JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.81.183

66.56.81.183 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 18%: ?

18%

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.81.183

Whois 66.56.81.183

IP Abuse Reports for 66.56.81.183:

This IP address has been reported a total of 33 times from 25 distinct sources. 66.56.81.183 was first reported on September 10th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-21 21:19:29 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 66.56.81.183 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 66.56.81.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 17:19:20.395479 2026] [security2:error] [pid 31014:tid 31014] [client 66.56.81.183:29326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tcomputerguy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tcomputerguy.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ag922IfD2US8UFHrO1Zl_QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-05-14 10:54:02 (1 month ago)	Failed SMTP logins	Brute-Force
🇺🇸 mw	2026-05-11 00:00:37 (1 month ago)	GET /checkout?kzthx=ddnsk HTTP/1.1	Web App Attack
🇺🇸 xmission.com	2026-04-22 06:44:28 (1 month ago)	Blocked by UFW (TCP on 6881) Source port: 61510 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 61510 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 66.56.81.183) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 nowyouknow	2026-04-21 04:37:13 (1 month ago)	(From [email protected]) Hi there, We built something called MAVIS, and it’s not just another AI ... show more (From [email protected]) Hi there, We built something called MAVIS, and it’s not just another AI tool. It’s a system that can run every major function of your business, front-end and back-end marketing, sales support, content, coding, web dev, admin, operations, all handled in one place. The difference is that it’s not just software. There’s a trained Human Virtual Assistant behind it executing everything inside the system, so things actually get done. The goal is simple: no need to hire multiple roles, no managing 10 different tools, no learning curve, and the best part you can delegate everything to the VA to get it all done. This is just one system running your entire business while you focus on growth. Are you looking for assistance? Respond YES to schedule a Zoom meeting and STOP to unsubscribe. show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-04-20 15:26:30 (1 month ago)	(From [email protected]) Hi there, We provide Virtual Assistants to help with Prospecting, Ad ... show more (From [email protected]) Hi there, We provide Virtual Assistants to help with Prospecting, Administration, CRM management, drip campaigns, Graphic Design, and Bookkeeping. We also offer advanced AI-driven prospecting & appointment setting to help you fill your calendar with high-quality meetings. Would you be open to exploring how we can support you? show less	Phishing Web Spam
Anonymous	2026-04-19 21:13:50 (2 months ago)	Forum/form spam	Web Spam
🇺🇸 nowyouknow	2026-04-18 14:30:14 (2 months ago)	(From [email protected]) Hi there, We built something called MAVIS, and it’s not just another AI ... show more (From [email protected]) Hi there, We built something called MAVIS, and it’s not just another AI tool. It’s a system that can run every major function of your business, front-end and back-end marketing, sales support, content, coding, web dev, admin, operations, all handled in one place. The difference is that it’s not just software. There’s a trained Human Virtual Assistant behind it executing everything inside the system, so things actually get done. The goal is simple: no need to hire multiple roles, no managing 10 different tools, no learning curve, and the best part you can delegate everything to the VA to get it all done. This is just one system running your entire business while you focus on growth. Are you looking for assistance? Respond YES to schedule a Zoom meeting and STOP to unsubscribe. show less	Phishing Web Spam
🇺🇸 ipblock.com	2026-04-15 04:51:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2026-04-14 07:22:30 (2 months ago)	(From [email protected]) Hi there, We provide Virtual Assistants to help with Prospecting, Ad ... show more (From [email protected]) Hi there, We provide Virtual Assistants to help with Prospecting, Administration, CRM management, drip campaigns, Graphic Design, and Bookkeeping. We also offer advanced AI-driven prospecting & appointment setting to help you fill your calendar with high-quality meetings. Would you be open to exploring how we can support you? show less	Phishing Web Spam
🇮🇳 liveaspankaj	2026-04-14 03:14:16 (2 months ago)	DDoS attack: 100 requests in 5m (GET / or repair.php).	DDoS Attack
🇨🇿 lp	2026-03-20 09:32:45 (2 months ago)	Email account brute force: 5 attempts were recorded from 66.56.81.183 2026-03-18T03:22:16+01:00 warn ... show more Email account brute force: 5 attempts were recorded from 66.56.81.183 2026-03-18T03:22:16+01:00 warning: unknown[66.56.81.183]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-18T03:22:16+01:00 warning: unknown[66.56.81.183]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-18T03:22:18+01:00 warning: unknown[66.56.81.183]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-18T03:22:18+01:00 warning: unknown[66.56.81.183]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-18T03:22:27+01:00 warning: unknown[66.56.81.183]: SASL PLAIN authentication failed: authentication failure, sasl_username=httpsadfsgw.vse.czadfslssotv show less	Brute-Force
🇳🇱 maxxsense	2026-03-18 03:23:20 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 66.56.81.183 (CA/Canada/-)	Brute-Force
🇩🇪 itsolon	2026-03-18 03:06:54 (3 months ago)	Mar 18 04:06:46 srv7 postfix/smtpd[96696]: warning: unknown[66.56.81.183]: SASL CRAM-MD5 authenticat ... show more Mar 18 04:06:46 srv7 postfix/smtpd[96696]: warning: unknown[66.56.81.183]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] Mar 18 04:06:46 srv7 postfix/smtpd[96696]: warning: unknown[66.56.81.183]: SASL PLAIN authentication failed: authentication failure, [email protected] Mar 18 04:06:46 srv7 postfix/smtpd[96696]: warning: unknown[66.56.81.183]: SASL LOGIN authentication failed: authentication failure, [email protected] Mar 18 04:06:53 srv7 postfix/smtpd[96687]: warning: unknown[66.56.81.183]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] Mar 18 04:06:53 srv7 postfix/smtpd[96687]: warning: unknown[66.56.81.183]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Hacking Brute-Force
🇨🇴 conexcol	2026-03-18 02:06:48 (3 months ago)	66.56.81.183 (CA/Canada/-), 8 distributed smtpauth attacks on account [[email protected]] in the l ... show more 66.56.81.183 (CA/Canada/-), 8 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 65.49.1.195

🇺🇸 2001:470:1:c84::239

🇳🇱 185.223.235.61

🇺🇸 154.6.110.30

🇲🇾 146.70.15.15

🇭🇰 118.193.38.26

🇮🇳 106.215.168.49

🇨🇳 103.213.72.102

🇮🇩 103.131.61.163

🇺🇸 91.230.168.93

🇳🇱 91.92.40.5

🇪🇸 85.152.57.60

🇮🇱 77.127.183.72

🇺🇸 65.111.14.231

🇪🇬 197.49.120.45

🇺🇸 192.241.141.178

🇺🇸 172.232.27.232

🇺🇸 172.58.183.114

🇫🇮 147.185.133.237

🇸🇪 146.247.235.34