66.132.195.114

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
4,804 reports
762 reporters ยท latest 7 minutes ago
ISP
Censys, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS398324
Hostname(s)
114.195.132.66.censys-scanner.com
Domain Name
censys.com
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
4,804 from 762 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 320 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 237 ๐Ÿ‡ซ๐Ÿ‡ท France 227
Most common categories Port Scan 969 Hacking 285 Brute-Force 248 Web App Attack 218 SSH 109
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ณ๐Ÿ‡ฑ hxsain
Blocked by UFW [21/tcp] | SPT: 37986 | TTL: 50 | LEN: 60 | TOS: 0x08 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan FTP Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช Ilop
[bas-9] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 110 from 66.132.195.114 โ€” WAN scan (automated sensor)
Port Scan
๐Ÿ‡ฎ๐Ÿ‡น Fusty
Unauthorized attempt on (TCP on port 887). Source port: 43306 TTL: 56 Packet length: 60 Timestamp: 2026-11-07 18:12:46
Port Scan
๐Ÿ‡ช๐Ÿ‡ธ masterguru
BAD BOT - Detected and Blocked.. Matched phrase "censysinspect" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Activity from blacklisted IP
Hacking
๐Ÿ‡ฎ๐Ÿ‡ช AutosOnShow
blocked for webapp attack | path requested: / | seen at 2026-11-07 11:47:39.174 |
Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ myip.foo
Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 502 with data transfer. Data preview: ZG
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ sarphim
[Blackhive Honeypot] Web attack probe on port 80: GET / HTTP/1.1
Web App Attack Bad Web Bot
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 2 application-level events across 2 source port(s). Sensor(s): Tanner.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ cazae
Unauthorized attempt on debian [25/tcp] Source port: 49018 TTL: 50 Packet length: 60 TOS: 0x08 https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Email Spam
๐Ÿ‡ซ๐Ÿ‡ท EvoX
๐Ÿ›ก๏ธ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 9443 [1] TCP
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Admins@FBN
FW-PortScan: Traffic Blocked srcport=58118 dstport=443
Port Scan
๐Ÿ‡ฆ๐Ÿ‡น hxsain
Blocked by UFW on fr2 [6001/tcp] | SPT: 21508 | TTL: 54 | LEN: 60 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท noi
portscan proto=TCP dpt=8443 flags=SYN hits=10 window=10m
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฆ๐Ÿ‡ท 190.55.30.23
๐Ÿ‡บ๐Ÿ‡ธ 172.216.11.11
๐Ÿ‡บ๐Ÿ‡ธ 104.51.7.190
๐Ÿ‡ป๐Ÿ‡ณ 103.129.127.170
๐Ÿ‡ฌ๐Ÿ‡ง 78.153.140.236
๐Ÿ‡บ๐Ÿ‡ธ 64.121.203.82
๐Ÿ‡ฐ๐Ÿ‡ท 220.118.190.204
๐Ÿ‡บ๐Ÿ‡ธ 172.236.228.220
๐Ÿ‡ฆ๐Ÿ‡ท 149.107.244.182
๐Ÿ‡ฎ๐Ÿ‡ณ 122.168.197.245
๐Ÿ‡ฐ๐Ÿ‡ท 119.196.184.216
๐Ÿ‡บ๐Ÿ‡ธ 107.172.55.211
๐Ÿ‡ฒ๐Ÿ‡พ 103.239.251.35
๐Ÿ‡บ๐Ÿ‡ธ 66.132.172.225
๐Ÿ‡บ๐Ÿ‡ธ 35.146.82.39
๐Ÿ‡บ๐Ÿ‡ธ 24.16.236.85
๐Ÿ‡ฆ๐Ÿ‡ช 20.46.43.126
๐Ÿ‡ฐ๐Ÿ‡ท 211.48.60.35
๐Ÿ‡ง๐Ÿ‡ท 205.210.31.208
๐Ÿ‡ฉ๐Ÿ‡ช 185.221.237.212
feedback