66.132.159.114
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Censys, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS398324
- Hostname(s)
- 114.159.132.66.censys-scanner.com
- Domain Name
- censys.com
- Country
- 🇺🇸 United States of America
- City
- Chicago, Illinois
Abuse Reports
Total reports
343 from
177 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇸 Smel |
MH/MP Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 8159 [3] TCP
|
Port Scan | |
| 🇮🇱 spd.co.il |
Web application attack detected
|
Hacking Web App Attack | |
| 🇦🇱 router.al |
11/07/2026-18:23:47.285300 66.132.159.114 Protocol: 6 SURICATA HTTP missing Host header
|
Hacking | |
| Anonymous |
Triggered: repeated knocking on closed ports.
|
Port Scan | |
| 🇬🇧 Andrew |
Blocked by UFW (TCP on port 111).
Source port: 46216
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 66.132.159.114) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇰🇷 doll.gl |
CrowdSec: Ip 66.132.159.114 performed 'crowdsecurity/http-bad-user-agent' (2 events over 6.563411066s) at 2026-11-07 15:17:01.672116192 +0000 UTC (scenario: crowdsecurity/http-bad-user-agent)
|
Bad Web Bot | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 34183 [1] TCP
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: Large payload (1471 bytes); 8013 [2] TCP
|
Bad Web Bot | |
| 🇨🇦 Luhte |
Unsolicited TCP connection from 66.132.159.114 to port 0 at 2026-11-07T09:31:59Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
|
Port Scan | |
| Anonymous |
$f2bV_matches
|
Brute-Force SSH | |
| 🇺🇸 NetGuard |
|
Hacking SQL Injection Web App Attack | |
| Anonymous |
1794011270 - 11/07/2026 01:27:50 Host: 66.132.159.114/66.132.159.114 Port: 993 TCP Blocked
...
|
Port Scan | |
| 🇳🇱 donarev419 |
Connection to port 6005 with data transfer.
Data preview: Content-Length: 991
{"jsonrpc":"2.0","method":"initialize","params":{"processId":0,"rootUri":"fil
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown