JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.80.49

66.56.80.49 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 30%: ?

30%

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.80.49

Whois 66.56.80.49

IP Abuse Reports for 66.56.80.49:

This IP address has been reported a total of 94 times from 52 distinct sources. 66.56.80.49 was first reported on July 24th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-01 02:24:59 (1 week ago)	Blocked by UFW (TCP on 37603) Source port: 24192 TTL: 116 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 37603) Source port: 24192 TTL: 116 Packet length: 52 TOS: 0x08 This report (for 66.56.80.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-05-24 05:05:31 (3 weeks ago)	Connection to port 16337 with data transfer. Data preview: BitTorrent protocol	Port Scan Hacking
🇮🇪 Coolnagour	2026-05-16 19:19:56 (4 weeks ago)	http-probing: /wp-login.php	Web App Attack
🇨🇿 lp	2026-04-23 19:50:29 (1 month ago)	Email account brute force: 6 attempts were recorded from 66.56.80.49 2026-04-23T20:49:43+02:00 warni ... show more Email account brute force: 6 attempts were recorded from 66.56.80.49 2026-04-23T20:49:43+02:00 warning: unknown[66.56.80.49]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:43+02:00 warning: unknown[66.56.80.49]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:45+02:00 warning: unknown[66.56.80.49]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:45+02:00 warning: unknown[66.56.80.49]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:56+02:00 warning: unknown[66.56.80.49]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-23T20:49:56+02:00 warning: unknown[66.56.80.49]: SASL LOGIN authentication failed: authentication show less	Brute-Force
🇫🇷 Dampen59	2026-04-23 18:24:52 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.49 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.49 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-23 20:24:23 dovecot_plain authenticator failed for H=([10.17.18.91]) [66.56.80.49]:17209: 535 Incorrect authentication data ([email protected]) 2026-04-23 20:24:29 dovecot_login authenticator failed for H=([10.17.18.91]) [66.56.80.49]:17209: 535 Incorrect authentication data ([email protected]) 2026-04-23 20:24:35 dovecot_plain authenticator failed for H=([10.17.18.91]) [66.56.80.49]:19516: 535 Incorrect authentication data ([email protected]) 2026-04-23 20:24:41 dovecot_login authenticator failed for H=([10.17.18.91]) [66.56.80.49]:19516: 535 Incorrect authentication data ([email protected]) 2026-04-23 20:24:50 dovecot_plain authenticator failed for H=([10.17.18.91]) [66.56.80.49]:58187: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Anonymous	2026-04-23 15:46:44 (1 month ago)	Failed Wordpress Logins	Web App Attack
🇺🇸 bitblockit	2026-04-22 01:56:36 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 30535/tcp. Observed event time: 2026-04-22 01:56:36 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-22 01:56:04 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 30535/tcp. Observed event time: 2026-04-22 01:56:04 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-22 01:31:45 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 30535/tcp. Observed event time: 2026-04-22 01:31:45 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-22 01:23:37 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 30535/tcp. Observed event time: 2026-04-22 01:23:37 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 Matthew Ping	2026-04-21 07:15:02 (1 month ago)	SMTP authentication brute force blocked by CSF/LFD on wp2.	Email Spam Brute-Force
🇫🇷 SpaceHost-Server	2026-04-21 06:40:26 (1 month ago)	Apr 21 08:40:25 pegasus postfix/smtpd[648076]: warning: unknown[66.56.80.49]: SASL CRAM-MD5 authenti ... show more Apr 21 08:40:25 pegasus postfix/smtpd[648076]: warning: unknown[66.56.80.49]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] Apr 21 08:40:25 pegasus postfix/smtpd[648076]: warning: unknown[66.56.80.49]: SASL PLAIN authentication failed: authentication failure, [email protected] Apr 21 08:40:25 pegasus postfix/smtpd[648076]: warning: unknown[66.56.80.49]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Hacking Brute-Force
Anonymous	2026-04-15 13:56:49 (1 month ago)	2026-04-15T15:56:49.233427+02:00 soli-gate postfix/submission/smtpd[2682662]: warning: unknown[66.56 ... show more 2026-04-15T15:56:49.233427+02:00 soli-gate postfix/submission/smtpd[2682662]: warning: unknown[66.56.80.49]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇺🇸 bigscoots.com	2026-04-15 13:32:14 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 66.56.80.49 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25 ... show more (smtpauth) Failed SMTP AUTH login from 66.56.80.49 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-15 09:31:47 dovecot_plain authenticator failed for H=([10.17.18.133]) [66.56.80.49]:40302: 535 Incorrect authentication data ([email protected]) 2026-04-15 09:31:53 dovecot_login authenticator failed for H=([10.17.18.133]) [66.56.80.49]:40302: 535 Incorrect authentication data ([email protected]) 2026-04-15 09:31:59 dovecot_plain authenticator failed for H=([10.17.18.133]) [66.56.80.49]:4194: 535 Incorrect authentication data ([email protected]) 2026-04-15 09:32:05 dovecot_login authenticator failed for H=([10.17.18.133]) [66.56.80.49]:4194: 535 Incorrect authentication data ([email protected]) 2026-04-15 09:32:13 dovecot_plain authenticator failed for H=([10.17.18.133]) [66.56.80.49]:1695: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 xmission.com	2026-04-02 10:25:28 (2 months ago)	Blocked by UFW (TCP on 65535) Source port: 38574 TTL: 117 Packet length: 52 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 65535) Source port: 38574 TTL: 117 Packet length: 52 TOS: 0x00 This report (for 66.56.80.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.220.172.154

🇺🇸 146.190.118.126

🇧🇩 103.9.135.46

🇧🇷 45.5.102.93

🇦🇺 34.151.151.16

🇮🇳 34.131.118.31

🇨🇳 14.103.123.67

🇮🇩 223.25.108.2

🇺🇸 157.230.226.31

🇹🇼 140.128.153.204

🇰🇷 118.37.214.187

🇮🇷 93.118.98.84

🇳🇱 88.151.32.163

🇯🇵 64.176.37.235

🇺🇸 50.84.211.204

🇺🇸 48.217.87.78

🇳🇱 45.148.10.141

🇬🇧 35.203.211.194

🇨🇳 27.21.29.247

🇨🇳 220.250.10.227