66.132.159.126
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Censys, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS398324
- Hostname(s)
- 126.159.132.66.censys-scanner.com
- Domain Name
- censys.com
- Country
- 🇺🇸 United States of America
- City
- Chicago, Illinois
Abuse Reports
Total reports
295 from
167 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 sonot |
Blocked by UFW on tunneluk01 [8443/tcp] | SPT: 29514 | TTL: 57 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
|
Port Scan | |
| Anonymous |
|
Port Scan Brute-Force | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [143/tcp]
Source port: 23924
TTL: 59
Packet length: 60
|
Port Scan | |
| 🇺🇸 Bankbook8585 |
T-Pot honeypot | elasticpot honeypot
|
Hacking Web App Attack | |
| 🇩🇪 nidaren |
66.132.159.126 - - [07/Nov/2026:12:47:19 +0100] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03Z\x8B%,\x04\xFA\xDA\x19\xD5\xCA\xB9\xDD\xA0.WjF,&de\x9A\xF5\xAA\xBC\xA9.\x94\x7F\xD8\xE3\xCE y*\xEAGG" 400 150 "-" "-"
...
|
Bad Web Bot Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target ports and 2 source port(s). Ports: 2000/service, 5222/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 119 with data transfer.
Data preview: GET / HTTP/1.1
Host: 107.175.212.44:119
Connection: Upgrade
Sec-WebSocket-Key: m8jjUv5hmmH0qKARay
|
Port Scan Hacking | |
| 🇩🇪 Luhte |
Unsolicited TCP connection from 66.132.159.126 to port 0 at 2026-11-07T05:38:47Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇺🇸 drewf.ink |
[05:31] Attempted MQTT CONNECT with client_id='CENSYS' username=None password='(empty)'
|
Hacking Brute-Force | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇺🇸 donarev419 |
Port scan detected on port 7512 (connection without data transfer)
|
Port Scan | |
| 🇳🇱 donarev419 |
Port scan detected on port 14265 (connection without data transfer)
|
Port Scan | |
| Anonymous |
|
Brute-Force | |
| 🇺🇸 Cherryh4ck |
Blocked by UFW [49667/tcp] | SPT: 42380 | TTL: 58 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown