JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.80.220

66.56.80.220 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.80.220

Whois 66.56.80.220

IP Abuse Reports for 66.56.80.220:

This IP address has been reported a total of 26 times from 19 distinct sources. 66.56.80.220 was first reported on July 20th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-04-13 09:20:46 (2 months ago)	Email account brute force: 6 attempts were recorded from 66.56.80.220 2026-04-13T10:07:43+02:00 warn ... show more Email account brute force: 6 attempts were recorded from 66.56.80.220 2026-04-13T10:07:43+02:00 warning: unknown[66.56.80.220]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-13T10:07:43+02:00 warning: unknown[66.56.80.220]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-13T10:07:45+02:00 warning: unknown[66.56.80.220]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-13T10:07:45+02:00 warning: unknown[66.56.80.220]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-13T10:07:52+02:00 warning: unknown[66.56.80.220]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-13T10:07:52+02:00 warning: unknown[66.56.80.220]: SASL LOGIN authentication failed: authenti show less	Brute-Force
🇺🇸 bigscoots.com	2026-04-13 07:54:38 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.220 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.220 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-13 03:53:39 dovecot_plain authenticator failed for H=([10.19.18.127]) [66.56.80.220]:6523: 535 Incorrect authentication data ([email protected]) 2026-04-13 03:53:54 dovecot_plain authenticator failed for H=([10.19.18.127]) [66.56.80.220]:65057: 535 Incorrect authentication data ([email protected]) 2026-04-13 03:53:56 dovecot_login authenticator failed for H=([10.19.18.127]) [66.56.80.220]:65057: 535 Incorrect authentication data ([email protected]) 2026-04-13 03:54:28 dovecot_plain authenticator failed for H=([10.19.18.127]) [66.56.80.220]:12641: 535 Incorrect authentication data ([email protected]) 2026-04-13 03:54:34 dovecot_login authenticator failed for H=([10.19.18.127]) [66.56.80.220]:12641: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 R.G.	2026-04-13 06:36:15 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.220 (CA/Canada/-): 5 in the last 900 secs; Ports: ; ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.220 (CA/Canada/-): 5 in the last 900 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: show less	Brute-Force
🇬🇧 consul.to	2026-04-02 03:50:08 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇷🇺 DZBOT	2026-03-26 18:14:35 (2 months ago)	DZBOT. Brute-force users SMTP	Brute-Force
Anonymous	2026-03-23 12:08:01 (2 months ago)	...	Brute-Force
🇦🇺 screwlooseit.com.au	2026-03-23 05:22:51 (2 months ago)	Blocked by CSF 13 firewall - Rule: mysaslmatch US/United States/-	Web App Attack
🇨🇿 lp	2026-03-23 04:32:29 (2 months ago)	Email account brute force: 5 attempts were recorded from 66.56.80.220 2026-03-23T04:56:09+01:00 warn ... show more Email account brute force: 5 attempts were recorded from 66.56.80.220 2026-03-23T04:56:09+01:00 warning: unknown[66.56.80.220]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-23T04:56:09+01:00 warning: unknown[66.56.80.220]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-23T04:56:10+01:00 warning: unknown[66.56.80.220]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-23T04:56:10+01:00 warning: unknown[66.56.80.220]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-23T04:57:15+01:00 warning: unknown[66.56.80.220]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2026-03-23 04:17:02 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.220 (CA/Canada/-)	Brute-Force
🇺🇸 bigscoots.com	2026-03-23 04:02:04 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.220 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.220 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-23 00:01:36 dovecot_plain authenticator failed for H=([10.19.18.195]) [66.56.80.220]:57381: 535 Incorrect authentication data ([email protected]) 2026-03-23 00:01:42 dovecot_login authenticator failed for H=([10.19.18.195]) [66.56.80.220]:57381: 535 Incorrect authentication data ([email protected]) 2026-03-23 00:01:48 dovecot_plain authenticator failed for H=([10.19.18.195]) [66.56.80.220]:27561: 535 Incorrect authentication data ([email protected]) 2026-03-23 00:01:54 dovecot_login authenticator failed for H=([10.19.18.195]) [66.56.80.220]:27561: 535 Incorrect authentication data ([email protected]) 2026-03-23 00:02:02 dovecot_plain authenticator failed for H=([10.19.18.195]) [66.56.80.220]:5062: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇬🇧 djboddington	2026-03-23 03:57:00 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/postfix-spam	Email Spam
🇫🇷 UM3	2026-03-17 07:09:08 (3 months ago)	Exim Auth Failed	Brute-Force
🇺🇸 xmission.com	2026-03-05 22:30:29 (3 months ago)	Blocked by UFW (TCP on 51920) Source port: 21656 TTL: 53 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51920) Source port: 21656 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 66.56.80.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 aaKenshin	2026-03-05 14:35:58 (3 months ago)	Suspicious activity detected from IP 66.56.80.220 based on mailserver logs. Sample logs: 2026-03-05 ... show more Suspicious activity detected from IP 66.56.80.220 based on mailserver logs. Sample logs: 2026-03-05 22:35:07,920 INFO [qtp2102534528-103685] [ip=172.16.0.182;oip=66.56.80.220;oport=45117;oproto=smtp;port=40596;soapId=2e793e50;] SoapEngine - handler exception: authentication failed for [], account not found 2026-03-05 22:35:07,920 INFO [qtp2102534528-103685] [ip=172.16.0.182;oip=66.56.80.220;oport=45117;oproto=smtp;port=40596;soapId=2e793e50;] soap - AuthRequest elapsed=2 2026-03-05 22:35:46,956 INFO [qtp2102534528-103748] [ip=172.16.0.182;oip=66.56.80.220;oport=35598;oproto=smtp;port=57648;soapId=2e793e51;] account - Error occurred during authentication: authentication failed for []. Reason: account not found. 2026-03-05 22:35:46,968 INFO [qtp2102534528-103748] [ip=172.16.0.182;oip=66.56.80.220;oport=35598;oproto=smtp;port=57648;soapId=2e793e51;] SoapEngine - handler exception: authentication failed for [**], account not found 2026-03-05 22:35:46,968 INFO [qtp2102534528-103748 show less	Brute-Force
🇺🇸 xmission.com	2026-03-01 09:50:08 (3 months ago)	Blocked by UFW (TCP on 9050) Source port: 61950 TTL: 116 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9050) Source port: 61950 TTL: 116 Packet length: 52 TOS: 0x08 This report (for 66.56.80.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.116

🇺🇸 192.129.183.139

🇧🇴 181.115.172.22

🇺🇸 147.185.132.98

🇹🇭 118.194.250.127

🇨🇳 111.225.148.158

🇨🇳 110.249.202.88

🇨🇳 110.249.201.38

🇺🇸 104.234.53.67

🇯🇵 43.165.185.71

🇳🇱 204.76.203.231

🇦🇷 190.244.62.240

🇲🇽 186.96.158.180

🇺🇸 162.216.149.77

🇨🇳 112.86.225.249

🇨🇳 110.249.202.2

🇨🇳 110.249.201.170

🇲🇦 105.157.122.154

🇨🇳 61.145.190.218

🇳🇱 45.148.10.152