66.132.172.132

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
7,814 reports
904 reporters · latest 1 hour ago
ISP
Censys, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS398324
Hostname(s)
132.172.132.66.censys-scanner.com
Domain Name
censys.com
Country
🇺🇸 United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
7,814 from 904 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 359 🇩🇪 Germany 335 🇫🇷 France 313
Most common categories Port Scan 1,242 Hacking 410 Brute-Force 298 Web App Attack 293 SSH 157
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Ilop
[hp-100] 63 unsolicited packets to honeypot ports 2342,2343,443,111,465,143 (OCI DShield sensor)
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (64 bytes of payload); 11102 [2] TCP
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/9042 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇦🇺 LiftUp Hosting
Honeypot hit: Empty payload (likely service probe); 22380 [1] TCP
Port Scan
🇨🇦 aks4226
Brute force on SSH.
SSH Brute-Force
🇺🇸 Wootroot
Honeypot (http): web recon/exploit probes
Web App Attack
🇺🇸 donarev419
Connection to port 17458 with data transfer. Data preview: �
Port Scan Hacking
🇺🇸 drewf.ink
[05:49] Probed the WinRM endpoint (unauthenticated, no credentials offered)
Brute-Force Hacking
🇨🇦 AEITS
Fail2Ban www
Bad Web Bot Web App Attack
🇭🇷 IgorS.zg.hr
SSHD brute force attack detected by fail2ban
Brute-Force SSH
🇫🇷 GoodOldTOS
Highly suspect IP
Hacking Web App Attack
🇫🇮 GaraElrik
Connected to SSH tarpit (Endlessh) on non-standard port. Automated scanning/bruteforce behavior.
Port Scan
🇺🇸 freehosts.eu
Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇺🇸 dot.mg
Bad behaviour
Web Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 190.55.30.23
🇺🇸 172.216.11.11
🇺🇸 104.51.7.190
🇻🇳 103.129.127.170
🇬🇧 78.153.140.236
🇺🇸 64.121.203.82
🇰🇷 220.118.190.204
🇺🇸 172.236.228.220
🇦🇷 149.107.244.182
🇮🇳 122.168.197.245
🇰🇷 119.196.184.216
🇺🇸 107.172.55.211
🇲🇾 103.239.251.35
🇺🇸 66.132.172.225
🇺🇸 35.146.82.39
🇺🇸 24.16.236.85
🇦🇪 20.46.43.126
🇰🇷 211.48.60.35
🇧🇷 205.210.31.208
🇩🇪 185.221.237.212
feedback