166.166.133.103

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
680 reports
29 reporters · latest 2 weeks ago
ISP
Verizon Business
Usage Type
Fixed Line ISP
ASN
AS6167
Domain Name
verizon.com
Country
🇺🇸 United States of America
City
Euless, Texas
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
680 from 29 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 366 🇸🇬 Singapore 101 🇬🇧 United Kingdom of Great Britain and Northern Ireland 62
Most common categories Hacking 476 Brute-Force 362 Port Scan 317 Exploited Host 11 Web App Attack 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 wristhulk
Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist).
Brute-Force
🇨🇦 Slackin' Jack
Triggered honeypot on port 5900. (166.166.133.103)
Port Scan
🇦🇹 begou.dev
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/5900
Port Scan
🇫🇷 uthul
T-Pot honeypot: 5 hits on ports [5900] (automated)
Port Scan Hacking
🇺🇸 drewf.ink
[16:41] Attempted VNC authentication via legacy RFB 003.003 - challenge=f4e47b8361110eaf645329504f684bb4 response=08a3b5ebfecb1abdaee8b59f2a74daa2
Hacking Brute-Force
🇩🇪 _ArminS_
SP-Scan 53138:5900 detected 2026.10.20 18:12:09 blocked until 2026.12.09 10:14:56
Port Scan
🇫🇮 xenonprotik
VNC honeypot: 1 connection to port 5900.
Hacking
🇺🇸 azminawwar
[166.166.133.103] triggered by honeypot on port [5900], Timestamp [2026-10-20T12:37:28Z](no payload)
Port Scan Hacking
🇺🇸 azminawwar
[166.166.133.103] triggered by honeypot on port [5900], Timestamp [2026-10-20T09:48:00Z](no payload)
Port Scan Hacking
🇬🇧 Vluxon, Inc.
Port Scan
🇸🇬 drewf.ink
[03:41] Attempted VNC authentication via legacy RFB 003.003 - challenge=7fbd42294922ee8552f8a12c61f48673 response=e1edf9216464164a27f32ea11fa9aead
Hacking Brute-Force
🇳🇱 donarev419
Port scan detected on port 5900 (connection without data transfer)
Port Scan
🇺🇸 3rdKey
OpenCanary honeypot hit on port 5900 (no legitimate service runs there); logtype 12001. Automated report.
Port Scan
🇺🇸 drewf.ink
[00:04] Attempted VNC authentication via legacy RFB 003.003 - challenge=4f2d7eb4435df019da18b87f9724ca79 response=7320fc07af0ac0d0a3d50e1d9056e095
Hacking Brute-Force
🇺🇸 drewf.ink
[23:53] Attempted VNC authentication via legacy RFB 003.003 - challenge=99a2fd9ed23a24ed5cb27b847073eedd response=466aa9b592b4d6a847692a496df1893c
Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇭 203.154.158.195
🇨🇳 116.179.37.154
🇨🇦 85.217.149.63
🇵🇰 223.123.34.220
🇺🇸 216.145.74.145
🇰🇷 211.252.108.197
🇳🇱 178.62.225.55
🇵🇱 176.53.159.198
🇺🇸 147.185.132.96
🇩🇪 134.209.244.81
🇺🇸 104.164.173.4
🇮🇩 103.146.185.214
🇩🇪 94.31.70.220
🇫🇷 85.204.70.114
🇩🇪 45.159.21.162
🇬🇧 35.203.210.92
🇩🇪 34.141.20.121
🇺🇦 31.31.120.21
🇺🇸 24.45.235.179
🇺🇸 20.118.203.54
feedback