JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.80.49

66.56.80.49 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 27%: ?

27%

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.80.49

Whois 66.56.80.49

IP Abuse Reports for 66.56.80.49:

This IP address has been reported a total of 94 times from 52 distinct sources. 66.56.80.49 was first reported on July 24th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-01 02:24:59 (2 weeks ago)	Blocked by UFW (TCP on 37603) Source port: 24192 TTL: 116 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 37603) Source port: 24192 TTL: 116 Packet length: 52 TOS: 0x08 This report (for 66.56.80.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-05-24 05:05:31 (3 weeks ago)	Connection to port 16337 with data transfer. Data preview: BitTorrent protocol	Port Scan Hacking
🇮🇪 Coolnagour	2026-05-16 19:19:56 (1 month ago)	http-probing: /wp-login.php	Web App Attack
🇨🇿 lp	2026-04-23 19:50:29 (1 month ago)	Email account brute force: 6 attempts were recorded from 66.56.80.49 2026-04-23T20:49:43+02:00 warni ... show more Email account brute force: 6 attempts were recorded from 66.56.80.49 2026-04-23T20:49:43+02:00 warning: unknown[66.56.80.49]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:43+02:00 warning: unknown[66.56.80.49]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:45+02:00 warning: unknown[66.56.80.49]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:45+02:00 warning: unknown[66.56.80.49]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:56+02:00 warning: unknown[66.56.80.49]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:56+02:00 warning: unknown[66.56.80.49]: SASL LOGIN authentication failed: authentication show less	Brute-Force
🇫🇷 Dampen59	2026-04-23 18:24:52 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.49 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.49 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-23 20:24:23 dovecot_plain authenticator failed for H=([10.17.18.91]) [66.56.80.49]:17209: 535 Incorrect authentication data ([email protected]) 2026-04-23 20:24:29 dovecot_login authenticator failed for H=([10.17.18.91]) [66.56.80.49]:17209: 535 Incorrect authentication data ([email protected]) 2026-04-23 20:24:35 dovecot_plain authenticator failed for H=([10.17.18.91]) [66.56.80.49]:19516: 535 Incorrect authentication data ([email protected]) 2026-04-23 20:24:41 dovecot_login authenticator failed for H=([10.17.18.91]) [66.56.80.49]:19516: 535 Incorrect authentication data ([email protected]) 2026-04-23 20:24:50 dovecot_plain authenticator failed for H=([10.17.18.91]) [66.56.80.49]:58187: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Anonymous	2026-04-23 15:46:44 (1 month ago)	Failed Wordpress Logins	Web App Attack
🇺🇸 bitblockit	2026-04-22 01:56:36 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 30535/tcp. Observed event time: 2026-04-22 01:56:36 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-22 01:56:04 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 30535/tcp. Observed event time: 2026-04-22 01:56:04 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-22 01:31:45 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 30535/tcp. Observed event time: 2026-04-22 01:31:45 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-22 01:23:37 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 30535/tcp. Observed event time: 2026-04-22 01:23:37 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 Matthew Ping	2026-04-21 07:15:02 (1 month ago)	SMTP authentication brute force blocked by CSF/LFD on wp2.	Email Spam Brute-Force
🇫🇷 SpaceHost-Server	2026-04-21 06:40:26 (1 month ago)	Apr 21 08:40:25 pegasus postfix/smtpd[648076]: warning: unknown[66.56.80.49]: SASL CRAM-MD5 authenti ... show more Apr 21 08:40:25 pegasus postfix/smtpd[648076]: warning: unknown[66.56.80.49]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] Apr 21 08:40:25 pegasus postfix/smtpd[648076]: warning: unknown[66.56.80.49]: SASL PLAIN authentication failed: authentication failure, [email protected] Apr 21 08:40:25 pegasus postfix/smtpd[648076]: warning: unknown[66.56.80.49]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Hacking Brute-Force
Anonymous	2026-04-15 13:56:49 (2 months ago)	2026-04-15T15:56:49.233427+02:00 soli-gate postfix/submission/smtpd[2682662]: warning: unknown[66.56 ... show more 2026-04-15T15:56:49.233427+02:00 soli-gate postfix/submission/smtpd[2682662]: warning: unknown[66.56.80.49]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇺🇸 bigscoots.com	2026-04-15 13:32:14 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.49 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25 ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.49 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-15 09:31:47 dovecot_plain authenticator failed for H=([10.17.18.133]) [66.56.80.49]:40302: 535 Incorrect authentication data ([email protected]) 2026-04-15 09:31:53 dovecot_login authenticator failed for H=([10.17.18.133]) [66.56.80.49]:40302: 535 Incorrect authentication data ([email protected]) 2026-04-15 09:31:59 dovecot_plain authenticator failed for H=([10.17.18.133]) [66.56.80.49]:4194: 535 Incorrect authentication data ([email protected]) 2026-04-15 09:32:05 dovecot_login authenticator failed for H=([10.17.18.133]) [66.56.80.49]:4194: 535 Incorrect authentication data ([email protected]) 2026-04-15 09:32:13 dovecot_plain authenticator failed for H=([10.17.18.133]) [66.56.80.49]:1695: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 xmission.com	2026-04-02 10:25:28 (2 months ago)	Blocked by UFW (TCP on 65535) Source port: 38574 TTL: 117 Packet length: 52 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 65535) Source port: 38574 TTL: 117 Packet length: 52 TOS: 0x00 This report (for 66.56.80.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.108.100.117

🇫🇷 209.242.192.6

🇲🇽 187.216.224.85

🇩🇪 185.216.214.42

🇵🇹 176.79.207.94

🇳🇱 176.65.148.81

🇺🇸 162.216.150.60

🇺🇸 47.41.181.164

🇸🇬 43.156.111.141

🇺🇸 3.81.214.78

🇺🇸 216.39.242.78

🇲🇽 200.56.131.208

🇭🇰 199.45.154.115

🇺🇸 195.184.76.119

🇺🇸 193.3.53.11

🇺🇸 173.19.239.179

🇧🇷 170.231.129.143

🇯🇵 160.251.233.37

🇨🇦 142.93.146.198

🇨🇳 123.191.135.103