JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.80.173

66.56.80.173 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 25%: ?

25%

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.80.173

Whois 66.56.80.173

IP Abuse Reports for 66.56.80.173:

This IP address has been reported a total of 38 times from 34 distinct sources. 66.56.80.173 was first reported on February 27th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-05-02 12:32:19 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-04-30 07:22:33 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇿 lp	2026-04-20 16:11:18 (1 month ago)	Email account brute force: 6 attempts were recorded from 66.56.80.173 2026-04-17T05:46:08+02:00 warn ... show more Email account brute force: 6 attempts were recorded from 66.56.80.173 2026-04-17T05:46:08+02:00 warning: unknown[66.56.80.173]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-17T05:46:08+02:00 warning: unknown[66.56.80.173]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-17T05:46:09+02:00 warning: unknown[66.56.80.173]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-17T05:46:10+02:00 warning: unknown[66.56.80.173]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-17T05:46:17+02:00 warning: unknown[66.56.80.173]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-17T05:46:18+02:00 warning: unknown[66.56.80.173]: SASL LOGIN authentication failed: authentication fai show less	Brute-Force
Anonymous	2026-04-17 04:31:12 (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇨🇦 Dunham Support	2026-04-17 03:22:38 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.173 (CA/Canada/-)	Brute-Force
🇮🇹 www.tana.it	2026-04-17 03:04:44 (1 month ago)	SMTP auth dictionary attack	Brute-Force
🇺🇸 bigscoots.com	2026-04-17 01:23:05 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.173 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.173 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-16 21:22:22 dovecot_plain authenticator failed for H=([10.3.18.93]) [66.56.80.173]:56450: 535 Incorrect authentication data ([email protected]) 2026-04-16 21:22:28 dovecot_login authenticator failed for H=([10.3.18.93]) [66.56.80.173]:56450: 535 Incorrect authentication data ([email protected]) 2026-04-16 21:22:34 dovecot_plain authenticator failed for H=([10.3.18.93]) [66.56.80.173]:54085: 535 Incorrect authentication data ([email protected]) 2026-04-16 21:22:40 dovecot_login authenticator failed for H=([10.3.18.93]) [66.56.80.173]:54085: 535 Incorrect authentication data ([email protected]) 2026-04-16 21:23:00 dovecot_plain authenticator failed for H=([10.3.18.93]) [66.56.80.173]:51135: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 iNetWorker	2026-04-17 00:16:44 (1 month ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-04-17 00:08:16 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.173 (CA/Canada/-)	Brute-Force
🇩🇪 gadix	2026-04-16 21:12:15 (1 month ago)	Apr 16 23:12:12 srv06 postfix/smtpd[3059169]: warning: unknown[66.56.80.173]: SASL CRAM-MD5 authenti ... show more Apr 16 23:12:12 srv06 postfix/smtpd[3059169]: warning: unknown[66.56.80.173]: SASL CRAM-MD5 authentication failed: authentication failure Apr 16 23:12:12 srv06 postfix/smtpd[3059168]: warning: unknown[66.56.80.173]: SASL CRAM-MD5 authentication failed: authentication failure Apr 16 23:12:12 srv06 postfix/smtpd[3059169]: warning: unknown[66.56.80.173]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇧🇷 SvrAdmin	2026-04-16 19:04:01 (1 month ago)	[101] (smtpauth) Failed SMTP AUTH login from 66.56.80.173 (CA/Canada/-): 5 in the last 3600 secs; Po ... show more [101] (smtpauth) Failed SMTP AUTH login from 66.56.80.173 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-16 16:03:48 dovecot_plain authenticator failed for H=([10.3.18.93]) [66.56.80.173]:35990: 535 Incorrect authentication data ([email protected]) 2026-04-16 16:03:48 dovecot_plain authenticator failed for H=([10.3.18.93]) [66.56.80.173]:6431: 535 Incorrect authentication data ([email protected]) 2026-04-16 16:03:52 dovecot_plain authenticator failed for H=([10.3.18.93]) [66.56.80.173]:24480: 535 Incorrect authentication data ([email protected]) 2026-04-16 16:03:52 dovecot_plain authenticator failed for H=([10.3.18.93]) [66.56.80.173]:20165: 535 Incorrect authentication data ([email protected]) 2026-04-16 16:03:54 dovecot_login authenticator failed for H=([10.3.18.93]) [66.56.80.173]:6431: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2026-04-16 17:45:01 (1 month ago)	...	Brute-Force
🇩🇪 filstal.org	2026-04-16 17:29:05 (1 month ago)	CrowdSec-Report: crowdsecurity/postfix-spam	Email Spam Brute-Force
Anonymous	2026-04-12 13:56:57 (2 months ago)	6x Postfix SASL LOGIN authentication failed	Brute-Force
🇺🇸 xmission.com	2026-03-31 01:40:48 (2 months ago)	Blocked by UFW (TCP on 39882) Source port: 29523 TTL: 53 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 39882) Source port: 29523 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 66.56.80.173) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.220.30.108

🇸🇬 104.250.52.211

🇺🇸 104.154.103.13

🇻🇳 103.159.54.61

🇮🇩 103.115.164.51

🇺🇸 48.214.144.135

🇭🇰 47.239.170.243

🇸🇬 47.236.147.192

🇸🇬 47.236.84.126

🇳🇱 34.141.191.188

🇺🇸 34.121.78.223

🇻🇳 123.28.130.229

🇨🇳 111.228.36.44

🇺🇸 70.91.135.181

🇫🇷 51.68.34.131

🇭🇰 47.239.243.42

🇳🇱 45.148.10.147

🇨🇳 39.152.240.15

🇸🇦 37.216.252.19

🇬🇧 35.203.211.71