JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.80.225

66.56.80.225 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 1%: ?

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.80.225

Whois 66.56.80.225

IP Abuse Reports for 66.56.80.225:

This IP address has been reported a total of 63 times from 25 distinct sources. 66.56.80.225 was first reported on July 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Ted Mayers	2026-05-30 20:41:13 (2 weeks ago)	DROP_INPUT detected 77 times on IPFire, port 6881	Brute-Force
🇺🇸 xmission.com	2026-03-27 23:16:04 (2 months ago)	Blocked by UFW (TCP on 61976) Source port: 18142 TTL: 115 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 61976) Source port: 18142 TTL: 115 Packet length: 52 TOS: 0x08 This report (for 66.56.80.225) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 consul.to	2026-03-26 18:16:49 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-03-23 16:30:57 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 bigscoots.com	2026-03-23 13:51:24 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.225 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.225 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-23 09:28:05 dovecot_plain authenticator failed for H=([10.24.18.180]) [66.56.80.225]:24331: 535 Incorrect authentication data ([email protected]) 2026-03-23 09:51:03 dovecot_plain authenticator failed for H=([10.24.18.180]) [66.56.80.225]:60196: 535 Incorrect authentication data ([email protected]) 2026-03-23 09:51:09 dovecot_login authenticator failed for H=([10.24.18.180]) [66.56.80.225]:60196: 535 Incorrect authentication data ([email protected]) 2026-03-23 09:51:15 dovecot_plain authenticator failed for H=([10.24.18.180]) [66.56.80.225]:14227: 535 Incorrect authentication data ([email protected]) 2026-03-23 09:51:21 dovecot_login authenticator failed for H=([10.24.18.180]) [66.56.80.225]:14227: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 localhost-admin	2026-03-23 13:30:04 (2 months ago)	Unauthorized connection attempt detected, SMTP Brute-Force	Brute-Force
Anonymous	2026-03-23 13:29:01 (2 months ago)	...	Brute-Force
🇺🇸 bigscoots.com	2026-03-23 13:28:04 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.225 (CA/Canada/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.225 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-23 09:27:35 dovecot_plain authenticator failed for H=([10.24.18.180]) [66.56.80.225]:49435: 535 Incorrect authentication data ([email protected]) 2026-03-23 09:27:41 dovecot_login authenticator failed for H=([10.24.18.180]) [66.56.80.225]:49435: 535 Incorrect authentication data ([email protected]) 2026-03-23 09:27:50 dovecot_plain authenticator failed for H=([10.24.18.180]) [66.56.80.225]:49285: 535 Incorrect authentication data ([email protected]) 2026-03-23 09:27:52 dovecot_login authenticator failed for H=([10.24.18.180]) [66.56.80.225]:49285: 535 Incorrect authentication data ([email protected]) 2026-03-23 09:28:01 dovecot_plain authenticator failed for H=([10.24.18.180]) [66.56.80.225]:6604: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇨🇿 lp	2026-03-23 13:24:44 (2 months ago)	Email account brute force: 6 attempts were recorded from 66.56.80.225 2026-03-23T12:47:38+01:00 warn ... show more Email account brute force: 6 attempts were recorded from 66.56.80.225 2026-03-23T12:47:38+01:00 warning: unknown[66.56.80.225]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-23T12:47:38+01:00 warning: unknown[66.56.80.225]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-23T12:47:39+01:00 warning: unknown[66.56.80.225]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-23T12:47:39+01:00 warning: unknown[66.56.80.225]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-23T12:47:47+01:00 warning: unknown[66.56.80.225]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-23T12:47:47+01:00 warning: unknown[66.56.80.225]: SASL LOGIN authentication failed: authenticatio show less	Brute-Force
Anonymous	2026-03-23 12:54:18 (2 months ago)	6x Postfix SASL LOGIN authentication failed	Brute-Force
🇩🇪 filstal.org	2026-03-23 05:26:09 (2 months ago)	CrowdSec-Report: crowdsecurity/postfix-spam	Email Spam Brute-Force
Anonymous	2026-03-23 03:18:08 (2 months ago)	Authentication failure	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-21 20:12:11 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 filstal.org	2026-03-21 10:46:41 (2 months ago)	CrowdSec-Report: crowdsecurity/postfix-spam	Email Spam Brute-Force
🇮🇩 aaKenshin	2026-03-21 10:46:14 (2 months ago)	Suspicious activity detected from IP 66.56.80.225 based on mailserver logs. Sample logs: 2026-03-21 ... show more Suspicious activity detected from IP 66.56.80.225 based on mailserver logs. Sample logs: 2026-03-21 18:45:57,547 INFO [qtp2102534528-169334] [ip=172.16.0.182;oip=66.56.80.225;oport=6619;oproto=smtp;port=38296;soapId=2e798b79;] SoapEngine - handler exception: authentication failed for [], account not found 2026-03-21 18:45:57,547 INFO [qtp2102534528-169334] [ip=172.16.0.182;oip=66.56.80.225;oport=6619;oproto=smtp;port=38296;soapId=2e798b79;] soap - AuthRequest elapsed=1 2026-03-21 18:46:09,783 INFO [qtp2102534528-169373] [ip=172.16.0.182;oip=66.56.80.225;oport=49437;oproto=smtp;port=58110;soapId=2e798b7a;] account - Error occurred during authentication: authentication failed for []. Reason: account not found. 2026-03-21 18:46:09,783 INFO [qtp2102534528-169373] [ip=172.16.0.182;oip=66.56.80.225;oport=49437;oproto=smtp;port=58110;soapId=2e798b7a;] SoapEngine - handler exception: authentication failed for [**], account not found 2026-03-21 18:46:09,783 INFO [qtp2102534528-169373] show less	Brute-Force

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.241

🇩🇪 213.209.159.228

🇩🇪 213.209.159.225

🇧🇷 179.146.44.138

🇺🇸 43.166.242.149

🇵🇷 38.50.69.251

🇺🇸 34.207.60.212

🇺🇸 205.210.31.89

🇪🇬 197.199.224.52

🇫🇷 62.210.185.4

🇶🇦 20.173.116.24

🇪🇸 196.196.150.124

🇳🇱 195.178.110.30

🇨🇴 179.1.210.98

🇮🇳 143.110.183.208

🇺🇸 142.93.75.239

🇷🇺 130.49.181.91

🇵🇹 46.189.246.36

🇺🇸 45.146.55.91

🇭🇰 152.32.128.85