Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 66.132.172.217:
This IP address has been reported a total of
3,770
times from
592 distinct
sources.
66.132.172.217 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 300
reports;
United States of America
with 279
reports;
France
with 171
reports.
The most common categories in these recent reports were:
Port Scan
967
times;
Hacking
264
times;
Brute-Force
230
times;
Web App Attack
150
times;
SSH
109
times;
Other
157
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 7 00:35:34 Ubuntu-2204-jammy-amd64-base sshd[2584728]: Connection closed by 66.132.172.217 port ...
show moreSep 7 00:35:34 Ubuntu-2204-jammy-amd64-base sshd[2584728]: Connection closed by 66.132.172.217 port 20698 [preauth]
...
show less
2026-09-07T02:20:53.076892+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth ...
show more2026-09-07T02:20:53.076892+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 3 secs): user=<>, rip=66.132.172.217, lip=65.21.131.50, TLS: Connection closed, session=<xw1Nl9lakuNChKzZ>
2026-09-07T02:20:59.248437+02:00 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 2 secs): user=<>, rip=66.132.172.217, lip=65.21.131.50, session=<mjmrl9lahGBChKzZ>
2026-09-07T02:21:01.425309+02:00 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=66.132.172.217, lip=65.21.131.50, session=<AnHMl9laomBChKzZ>
2026-09-07T02:21:03.509964+02:00 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=66.132.172.217, lip=65.21.131.50, session=<hz/sl9lawGBChKzZ>
2026-09-07T02:21:06.214358+02:00 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=66.132.172.217, lip=65.21.131.
...
show less
Blocked by UFW [9000/tcp]
Source port: 5962
TTL: 53
Packet length: 60
TOS: 0x00
This report was gen ...
show moreBlocked by UFW [9000/tcp]
Source port: 5962
TTL: 53
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW on hk [1206/tcp]
Source port: 54112
TTL: 50
Packet length: 60
TOS: 0x00
This report ...
show moreBlocked by UFW on hk [1206/tcp]
Source port: 54112
TTL: 50
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ...
show moreCloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
show less
