66.132.159.90

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
199 reports
116 reporters · latest 1 hour ago
ISP
Censys, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS398324
Hostname(s)
90.159.132.66.censys-scanner.com
Domain Name
censys.com
Country
🇺🇸 United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
199 from 116 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 46 🇫🇷 France 41 🇩🇪 Germany 25
Most common categories Port Scan 123 Web App Attack 40 Brute-Force 33 Hacking 31 Bad Web Bot 24
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 service Informatique
GET /info.php
Web App Attack
🇺🇸 donarev419
Port scan detected on port 8088 (connection without data transfer)
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 4 application-level events across 4 source port(s). Sensor(s): Cowrie.
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 35254 [1] TCP
Port Scan
🇺🇸 donarev419
Port scan detected on port 8080 (connection without data transfer)
Port Scan
🇵🇱 Wepted
Port scan detected by honeypot
Port Scan Hacking
🇱🇻 radix
Malicious automated scanner / crawler with suspicious user agent.
Bad Web Bot
🇨🇦 Blinker73
Port Scan
🇩🇪 Ano_Nym
CrowdSec IDS alert on VPS 85.215.198.123 (DE). Scenario: crowdsecurity/http-bad-user-agent
Web App Attack
🇩🇪 cloudmax
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
Port Scan
🇩🇪 EinfxchFinn
Unauthorized connection attempt to port 50998 from 66.132.159.90
Port Scan
🇳🇱 Alt255
[cb-10al] Mail server brute-force: 5 failed attempts detected by fail2ban jail exim-iptables.
Brute-Force
Anonymous
Blocked by firewall on hugin [110/tcp] | Rule: AbuseIPDB | SPT: 5630 | TTL: 58 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 23p02732
Automated web scanning and malicious probing
Brute-Force Bad Web Bot Web App Attack
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/631 (IPP); 3 application-level events across 3 source port(s). Sensor(s): Ipphoney.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 211.226.63.61
🇧🇿 138.185.76.130
🇹🇼 128.14.229.181
🇰🇷 220.116.117.213
🇱🇦 202.137.142.214
🇸🇬 188.166.219.125
🇹🇷 185.226.93.242
🇩🇪 167.233.243.243
🇨🇴 152.202.82.118
🇨🇱 152.174.95.48
🇺🇸 136.144.42.48
🇷🇴 92.118.39.120
🇳🇴 83.108.89.5
🇺🇸 54.82.76.11
🇧🇪 35.206.133.206
🇧🇪 34.38.167.142
🇺🇸 20.80.92.163
🇬🇧 18.175.187.142
🇷🇴 2.57.122.238
🇨🇳 1.83.125.115
feedback