JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.80.187

66.56.80.187 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 2%: ?

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.80.187

Whois 66.56.80.187

IP Abuse Reports for 66.56.80.187:

This IP address has been reported a total of 13 times from 11 distinct sources. 66.56.80.187 was first reported on July 10th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-02 18:15:59 (3 weeks ago)	Blocked by UFW (TCP on 1) Source port: 46410 TTL: 117 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 1) Source port: 46410 TTL: 117 Packet length: 52 TOS: 0x00 This report (for 66.56.80.187) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Matthew Ping	2026-04-13 12:45:02 (2 months ago)	SMTP authentication brute force blocked by CSF/LFD on wp2.	Email Spam Brute-Force
🇿🇦 maximonline.co.za	2026-04-13 12:38:09 (2 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇧🇷 SvrAdmin	2026-03-27 07:09:47 (2 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 66.56.80.187 (CA/Canada/-): 5 in the last 3600 secs; Po ... show more [101] (smtpauth) Failed SMTP AUTH login from 66.56.80.187 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-03-27 04:09:14 dovecot_plain authenticator failed for H=([10.17.18.27]) [66.56.80.187]:27024: 535 Incorrect authentication data ([email protected]) 2026-03-27 04:09:20 dovecot_login authenticator failed for H=([10.17.18.27]) [66.56.80.187]:27024: 535 Incorrect authentication data ([email protected]) 2026-03-27 04:09:27 dovecot_plain authenticator failed for H=([10.17.18.27]) [66.56.80.187]:44673: 535 Incorrect authentication data ([email protected]) 2026-03-27 04:09:29 dovecot_login authenticator failed for H=([10.17.18.27]) [66.56.80.187]:44673: 535 Incorrect authentication data ([email protected]) 2026-03-27 04:09:41 dovecot_plain authenticator failed for H=([10.17.18.27]) [66.56.80.187]:9610: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇨🇿 lp	2026-03-20 09:27:18 (3 months ago)	Email account brute force: 6 attempts were recorded from 66.56.80.187 2026-03-17T07:11:26+01:00 warn ... show more Email account brute force: 6 attempts were recorded from 66.56.80.187 2026-03-17T07:11:26+01:00 warning: unknown[66.56.80.187]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-17T07:11:27+01:00 warning: unknown[66.56.80.187]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-17T07:11:29+01:00 warning: unknown[66.56.80.187]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-17T07:11:29+01:00 warning: unknown[66.56.80.187]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-17T07:12:26+01:00 warning: unknown[66.56.80.187]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-17T07:12:26+01:00 warning: unknown[66.56.80.187]: SASL LOGIN authentication failed: authenticatio show less	Brute-Force
Anonymous	2026-03-19 11:47:28 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.187 (CA/Canada/-)	Brute-Force
🇫🇷 Dorian GRANDHAY	2026-02-25 05:51:16 (3 months ago)	66.56.80.187 (CA/Canada/-), 5 distributed smtpauth attacks on account [[email protected]] in the last ... show more 66.56.80.187 (CA/Canada/-), 5 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2026-02-25 06:50:33 dovecot_login authenticator failed for H=([10.17.134.120]) [66.56.80.187]:9926: 535 Incorrect authentication data ([email protected]) 2026-02-25 06:50:41 dovecot_plain authenticator failed for H=([10.17.134.120]) [66.56.80.187]:9816: 535 Incorrect authentication data ([email protected]) 2026-02-25 06:50:43 dovecot_login authenticator failed for H=([10.17.134.120]) [66.56.80.187]:9816: 535 Incorrect authentication data ([email protected]) 2026-02-25 06:51:12 dovecot_plain authenticator failed for H=([10.30.222.48]) [66.56.80.231]:6397: 535 Incorrect authentication data ([email protected]) 2026-02-25 06:50:27 dovecot_plain authenticator failed for H=([10.17.134.120]) [66.56.80.187]:9926: 535 Incorrect authentication data ([email protected]) IP Addresses Blocked: show less	Port Scan
🇬🇧 consul.to	2026-02-15 08:51:05 (4 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-02-09 10:58:01 (4 months ago)	Authentication failure	Brute-Force
🇩🇪 barateza	2025-10-20 10:00:07 (8 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 xmission.com	2025-10-10 04:22:44 (8 months ago)	Blocked by UFW (TCP on 58368) Source port: 47805 TTL: 52 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 58368) Source port: 47805 TTL: 52 Packet length: 60 TOS: 0x08 This report (for 66.56.80.187) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 ᴀʀᴛ	2025-07-10 18:26:30 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from CA. ASN: 212238 (CDNEXT) Protocol: HTTP/2 (GET method) UA: Mo ... show more Triggered Cloudflare WAF (l7ddos) from CA. ASN: 212238 (CDNEXT) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇫🇷 ᴀʀᴛ	2025-07-10 11:20:35 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from CA. ASN: 212238 (CDNEXT) Protocol: HTTP/2 (GET method) UA: Mo ... show more Triggered Cloudflare WAF (l7ddos) from CA. ASN: 212238 (CDNEXT) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.237.176.209

🇪🇪 158.173.75.244

🇻🇳 14.182.236.131

🇧🇪 198.235.24.168

🇪🇪 158.173.75.236

🇪🇪 158.173.75.212

🇪🇪 158.173.75.186

🇪🇪 158.173.75.66

🇨🇦 85.217.149.26

🇳🇱 51.15.34.194

🇷🇴 2.57.122.173

🇨🇳 171.104.81.255

🇨🇳 120.85.114.91

🇳🇱 91.92.40.6

🇧🇷 45.205.1.42

🇸🇬 43.160.214.230

🇧🇷 205.210.31.211

🇬🇧 178.62.33.244

🇺🇸 152.65.185.144

🇮🇩 103.186.31.66