66.132.159.101

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
296 reports
175 reporters ยท latest 5 minutes ago
ISP
Censys, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS398324
Hostname(s)
101.159.132.66.censys-scanner.com
Domain Name
censys.com
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
296 from 175 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ซ๐Ÿ‡ท France 51 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 50 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 47
Most common categories Port Scan 191 Hacking 56 Web App Attack 55 Brute-Force 48 SSH 26
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช anycast_ac
Blocked by UFW on baremetal1 [9000/tcp] | SPT: 23044 | TTL: 55 | LEN: 60 | TOS: 0x00 โ€ข Reported by: FemboyHolding LTD
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ LiftUp Hosting
Honeypot hit: Empty payload (likely service probe); 7965 [1] TCP
Port Scan
๐Ÿ‡ธ๐Ÿ‡ฐ noi
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=7080
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ shabi
UFW Blocked [1022/TCP] Source: 66.132.159.101:53966 TTL: 54 Lenth: 60 TOS: 0x08
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช EGP Abuse Dept
Scanning for web/db/file exploits on tpc-038.mach3builders.nl
SQL Injection Bad Web Bot Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท zulzeen
[incypit-web] Banned by Fail2ban (Jail: syswarden-portscan)
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ KevinNeale
Fail2Ban recidive block for repeated malicious authentication attempts.
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 5 application-level events across 2 target ports and 5 source port(s). Ports: 23/Telnet, 4840/service. Sensors: Cowrie, Honeytrap.
Port Scan
๐Ÿ‡ฌ๐Ÿ‡ง Andrew
Blocked by UFW (TCP on port 11072). Source port: 35676 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 66.132.159.101) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ฎ dnsbd.tech
nftables: Port scan (TCP:2377) [srv2]
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ cunning-fox
Automated web-application probing observed.
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช Jochen Pretli
connection to honeypot
Email Spam Port Scan
๐Ÿ‡ซ๐Ÿ‡ท EvoX
๐Ÿ›ก๏ธ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 10018 [1] TCP
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ฉ helouism
Fail2Ban: Blocked by UFW for port scanning.
Port Scan DDoS Attack
๐Ÿ‡บ๐Ÿ‡ธ aks4226
Attacking common web applications. (n01)
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ซ๐Ÿ‡ท 205.237.104.172
๐Ÿ‡ฒ๐Ÿ‡ฝ 201.132.110.50
๐Ÿ‡จ๐Ÿ‡ฆ 165.245.239.199
๐Ÿ‡ฆ๐Ÿ‡ด 105.172.81.136
๐Ÿ‡ฌ๐Ÿ‡ง 100.42.106.170
๐Ÿ‡ฎ๐Ÿ‡ณ 82.29.161.158
๐Ÿ‡ณ๐Ÿ‡ฑ 77.239.124.148
๐Ÿ‡บ๐Ÿ‡ธ 75.58.48.155
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.157
๐Ÿ‡ฉ๐Ÿ‡ช 8.211.7.142
๐Ÿ‡น๐Ÿ‡ผ 198.235.24.67
๐Ÿ‡ฉ๐Ÿ‡ด 152.0.37.48
๐Ÿ‡จ๐Ÿ‡ณ 112.28.73.142
๐Ÿ‡บ๐Ÿ‡ธ 96.224.141.199
๐Ÿ‡ฌ๐Ÿ‡ง 87.236.176.15
๐Ÿ‡บ๐Ÿ‡ธ 66.132.159.16
๐Ÿ‡ฐ๐Ÿ‡ท 52.141.2.20
๐Ÿ‡ฌ๐Ÿ‡ง 45.133.173.87
๐Ÿ‡ป๐Ÿ‡ณ 14.177.231.171
๐Ÿ‡ณ๐Ÿ‡ฑ 200.138.46.16
feedback