66.132.172.223

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
5,374 reports
739 reporters · latest 50 minutes ago
ISP
Censys, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS398324
Hostname(s)
223.172.132.66.censys-scanner.com
Domain Name
censys.com
Country
🇺🇸 United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
5,374 from 739 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 269 🇺🇸 United States of America 252 🇩🇪 Germany 246
Most common categories Port Scan 952 Hacking 263 Brute-Force 240 Web App Attack 174 SSH 118
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇹 eliosbrocchi
2026-11-08 22:51:52 66.132.172.223:12624 Peer tried unsupported key-method 1 ...
VPN IP
🇫🇷 GoodOldTOS
Highly suspect IP
Hacking Web App Attack
Anonymous
Shorewall log file match.
Port Scan
🇫🇷 -SK-
DUS - (f2b weechat-relay massive attemts)
Brute-Force Port Scan Web App Attack
🇩🇪 Andi
[H1] Blocked by UFW
Brute-Force Port Scan
🇩🇪 kingjan1999
Blocked by UFW [2222/tcp] | SPT: 16060 | TTL: 55 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (9 bytes of payload); 10259 [2] TCP
Port Scan
🇳🇱 BlueWire Hosting
Bad bot ignoring robot.txt
Bad Web Bot
🇩🇪 quiescence.eu
scanning private ports - Fail2ban @ quiescence.eu
Port Scan
🇩🇪 mattk
port scan
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 7 application-level events across 2 target ports and 2 source port(s). Ports: 6379/Redis, 22222/service. Sensors: Redishoneypot, Honeytrap.
Port Scan
🇳🇱 VMHeaven.io
Blocked by UFW [62051/tcp] Source port: 59154 TTL: 54 Packet length: 60
Port Scan
🇪🇸 Linux Fertxo
Unauthorized connection attempts: 6 hits @ port(s) 21064, protocol(s) tcp
Port Scan Hacking
🇺🇸 donarev419
Port scan detected on port 3047 (connection without data transfer)
Port Scan
🇫🇷 EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 207.175.218.17
🇰🇷 118.37.214.187
🇨🇳 113.31.111.108
🇮🇳 103.171.53.34
🇯🇵 52.192.76.61
🇬🇧 35.203.210.68
🇨🇱 34.176.246.126
🇺🇸 34.125.240.193
🇧🇪 34.38.88.176
🇰🇷 218.152.91.214
🇨🇳 218.78.186.58
🇲🇦 196.92.7.249
🇳🇱 195.178.110.31
🇳🇱 195.178.110.26
🇸🇦 188.54.227.65
🇳🇱 185.136.15.17
🇷🇺 154.83.196.237
🇺🇸 98.116.82.213
🇧🇬 79.124.56.254
🇳🇱 77.239.124.121
feedback