66.132.172.111
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Censys, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS398324
- Hostname(s)
- 111.172.132.66.censys-scanner.com
- Domain Name
- censys.com
- Country
- ๐บ๐ธ United States of America
- City
- Chicago, Illinois
Abuse Reports
Total reports
5,528 from
775 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
$f2bV_matches
|
Brute-Force SSH | |
| ๐ฉ๐ช xavier-momain.eu |
CrowdSec ban โ scenario: xavier/nftables-scan-any-port | report #4
|
Port Scan | |
| ๐ฉ๐ช David Ferneding |
Blocked by UFW (TCP on 110)
Source port: 35696
TTL: 56
Packet length: 60
TOS: 0x00
This report (for 66.132.172.111) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| ๐ฌ๐ง KTSTechnology |
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
|
Port Scan | |
| ๐บ๐ธ donarev419 |
Connection to port 4841 with data transfer.
Data preview: HELF=
|
Port Scan Hacking | |
| ๐ณ๐ฑ donarev419 |
Connection to port 8443 with data transfer.
Data preview: ๏ฟฝ
|
Port Scan Hacking | |
| ๐ซ๐ท Kejult |
Honeypot Finding: repeated TCP service probing on TCP/4841 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
|
Port Scan | |
| ๐บ๐ธ MPL |
tcp/51443 (10 or more attempts)
|
Port Scan | |
| ๐ฉ๐ช Coinetic AI Security |
Connection to a trap port: 1 attempts on port 135, 2026-11-07 20:34 - 20:34 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
|
Port Scan Hacking | |
| ๐ฉ๐ช ut-addicted.com |
Nov 7 21:23:57 www postfix/smtpd\[2552\]: lost connection after EHLO from 111.172.132.66.censys-scanner.com\[66.132.172.111\]
|
Brute-Force Hacking | |
| ๐ฏ๐ต S.O.B.A. Dev. |
Persistent port scanning or vulnerability scanning
|
Port Scan | |
| ๐ซ๐ท EvoX |
๐ก๏ธ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 8999 [1] TCP
|
Port Scan | |
| Anonymous |
|
Port Scan Brute-Force | |
| ๐บ๐ธ PlexLads |
66.132.172.111 - - [07/Nov/2026:07:09:45 -0800] "GET / HTTP/1.1" 307 4649 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
|
Hacking Web App Attack | |
| ๐ซ๐ท GoodOldTOS |
Highly suspect IP
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown