37.66.56.200

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
4% Caution
47 reports
29 reporters · latest 2 days ago
ISP
SFR Infra MAP-T
Usage Type
Fixed Line ISP
ASN
AS15557
Hostname(s)
200.56.66.37.rev.sfr.net
Domain Name
sfr.fr
Country
🇫🇷 France
City
Saint-Etienne, Auvergne-Rhone-Alpes
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
47 from 29 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 4
Most common categories Port Scan 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-29 07:23, Last: 2026-11-10 07:20 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-19 18:46, Last: 2026-10-23 08:10 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-05 07:29, Last: 2026-10-16 15:46 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-09-22 20:19, Last: 2026-09-29 18:52 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-08-25 17:10, Last: 2026-09-09 19:47 UTC. Triggers: unknown.
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 9764.
Port Scan Hacking
🇳🇵 radheykrishna.com.np
Sep 2 09:56:47 kernel: [2038478.396893] [UFW BLOCK] IN=ens160 OUT= SRC=37.66.56.200 LEN=677 TOS=0x00 PREC=0x00 TTL=52 ID=15690 DF PROTO=UDP SPT=46970 DPT=45597 LEN=657 ...
Port Scan
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇧🇷 diego
[rede-44-49] 08/31/2026-13:03:06.214221, 37.66.56.200, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 51
Hacking
🇧🇷 diego
[rede-164-29] 08/31/2026-06:37:09.262780, 37.66.56.200, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 51
Hacking
Anonymous
denied traffic to a honeypot network. destination port 22427.
Port Scan Hacking
🇫🇷 thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 3389 (RDP) on a host running no such service. Automated port-scan detection at 2026-08-26T02:29:01Z.
Port Scan
🇳🇱 ByeByte API
Port scan from this IP. Firewall dropped every packet. Targeted UDP ports: 12627. Single burst at 2026-08-26 01:08 UTC.
Port Scan
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
Exploited Host Bad Web Bot
🇧🇷 diego
[rede-44-49] 08/22/2026-06:59:01.556845, 37.66.56.200, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 42
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇪 190.6.11.236
🇧🇷 130.49.113.239
🇷🇴 80.94.92.179
🇵🇰 203.6.208.238
🇲🇽 189.161.24.253
🇨🇳 182.43.235.75
🇨🇳 121.40.40.208
🇺🇸 18.212.198.233
🇷🇴 2.57.122.209
🇧🇷 205.210.31.192
🇷🇴 193.46.255.86
🇳🇱 192.253.248.222
🇮🇩 180.254.197.246
🇸🇬 165.22.247.236
🇭🇰 119.28.46.114
🇱🇹 91.224.92.52
🇺🇸 82.24.234.63
🇬🇧 51.195.215.75
🇳🇱 45.148.10.151
feedback