Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 157.66.21.72:
This IP address has been reported a total of
11
times from
10 distinct
sources.
157.66.21.72 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
France
with 1
report;
Japan
with 1
report.
The most common categories in these recent reports were:
Port Scan
6
times;
Brute-Force
3
times;
Bad Web Bot
2
times;
SSH
1
time;
Hacking
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show moreClient failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-11T06:48:36Z.
show less
Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ...
show moreAutomated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.0; Trident/3.1)
show less
Bad Web Bot
Web App Attack
Anonymous
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
Blocked by UFW (TCP on 23)
Source port: 57448
TTL: 54
Packet length: 60
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 23)
Source port: 57448
TTL: 54
Packet length: 60
TOS: 0x00
This report (for 157.66.21.72) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ...
show moreDistributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC.
show less
