JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.80.228

66.56.80.228 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.80.228

Whois 66.56.80.228

IP Abuse Reports for 66.56.80.228:

This IP address has been reported a total of 13 times from 12 distinct sources. 66.56.80.228 was first reported on July 7th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 tinect	2026-04-13 08:18:32 (2 months ago)	Gets ban for 4h for triggering crowdsecurity/dovecot-spam at root1.	Web App Attack
🇨🇿 lp	2026-03-27 13:20:49 (2 months ago)	Email account brute force: 4 attempts were recorded from 66.56.80.228 2026-03-27T13:09:26+01:00 warn ... show more Email account brute force: 4 attempts were recorded from 66.56.80.228 2026-03-27T13:09:26+01:00 warning: unknown[66.56.80.228]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-27T13:09:26+01:00 warning: unknown[66.56.80.228]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-27T13:09:27+01:00 warning: unknown[66.56.80.228]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-27T13:09:27+01:00 warning: unknown[66.56.80.228]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇦 Julio Covolato	2026-03-23 12:35:01 (2 months ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇧🇷 SvrAdmin	2026-03-23 11:20:55 (2 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 66.56.80.228 (CA/Canada/-): 5 in the last 3600 secs; Po ... show more [101] (smtpauth) Failed SMTP AUTH login from 66.56.80.228 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-03-23 08:19:27 dovecot_plain authenticator failed for H=([10.27.129.131]) [66.56.80.228]:13077: 535 Incorrect authentication data ([email protected]) 2026-03-23 08:19:33 dovecot_login authenticator failed for H=([10.27.129.131]) [66.56.80.228]:13077: 535 Incorrect authentication data ([email protected]) 2026-03-23 08:19:42 dovecot_plain authenticator failed for H=([10.27.129.131]) [66.56.80.228]:64183: 535 Incorrect authentication data ([email protected]) 2026-03-23 08:19:44 dovecot_login authenticator failed for H=([10.27.129.131]) [66.56.80.228]:64183: 535 Incorrect authentication data ([email protected]) 2026-03-23 08:20:52 dovecot_plain authenticator failed for H=([10.27.129.131]) [66.56.80.228]:30717: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇩🇪 Hazzard	2026-03-23 11:18:30 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.228 (CA/Canada/Ontario/Toronto/-/[redacted])	Brute-Force
🇫🇷 Dampen59	2026-03-22 20:46:39 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.228 (CA/Canada/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.228 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-03-22 15:46:06 dovecot_plain authenticator failed for H=([10.27.18.48]) [66.56.80.228]:41520: 535 Incorrect authentication data ([email protected]) 2026-03-22 15:46:12 dovecot_login authenticator failed for H=([10.27.18.48]) [66.56.80.228]:41520: 535 Incorrect authentication data ([email protected]) 2026-03-22 15:46:22 dovecot_plain authenticator failed for H=([10.27.18.48]) [66.56.80.228]:17528: 535 Incorrect authentication data ([email protected]) 2026-03-22 15:46:24 dovecot_login authenticator failed for H=([10.27.18.48]) [66.56.80.228]:17528: 535 Incorrect authentication data ([email protected]) 2026-03-22 15:46:35 dovecot_plain authenticator failed for H=([10.27.18.48]) [66.56.80.228]:51826: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇨🇿 lp	2026-03-21 16:25:01 (2 months ago)	Email account brute force: 6 attempts were recorded from 66.56.80.228 2026-03-21T16:36:32+01:00 warn ... show more Email account brute force: 6 attempts were recorded from 66.56.80.228 2026-03-21T16:36:32+01:00 warning: unknown[66.56.80.228]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-21T16:36:33+01:00 warning: unknown[66.56.80.228]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-21T16:36:34+01:00 warning: unknown[66.56.80.228]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-21T16:36:34+01:00 warning: unknown[66.56.80.228]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-21T16:36:42+01:00 warning: unknown[66.56.80.228]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-21T16:36:42+01:00 warning: unknown[66.56.80.228]: SASL LOGIN authentication failed: authentication fai show less	Brute-Force
Anonymous	2026-03-21 15:35:58 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.228 (CA/Canada/-)	Brute-Force
Anonymous	2026-03-05 09:26:00 (3 months ago)	SIP:66.56.80.228\|IPBLOCK-PENALTY-BOX:3904000:3904009:3904013:3904020:3904042:BOT-BROWSER-IMPERSONATO ... show more SIP:66.56.80.228\|IPBLOCK-PENALTY-BOX:3904000:3904009:3904013:3904020:3904042:BOT-BROWSER-IMPERSONATOR\| show less	Web App Attack SQL Injection
🇮🇹 VHosting	2026-02-27 12:44:41 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2025-12-04 05:00:30 (6 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇺🇸 xmission.com	2025-08-16 05:53:00 (10 months ago)	Blocked by UFW (TCP on 6881) Source port: 58806 TTL: 117 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 6881) Source port: 58806 TTL: 117 Packet length: 52 TOS: 0x08 This report (for 66.56.80.228) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 FeG Deutschland	2025-07-07 23:27:07 (11 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.124.229

🇲🇽 189.194.140.170

🇺🇸 159.203.120.106

🇬🇧 81.19.219.200

🇮🇳 2001:4490:4e75:3e01:3dcb:4fa8:8f29:ab86

🇬🇧 217.146.80.109

🇩🇪 212.227.140.112

🇺🇸 192.185.4.94

🇦🇲 178.160.228.254

🇷🇺 95.163.220.13

🇷🇴 80.94.92.70

🇺🇸 66.132.186.224

🇰🇪 41.191.229.226

🇬🇧 35.203.211.147

🇬🇧 35.203.210.166

🇰🇷 220.95.64.40

🇭🇰 199.45.154.187

🇷🇼 196.216.81.126

🇳🇱 194.124.55.44

🇳🇱 176.65.139.251