66.132.159.139
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Censys, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS398324
- Hostname(s)
- 139.159.132.66.censys-scanner.com
- Domain Name
- censys.com
- Country
- 🇺🇸 United States of America
- City
- Chicago, Illinois
Abuse Reports
Total reports
297 from
165 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 etu brutus |
66.132.159.139 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host | |
| 🇺🇸 Cherryh4ck |
Blocked by UFW [6222/tcp] | SPT: 11968 | TTL: 58 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇧🇷 W8C Dev |
Nov 8 03:40:04 vmori-manager-1 sshd[282741]: Connection closed by 66.132.159.139 port 25152 [preauth]
...
|
Brute-Force SSH | |
| 🇺🇸 donarev419 |
Connection to port 4840 with data transfer.
Data preview: HELF=
|
Port Scan Hacking | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇺🇸 drewf.ink |
[04:49] Attempted HTTP access to an exposed phpinfo() page
|
Web App Attack | |
| 🇳🇱 donarev419 |
Port scan detected on port 2724 (connection without data transfer)
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 49428 [1] TCP
|
Port Scan | |
| 🇧🇷 Peregrine |
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 66.132.159.139 - - [30/Oct/2026:13:47:19 -0300] "GET /phpinfo.php HTTP/1.1" 404 414
|
Bad Web Bot | |
| 🇺🇸 AEITS |
Fail2Ban www
|
Bad Web Bot Web App Attack | |
| 🇱🇻 radix |
Malicious automated scanner / crawler with suspicious user agent.
|
Bad Web Bot | |
| Anonymous |
|
Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 57352 [1] TCP
|
Port Scan | |
| 🇫🇷 cityhunter_rhone |
Connection attempts on sensitive port(s) 21 (10) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
|
Port Scan Hacking | |
| 🇩🇪 _ArminS_ |
Bad SSHAUTH 2026.11.07 17:36:04
blocked until 2026.11.10 17:36:04
by HoneyPot US-EAST_ashburn01
|
SSH Brute-Force Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown