JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.85.17

66.56.85.17 was found in our database!

This IP was reported 183 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Sofia, Bulgaria
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.85.17

Whois 66.56.85.17

IP Abuse Reports for 66.56.85.17:

This IP address has been reported a total of 183 times from 72 distinct sources. 66.56.85.17 was first reported on April 2nd 2025, and the most recent report was 28 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇼 tyetriiix	2026-07-12 05:12:40 (28 minutes ago)	Wazuh Alert Evidence: Jul 12 05:12:39 ms1.triiix.info postfix/submission/smtpd[904095]: warning: unk ... show more Wazuh Alert Evidence: Jul 12 05:12:39 ms1.triiix.info postfix/submission/smtpd[904095]: warning: unknown[66.56.85.17]: SASL LOGIN authentication failed: (reason unavailable), [email protected] show less	Brute-Force
🇬🇧 stom	2026-07-12 04:45:00 (55 minutes ago)	2026-07-12T04:44:56.957016ls1.tom2.co.uk postfix/smtpd[11511]: warning: unknown[66.56.85.17]: SASL L ... show more 2026-07-12T04:44:56.957016ls1.tom2.co.uk postfix/smtpd[11511]: warning: unknown[66.56.85.17]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force Email Spam
🇷🇴 INTEQ	2026-07-12 04:16:38 (1 hour ago)	Brute force attack from 66.56.85.17	Brute-Force
🇺🇸 mnogoweb	2026-07-12 03:06:46 (2 hours ago)	(smtpauth) Failed SMTP AUTH login from 66.56.85.17 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 66.56.85.17 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-11 20:20:54 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) 2026-07-11 20:21:51 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) 2026-07-11 20:38:14 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) 2026-07-11 20:52:01 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) 2026-07-11 21:06:43 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Anonymous	2026-07-12 02:58:04 (2 hours ago)	Jul 11 16:44:58 mx1 postfix/submission/smtpd[12790]: warning: unknown[66.56.85.17]: SASL LOGIN authe ... show more Jul 11 16:44:58 mx1 postfix/submission/smtpd[12790]: warning: unknown[66.56.85.17]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 11 21:46:32 mx1 postfix/submission/smtpd[21497]: warning: unknown[66.56.85.17]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 12 04:58:03 mx1 postfix/submission/smtpd[17638]: warning: unknown[66.56.85.17]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇬🇧 andypiper	2026-07-12 01:00:43 (4 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇬🇧 stom	2026-07-12 00:15:49 (5 hours ago)	2026-07-12T00:15:45.425588ls1.tom2.co.uk postfix/smtpd[402]: warning: unknown[66.56.85.17]: SASL LOG ... show more 2026-07-12T00:15:45.425588ls1.tom2.co.uk postfix/smtpd[402]: warning: unknown[66.56.85.17]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force Email Spam
🇬🇧 stom	2026-07-11 23:14:15 (6 hours ago)	2026-07-11T23:14:11.667110ls1.tom2.co.uk postfix/smtpd[23362]: warning: unknown[66.56.85.17]: SASL L ... show more 2026-07-11T23:14:11.667110ls1.tom2.co.uk postfix/smtpd[23362]: warning: unknown[66.56.85.17]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force Email Spam
🇩🇪 mnpx	2026-07-11 21:57:55 (7 hours ago)	SMTP brute forcing (2× over 2h:00m); first seen here 2026-07-11T12:01Z	Brute-Force
🇺🇸 mnogoweb	2026-07-11 21:21:39 (8 hours ago)	(smtpauth) Failed SMTP AUTH login from 66.56.85.17 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 66.56.85.17 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-11 14:51:02 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) 2026-07-11 14:55:48 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) 2026-07-11 14:57:46 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) 2026-07-11 15:07:00 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) 2026-07-11 15:21:34 login authenticator failed for (USER) [66.56.85.17]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇨🇦 DidierMX	2026-07-11 21:20:00 (8 hours ago)	Wazuh Alert: Exim Auth Failed from 66.56.85.17	Brute-Force Web App Attack
🇳🇱 big-cloud.nl	2026-07-11 21:13:55 (8 hours ago)	Unauthorized SMTP connection attempt	Brute-Force
🇳🇱 Zeeaster	2026-07-11 21:05:55 (8 hours ago)	abuse-sasl h4	Brute-Force
🇹🇭 thaizone.com	2026-07-11 20:41:36 (8 hours ago)	Excessive number of invalid login attempts	Email Spam Hacking Brute-Force Exploited Host
🇬🇧 stom	2026-07-11 18:20:40 (11 hours ago)	2026-07-11T18:20:37.253169ls1.tom2.co.uk postfix/smtpd[8943]: warning: unknown[66.56.85.17]: SASL LO ... show more 2026-07-11T18:20:37.253169ls1.tom2.co.uk postfix/smtpd[8943]: warning: unknown[66.56.85.17]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force Email Spam

Showing 1 to 15 of 183 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 203.96.170.30

🇺🇸 193.36.225.158

🇺🇸 151.246.211.202

🇳🇱 5.61.209.92

🇹🇭 202.29.240.250

🇪🇹 196.188.93.169

🇺🇸 170.247.220.249

🇬🇧 157.125.103.203

🇸🇬 139.59.244.68

🇲🇾 115.135.13.144

🇵🇰 103.196.160.253

🇧🇬 79.124.56.250

🇺🇸 47.251.249.232

🇭🇰 43.155.72.127

🇬🇧 2.57.17.28

🇳🇱 185.223.235.15

🇺🇸 165.154.206.242

🇺🇸 162.216.150.29

🇨🇳 150.255.179.235

🇺🇸 107.167.34.125