66.132.159.101
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Censys, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS398324
- Hostname(s)
- 101.159.132.66.censys-scanner.com
- Domain Name
- censys.com
- Country
- ๐บ๐ธ United States of America
- City
- Chicago, Illinois
Abuse Reports
Total reports
296 from
175 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ฉ๐ช anycast_ac |
Blocked by UFW on baremetal1 [9000/tcp] | SPT: 23044 | TTL: 55 | LEN: 60 | TOS: 0x00 โข Reported by: FemboyHolding LTD
|
Port Scan | |
| ๐ฆ๐บ LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 7965 [1] TCP
|
Port Scan | |
| ๐ธ๐ฐ noi |
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=7080
|
Port Scan Hacking | |
| ๐บ๐ธ shabi |
UFW Blocked [1022/TCP]
Source: 66.132.159.101:53966
TTL: 54
Lenth: 60
TOS: 0x08
|
Port Scan | |
| ๐ฉ๐ช EGP Abuse Dept |
Scanning for web/db/file exploits on tpc-038.mach3builders.nl
|
SQL Injection Bad Web Bot Web App Attack | |
| ๐ซ๐ท zulzeen |
[incypit-web] Banned by Fail2ban (Jail: syswarden-portscan)
|
Port Scan | |
| ๐ฆ๐บ KevinNeale |
Fail2Ban recidive block for repeated malicious authentication attempts.
|
Web App Attack | |
| ๐ซ๐ท Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 5 application-level events across 2 target ports and 5 source port(s). Ports: 23/Telnet, 4840/service. Sensors: Cowrie, Honeytrap.
|
Port Scan | |
| ๐ฌ๐ง Andrew |
Blocked by UFW (TCP on port 11072).
Source port: 35676
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 66.132.159.101) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| ๐ซ๐ฎ dnsbd.tech |
nftables: Port scan (TCP:2377) [srv2]
|
Port Scan Hacking | |
| ๐บ๐ธ cunning-fox |
Automated web-application probing observed.
|
Web App Attack | |
| ๐ฉ๐ช Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| ๐ซ๐ท EvoX |
๐ก๏ธ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 10018 [1] TCP
|
Port Scan | |
| ๐ฎ๐ฉ helouism |
Fail2Ban: Blocked by UFW for port scanning.
|
Port Scan DDoS Attack | |
| ๐บ๐ธ aks4226 |
Attacking common web applications. (n01)
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown