66.132.159.66

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
226 reports
125 reporters Β· latest 1 hour ago
ISP
Censys, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS398324
Hostname(s)
66.159.132.66.censys-scanner.com
Domain Name
censys.com
Country
πŸ‡ΊπŸ‡Έ United States of America
City
Chicago, Illinois

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
226 from 125 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡«πŸ‡· France 49 πŸ‡ΊπŸ‡Έ United States of America 48 πŸ‡©πŸ‡ͺ Germany 33
Most common categories Port Scan 155 Hacking 44 Web App Attack 36 Brute-Force 33 Bad Web Bot 21
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡ΊπŸ‡Έ 66691337
Brute-Force SSH
πŸ‡©πŸ‡ͺ xavier-momain.eu
CrowdSec ban β€” scenario: xavier/nftables-scan-any-port
Port Scan
πŸ‡²πŸ‡³ Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 64692 [3] TCP
Port Scan
πŸ‡§πŸ‡¬ Ilcheff
SSH tarpit hit: connection from 66.159.132.66.censys-scanner.com [US/United States, AS398324] to SSH accepted.
Port Scan Brute-Force SSH
Anonymous
Port Scan
πŸ‡©πŸ‡ͺ bescared
F2B - Malicious activity detected. Excessive port scans. -151302cd-
Port Scan
πŸ‡§πŸ‡¬ MazenHost
1794129623 - 11/08/2026 11:20:23 Host: 66.132.159.66/66.132.159.66 Port: 119 TCP Blocked ...
Port Scan
πŸ‡³πŸ‡± VMHeaven.io
Blocked by UFW [9100/tcp] Source port: 23040 TTL: 59 Packet length: 60
Port Scan
πŸ‡§πŸ‡¬ MazenHost
1794117860 - 11/08/2026 08:04:20 Host: 66.132.159.66/66.132.159.66 Port: 1080 TCP Blocked ...
Port Scan
πŸ‡ΊπŸ‡Έ donarev419
Connection to port 20000 with data transfer. Data preview: dοΏ½
Port Scan Hacking
πŸ‡«πŸ‡· Kejult
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 4 application-level events across 4 source port(s). Sensor(s): H0neytr4p.
Port Scan
πŸ‡«πŸ‡· Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 6 application-level events across 3 target ports and 2 source port(s). Ports: 443/HTTPS, 7547/service, 11102/service. Sensors: H0neytr4p, Honeytrap.
Port Scan
πŸ‡ΊπŸ‡Έ Sockets-AR
CrowdSec: malicious bot / scanner detected (crowdsecurity/http-bad-user-agent) at 2026-11-08T04:46:57.135Z
Bad Web Bot Web App Attack
πŸ‡©πŸ‡ͺ Klompenzijncool
Web scanning/probing blocked by Fail2Ban.
Port Scan Bad Web Bot
πŸ‡ΊπŸ‡Έ donarev419
Port scan detected on port 4891 (connection without data transfer)
Port Scan

Showing 1 to 15 of 226 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡ͺπŸ‡Έ 2400:cb00:1383:1000:bb88:cf68:3f13:56a7
πŸ‡¦πŸ‡Ή 2400:cb00:721:1000:8a20:ad22:e546:7b01
πŸ‡ΊπŸ‡¦ 193.34.128.48
πŸ‡§πŸ‡· 170.78.132.37
πŸ‡°πŸ‡· 115.178.75.243
πŸ‡ΉπŸ‡¬ 102.211.170.38
πŸ‡¨πŸ‡¦ 45.198.224.251
πŸ‡΅πŸ‡± 2400:cb00:923:1000:357:2d0b:98d:1c8d
πŸ‡¦πŸ‡Ή 2400:cb00:721:1000:9b1d:1b6f:acc6:8aed
πŸ‡΅πŸ‡± 2400:cb00:73:1000:d508:a277:c469:4005
πŸ‡¦πŸ‡Ί 220.240.101.65
πŸ‡ΊπŸ‡Έ 205.210.31.56
πŸ‡ΊπŸ‡Έ 205.210.31.55
πŸ‡§πŸ‡· 190.102.47.36
πŸ‡©πŸ‡ͺ 172.104.241.92
πŸ‡ΊπŸ‡Έ 172.56.208.188
πŸ‡¨πŸ‡³ 121.199.175.148
πŸ‡ΏπŸ‡¦ 102.218.121.250
πŸ‡·πŸ‡Ί 94.242.168.49
πŸ‡§πŸ‡¬ 79.124.56.254
feedback