66.132.159.140
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Censys, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS398324
- Hostname(s)
- 140.159.132.66.censys-scanner.com
- Domain Name
- censys.com
- Country
- 🇺🇸 United States of America
- City
- Chicago, Illinois
Abuse Reports
Total reports
297 from
159 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 drewf.ink |
[00:34] Connected to MySQL honeypot
|
Brute-Force Hacking | |
| 🇱🇻 radix |
Malicious automated scanner / crawler with suspicious user agent.
|
Bad Web Bot | |
| 🇫🇷 Zarla |
Scan or attack attempt on email service.
|
Email Spam Port Scan Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 31074 [1] TCP
|
Port Scan | |
| 🇸🇪 basil s |
Unauthorized access attempt: SSH brute-force probe. Automated TCP connection attempts to SSH port (TCP/22); dropped and blocked by firewall. Target: TCP/22 (SSH). First seen: 2026-11-07 20:34:00 UTC. Source: host firewall/sshd log.
|
Brute-Force SSH | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
|
Port Scan | |
| 🇺🇸 MatCat |
Banned by fail2ban: blossomd
|
Brute-Force SSH | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 58270 [1] TCP
|
Port Scan | |
| 🇺🇸 thororen |
Blocked by UFW [993/tcp]
Source port: 49874
TTL: 51
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 4 application-level events across 3 target ports and 4 source port(s). Ports: 2281/service, 2000/service, 4839/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇮🇩 Diskominfo Lumajang |
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
|
Brute-Force | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 20537 [1] TCP
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 1080 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| 🇺🇸 donarev419 |
Connection to port 1961 with data transfer.
Data preview:
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown