JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.80.223

66.56.80.223 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.80.223

Whois 66.56.80.223

IP Abuse Reports for 66.56.80.223:

This IP address has been reported a total of 37 times from 16 distinct sources. 66.56.80.223 was first reported on July 1st 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 2and.de	2026-03-29 00:40:17 (2 months ago)	Mar 29 01:40:10 virtcc postfix/smtpd\[3205335\]: warning: unknown\[66.56.80.223\]: SASL PLAIN authen ... show more Mar 29 01:40:10 virtcc postfix/smtpd\[3205335\]: warning: unknown\[66.56.80.223\]: SASL PLAIN authentication failed: authentication failure Mar 29 01:40:13 virtcc postfix/smtpd\[3205335\]: warning: unknown\[66.56.80.223\]: SASL LOGIN authentication failed: authentication failure Mar 29 01:40:16 virtcc postfix/smtpd\[3205337\]: warning: unknown\[66.56.80.223\]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force Exploited Host
🇺🇸 bigscoots.com	2026-03-21 15:28:18 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.223 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.223 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-21 11:27:49 dovecot_plain authenticator failed for H=([10.22.18.61]) [66.56.80.223]:60470: 535 Incorrect authentication data ([email protected]) 2026-03-21 11:27:55 dovecot_login authenticator failed for H=([10.22.18.61]) [66.56.80.223]:60470: 535 Incorrect authentication data ([email protected]) 2026-03-21 11:28:01 dovecot_plain authenticator failed for H=([10.22.18.61]) [66.56.80.223]:11407: 535 Incorrect authentication data ([email protected]) 2026-03-21 11:28:07 dovecot_login authenticator failed for H=([10.22.18.61]) [66.56.80.223]:11407: 535 Incorrect authentication data ([email protected]) 2026-03-21 11:28:15 dovecot_plain authenticator failed for H=([10.22.18.61]) [66.56.80.223]:19045: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇫🇷 masterguru	2026-03-11 15:45:00 (3 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 66.56.80.223 (CA/Canada/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 66.56.80.223 (CA/Canada/-): 1 in the last 3600 secs (0-201) show less	Hacking
🇫🇷 masterguru	2026-03-07 17:50:58 (3 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 66.56.80.223 (CA/Canada/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 66.56.80.223 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇳🇱 i-turnradio.nl	2026-03-02 12:43:29 (3 months ago)	2026-03-02 13:43:29 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇩🇪 kivitendo.de	2026-03-02 07:13:14 (3 months ago)	Mar 2 07:13:08 weitan postfix/submission/smtpd[3257086]: warning: unknown[66.56.80.223]: SASL PLAIN ... show more Mar 2 07:13:08 weitan postfix/submission/smtpd[3257086]: warning: unknown[66.56.80.223]: SASL PLAIN authentication failed: Mar 2 07:13:14 weitan postfix/submission/smtpd[3257086]: warning: unknown[66.56.80.223]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇫🇷 masterguru	2026-02-28 20:20:22 (3 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 66.56.80.223 (CA/Canada/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 66.56.80.223 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2026-02-27 17:20:10 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-25 05:26:01 (3 months ago)	...	Brute-Force
Anonymous	2026-02-24 05:50:20 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇩🇪 kreativstrecke	2026-02-23 12:18:57 (3 months ago)	2026-02-23T13:18:46.446890+01:00 srv03 postfix/submission/smtpd[497984]: lost connection after CONNE ... show more 2026-02-23T13:18:46.446890+01:00 srv03 postfix/submission/smtpd[497984]: lost connection after CONNECT from unknown[66.56.80.223] 2026-02-23T13:18:50.310339+01:00 srv03 postfix/submission/smtpd[497984]: warning: unknown[66.56.80.223]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-02-23T13:18:56.072268+01:00 srv03 postfix/submission/smtpd[497984]: warning: unknown[66.56.80.223]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
Anonymous	2026-02-12 05:50:20 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-11 11:00:01 (4 months ago)	...	Brute-Force
🇮🇹 VHosting	2026-02-09 23:03:41 (4 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇸🇪 triplecode	2026-02-09 23:01:59 (4 months ago)	Reported from hMailServer	Hacking

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 185.121.15.184

🇯🇴 176.28.148.255

🇨🇳 115.49.221.238

🇺🇸 66.132.195.125

🇧🇬 62.133.47.13

🇨🇦 209.227.178.159

🇲🇽 201.173.66.161

🇦🇷 186.122.177.140

🇧🇷 170.0.62.246

🇨🇳 120.216.119.91

🇨🇳 106.92.154.139

🇮🇩 101.128.96.20

🇲🇦 81.192.46.29

🇱🇹 81.30.98.158

🇳🇱 45.148.10.151

🇺🇸 34.56.49.37

🇮🇷 2.180.188.71

🇩🇪 207.241.172.82

🇸🇦 176.224.16.211

🇩🇪 161.35.216.178