This IP address has been reported a total of
23
times from
21 distinct
sources.
66.132.159.128 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 9
reports;
France
with 5
reports;
United States of America
with 4
reports.
The most common categories in these recent reports were:
Port Scan
10
times;
Web App Attack
9
times;
Hacking
9
times;
Bad Web Bot
7
times;
Brute-Force
4
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: SSH/Telnet brute-force. 2 events observed. Reported automatically from a honeypo ...
show moreHoneypot detection: SSH/Telnet brute-force. 2 events observed. Reported automatically from a honeypot sensor.
show less
[Tue Oct 27 10:56:42 PM CET 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via SS ...
show more[Tue Oct 27 10:56:42 PM CET 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via SSH
show less
PortSentry honeypot: unsolicited TCP connection to closed decoy port 1433 (MSSQL) on a host running ...
show morePortSentry honeypot: unsolicited TCP connection to closed decoy port 1433 (MSSQL) on a host running no such service. Automated port-scan detection at 2026-10-27T18:11:03Z.
show less
[TueOct2718:28:00.9857822026][security2:error][pid3822389:tid3822494][client66.132.159.128:0]ModSecu ...
show more[TueOct2718:28:00.9857822026][security2:error][pid3822389:tid3822494][client66.132.159.128:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.prodotti.comarcosa.com\"][uri\"/\"][unique_id\"auDfIJXdyaRO9rOi-oiGhAAAAQw\"]
show less
Hacking
Web App Attack
Anonymous
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ...
show moreAttacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
show less
[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Ta ...
show more[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Target: IP Directo. Reason: Atacante detectado en Listas Negras Globales RBL [Spamhaus ZEN (XBL: Botnet / Malware / Servidor Comprometido / Exploit (Crítico))]. Bloqueado en perímetro.
show less
Suricata IDS: SURICATA Applayer Mismatch protocol both directions (4 events observed on private hone ...
show moreSuricata IDS: SURICATA Applayer Mismatch protocol both directions (4 events observed on private honeypot sensor)
show less
