more [101] (smtpauth) Failed SMTP AUTH login from 66.56.80.131 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-26 19:41:47 dovecot_plain authenticator failed for H=([10.2.18.200]) [66.56.80.131]:32086: 535 Incorrect authentication data ([email protected]) 2026-04-26 19:41:53 dovecot_login authenticator failed for H=([10.2.18.200]) [66.56.80.131]:32086: 535 Incorrect authentication data ([email protected]) 2026-04-26 19:42:00 dovecot_plain authenticator failed for H=([10.2.18.200]) [66.56.80.131]:7136: 535 Incorrect authentication data ([email protected]) 2026-04-26 19:42:02 dovecot_login authenticator failed for H=([10.2.18.200]) [66.56.80.131]:7136: 535 Incorrect authentication data ([email protected]) 2026-04-26 19:42:14 dovecot_plain authenticator failed for H=([10.2.18.200]) [66.56.80.131]:46026: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇺🇸 bigscoots.com	2026-04-26 22:41:01 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.131 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.131 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-26 18:40:33 dovecot_plain authenticator failed for H=([10.2.18.200]) [66.56.80.131]:52372: 535 Incorrect authentication data ([email protected]) 2026-04-26 18:40:39 dovecot_login authenticator failed for H=([10.2.18.200]) [66.56.80.131]:52372: 535 Incorrect authentication data ([email protected]) 2026-04-26 18:40:45 dovecot_plain authenticator failed for H=([10.2.18.200]) [66.56.80.131]:58290: 535 Incorrect authentication data ([email protected]) 2026-04-26 18:40:51 dovecot_login authenticator failed for H=([10.2.18.200]) [66.56.80.131]:58290: 535 Incorrect authentication data ([email protected]) 2026-04-26 18:40:59 dovecot_plain authenticator failed for H=([10.2.18.200]) [66.56.80.131]:57660: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇦🇺 MAGIC	2026-04-19 02:09:36 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇿🇦 maximonline.co.za	2026-04-05 22:38:02 (2 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇸🇪 triplecode	2026-04-05 22:34:26 (2 months ago)	Reported from hMailServer	Hacking
Anonymous	2026-03-30 20:17:12 (2 months ago)	2026-03-30T13:17:02.659513-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logna ... show more 2026-03-30T13:17:02.659513-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=3bradk7 rhost=66.56.80.131 2026-03-30T13:17:11.703950-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=3bradk7 rhost=66.56.80.131 ... show less	Brute-Force SSH
🇨🇴 conexcol	2026-03-19 13:27:42 (2 months ago)	66.56.80.131 (CA/Canada/-), 5 distributed smtpauth attacks on account [[email protected]] in the l ... show more 66.56.80.131 (CA/Canada/-), 5 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇨🇿 lp	2026-02-24 14:56:52 (3 months ago)	Email account brute force: 4 attempts were recorded from 66.56.80.131 2026-02-24T15:22:35+01:00 warn ... show more Email account brute force: 4 attempts were recorded from 66.56.80.131 2026-02-24T15:22:35+01:00 warning: unknown[66.56.80.131]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-24T15:22:35+01:00 warning: unknown[66.56.80.131]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-24T15:22:37+01:00 warning: unknown[66.56.80.131]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-24T15:22:38+01:00 warning: unknown[66.56.80.131]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇷🇸 Smel	2026-02-24 13:19:35 (3 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇩🇪 creations.works	2025-12-14 16:52:10 (6 months ago)	Blocked by UFW on atums [43493/tcp] Source port: 8339 TTL: 55 Packet length: 60 TOS: 0x00 This repo ... show more Blocked by UFW on atums [43493/tcp] Source port: 8339 TTL: 55 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 marzzzello	2025-07-24 00:38:13 (10 months ago)	Ports: 5x 8775	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.183

🇺🇸 172.202.118.16

🇹🇼 141.11.42.191

🇳🇱 138.226.239.10

🇨🇳 106.75.144.39

🇺🇸 104.168.88.166

🇱🇹 81.30.98.44

🇷🇴 80.94.92.165

🇫🇷 80.12.94.172

🇩🇪 69.5.169.24

🇵🇭 61.245.11.225

🇳🇱 45.148.10.157

🇨🇳 39.182.55.119

🇻🇳 27.79.41.23

🇪🇸 2a05:d011:d07:5802:d47f:a5c9:7429:b226

🇧🇷 187.17.228.218

🇩🇪 185.242.3.195

🇮🇳 122.187.116.110

🇨🇳 115.211.164.104

🇮🇩 103.84.140.3