66.132.159.113

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
302 reports
179 reporters · latest 1 hour ago
ISP
Censys, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS398324
Hostname(s)
113.159.132.66.censys-scanner.com
Domain Name
censys.com
Country
🇺🇸 United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
302 from 179 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 59 🇺🇸 United States of America 52 🇩🇪 Germany 47
Most common categories Port Scan 189 Web App Attack 70 Hacking 57 Brute-Force 44 Bad Web Bot 41
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇱🇻 radix
Malicious automated scanner / crawler with suspicious user agent.
Bad Web Bot
🇧🇬 MazenHost
1794091634 - 11/08/2026 00:47:14 Host: 66.132.159.113/66.132.159.113 Port: 6667 TCP Blocked ...
Port Scan
🇺🇸 brantknudson.org
Incorrect Host header
Web App Attack Brute-Force
🇷🇸 Smel
Unauthorized Probe/Connection, Hack -
Port Scan Hacking
🇦🇹 Pingger Shikkoken
Hacking Bad Web Bot
🇺🇸 xmission.com
Blocked by UFW (TCP on 587) Source port: 63298 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 66.132.159.113) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇯🇵 S.O.B.A. Dev.
Persistent port scanning or vulnerability scanning
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 25) Source port: 59424 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 66.132.159.113) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Email Spam
Anonymous
$f2bV_matches
Brute-Force SSH
🇦🇺 KevinNeale
Fail2Ban recidive block for repeated malicious authentication attempts.
Web App Attack
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 3 target ports and 3 source port(s). Ports: 1723/PPTP, 6009/service, 11177/service. Sensors: Honeytrap, Dionaea.
Port Scan
🇦🇱 router.al
11/07/2026-07:58:03.945180 66.132.159.113 Protocol: 6 ET WEB_SERVER WEB-PHP phpinfo access
Port Scan
🇩🇪 ITSNF
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=22
Port Scan Hacking
🇺🇸 donarev419
Connection to port 7001 with data transfer. Data preview: t3 12.1.2 AS:2048 HL:19
Port Scan Hacking
🇧🇷 diego
[probe-44-49] 2026-11-07 02:45:59, Client: 66.132.159.113, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 194.180.232.97
🇨🇳 116.179.37.93
🇳🇱 109.160.32.158
🇮🇳 103.248.120.6
🇧🇷 186.235.186.209
🇷🇺 185.68.155.129
🇧🇩 116.206.255.155
🇺🇸 66.132.172.194
feedback