JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.172.134

66.132.172.134 was found in our database!

This IP was reported 3,506 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	134.172.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.172.134

Whois 66.132.172.134

IP Abuse Reports for 66.132.172.134:

This IP address has been reported a total of 3,506 times from 552 distinct sources. 66.132.172.134 was first reported on March 19th 2026, and the most recent report was 26 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-01 11:44:03 (26 minutes ago)	reported through recidive - multiple failed attempts(SSH)	Brute-Force Exploited Host SSH
🇩🇪 mattk	2026-07-01 10:19:45 (1 hour ago)	port scan	Port Scan
🇲🇹 neilcaruana	2026-07-01 07:58:36 (4 hours ago)	Sentinel detected an attack on port [8291]	Hacking
🇧🇷 diego	2026-07-01 06:45:54 (5 hours ago)	[rede-arem1] 07/01/2026-03:45:54.099656, 66.132.172.134, Protocol: 6, ET DROP Dshield Block Listed S ... show more [rede-arem1] 07/01/2026-03:45:54.099656, 66.132.172.134, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
Anonymous	2026-07-01 06:09:49 (6 hours ago)	5 hits, proto=tcp, ports=32959	Port Scan Hacking
🇺🇸 drewf.ink	2026-07-01 05:23:36 (6 hours ago)	[05:23] Port scanning. Port(s) scanned: TCP/10000	Port Scan
Anonymous	2026-07-01 04:55:17 (7 hours ago)	Port Scan detected from 66.132.172.134 (US/United States/134.172.132.66.censys-scanner.com). 5 hit ... show more Port Scan detected from 66.132.172.134 (US/United States/134.172.132.66.censys-scanner.com). 5 hits in the last 35 seconds show less	Brute-Force Port Scan
🇩🇪 pigro	2026-07-01 04:46:34 (7 hours ago)	66.132.172.134 - - [01/Jul/2026:06:46:17 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x93}\x ... show more 66.132.172.134 - - [01/Jul/2026:06:46:17 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x93}\x15\xBABJ\xA6\x8B`j\xAA\|\xA0\xB1\x9E" 400 157 "-" "-" 66.132.172.134 - - [01/Jul/2026:06:46:33 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD0\xCB\xE5\x0B[\xEC\x96\xED'gJ-U\x87\xD6\xF6\xFE\xC8:~Y^\x96\xC6\xFC\xACe\xB4\x149E\x0C g\x1B\xBB;\x15\x9A\xCE\x01q\x82\x04\x88\x86\xF6\xA6\xC1\x9B1\xE3\xBDG\x0F\x95\x80h\x7FdO\xAE\x22R\x08\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" ... show less	Web App Attack
🇳🇱 donarev419	2026-07-01 04:19:08 (7 hours ago)	Connection to port 5269 with data transfer. Data preview: <?xml version='1.0'?><stream:stream from=' ... show more Connection to port 5269 with data transfer. Data preview: <?xml version='1.0'?><stream:stream from='[email protected]' version='1.0' xml:lang='en' xmlns='jabb show less	Port Scan Hacking
🇺🇸 donarev419	2026-07-01 03:43:43 (8 hours ago)	Connection to port 18100 with data transfer. Data preview:	Port Scan Hacking
🇧🇷 diego	2026-07-01 03:30:50 (8 hours ago)	[probe-68-69] 2026-07-01 03:11:51, Client: 66.132.172.134, Protocol: 6, Unauthorized activity to HTT ... show more [probe-68-69] 2026-07-01 03:11:51, Client: 66.132.172.134, Protocol: 6, Unauthorized activity to HTTP: GET /v4eq07_ynrh show less	Web App Attack
🇧🇷 diego	2026-07-01 03:11:47 (8 hours ago)	[rede-164-29] 07/01/2026-00:11:46.951923, 66.132.172.134, Protocol: 6, ET DROP Dshield Block Listed ... show more [rede-164-29] 07/01/2026-00:11:46.951923, 66.132.172.134, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇳🇱 donarev419	2026-07-01 02:17:53 (9 hours ago)	Connection to port 2096 with data transfer. Data preview:	Port Scan Hacking
🇧🇷 diego	2026-07-01 02:08:53 (10 hours ago)	[rede-164-29] Port Scan detected from 66.132.172.134 (US/United States/134.172.132.66.censys-scann ... show more [rede-164-29] Port Scan detected from 66.132.172.134 (US/United States/134.172.132.66.censys-scanner.com). 11 hits in the last 91 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 30 23:08:30 kernel: [498055.080936] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=66.132.172.134 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=35249 DF PROTO=TCP SPT=14832 DPT=2000 WINDOW=21900 RES=0x00 SYN URGP=0 Jun 30 23:08:31 kernel: [498055.489452] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=66.132.172.134 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=56956 DF PROTO=TCP SPT=59526 DPT show less	Port Scan
Anonymous	2026-07-01 01:09:59 (11 hours ago)	Blocked by UFW (TCP on 3306) Source port: 40774 TTL: 47 Packet length: 60 TOS: 0x14 This report (fo ... show more Blocked by UFW (TCP on 3306) Source port: 40774 TTL: 47 Packet length: 60 TOS: 0x14 This report (for 66.132.172.134) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SQL Injection

Showing 1 to 15 of 3506 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.82.50.248

🇰🇷 211.223.107.86

🇹🇳 197.5.145.114

🇨🇿 185.91.165.34

🇺🇸 165.154.36.71

🇮🇳 117.205.4.130

🇱🇾 102.68.128.242

🇫🇷 84.247.181.26

🇷🇺 82.194.247.209

🇸🇬 47.237.187.66

🇳🇱 45.148.10.141

🇨🇳 43.226.44.214

🇯🇵 8.216.46.31

🇦🇹 2400:cb00:721:1024::6ca2:dcc0

🇨🇳 223.246.39.198

🇳🇱 195.178.110.199

🇺🇸 136.66.74.126

🇮🇳 117.236.124.166

🇨🇳 106.114.63.194

🇳🇱 89.21.67.149