JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.172.159

66.132.172.159 was found in our database!

This IP was reported 5,032 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	159.172.132.66.censys-scanner.com
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.172.159

Whois 66.132.172.159

IP Abuse Reports for 66.132.172.159:

This IP address has been reported a total of 5,032 times from 147 distinct sources. 66.132.172.159 was first reported on March 19th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-13 12:59:59 (1 hour ago)	Drop from IP address 66.132.172.159 to tcp-port 22272	Port Scan
🇮🇹 Fusty	2026-07-13 12:04:13 (2 hours ago)	Unauthorized attempt on (TCP on port 8282). Source port: 21984 TTL: 49 Packet length: 60 Timestamp: ... show more Unauthorized attempt on (TCP on port 8282). Source port: 21984 TTL: 49 Packet length: 60 Timestamp: 2026-07-13 14:04:13 show less	Port Scan
🇺🇸 MPL	2026-07-13 11:47:28 (2 hours ago)	tcp port scan (6 or more attempts)	Port Scan
🇩🇪 mattk	2026-07-13 11:41:04 (2 hours ago)	port scan	Port Scan
🇩🇪 celestialcity	2026-07-13 11:28:02 (2 hours ago)	Blocked by UFW on celestialcityeu [51911/tcp] \| SPT: 49020 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityeu [51911/tcp] \| SPT: 49020 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-07-13 11:23:19 (2 hours ago)	[rede-164-29] 07/13/2026-08:23:19.585201, 66.132.172.159, Protocol: 6, ET DROP Dshield Block Listed ... show more [rede-164-29] 07/13/2026-08:23:19.585201, 66.132.172.159, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇺🇸 xmission.com	2026-07-13 09:04:06 (5 hours ago)	Blocked by UFW (TCP on 23687) Source port: 47352 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 23687) Source port: 47352 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 66.132.172.159) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-07-13 08:36:54 (5 hours ago)	[rede-164-29] 07/13/2026-05:36:54.089458, 66.132.172.159, Protocol: 6, ET DROP Dshield Block Listed ... show more [rede-164-29] 07/13/2026-05:36:54.089458, 66.132.172.159, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇺🇸 MPL	2026-07-13 08:28:47 (5 hours ago)	tcp/2414 (2 or more attempts)	Port Scan
🇩🇪 ValtonTahiri	2026-07-13 08:16:22 (5 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=66.132.172.159; proto=TCP; source_port=12487; target_port=2900; flags=SYN show less	Port Scan
🇳🇱 StopAbuse	2026-07-13 08:07:19 (6 hours ago)	tcp/13227	Port Scan
🇩🇪 london2038.com	2026-07-13 07:49:27 (6 hours ago)	Connection atttempts against closed TCP ports Jul 13 04:42:42 BLOCK SRC=66.132.172.159 LEN=60 TOS=0x ... show more Connection atttempts against closed TCP ports Jul 13 04:42:42 BLOCK SRC=66.132.172.159 LEN=60 TOS=0x00 PREC=0x20 TTL=55 ID=62015 PROTO=TCP SPT=59933 DPT=17073 WINDOW=42340 RES=0x00 SYN Jul 13 04:47:23 BLOCK SRC=66.132.172.159 LEN=60 TOS=0x00 PREC=0x20 TTL=55 ID=58591 PROTO=TCP SPT=20132 DPT=57123 WINDOW=42340 RES=0x00 SYN Jul 13 09:41:52 BLOCK SRC=66.132.172.159 LEN=60 TOS=0x00 PREC=0x20 TTL=55 ID=21359 PROTO=TCP SPT=64535 DPT=53579 WINDOW=42340 RES=0x00 SYN show less	Port Scan
🇫🇷 EDSL	2026-07-13 06:54:39 (7 hours ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇨🇭 pingusurmars	2026-07-13 06:24:27 (7 hours ago)	Blocked by UFW on ampereone [54971/tcp] Source port: 30711 TTL: 57 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on ampereone [54971/tcp] Source port: 30711 TTL: 57 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-07-13 06:07:15 (8 hours ago)	[rede-44-49] 07/13/2026-03:07:15.724233, 66.132.172.159, Protocol: 6, ET DROP Dshield Block Listed S ... show more [rede-44-49] 07/13/2026-03:07:15.724233, 66.132.172.159, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking

Showing 1 to 15 of 5032 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2404:6800:4000:1004::12b

🇳🇱 195.178.110.217

🇺🇸 34.73.190.114

🇻🇳 27.79.179.24

🇺🇸 20.163.2.42

🇺🇸 20.65.194.117

🇺🇸 167.172.158.128

🇺🇸 141.11.88.238

🇵🇰 115.186.117.197

🇺🇸 104.206.128.14

🇹🇷 94.154.43.92

🇺🇸 73.184.141.19

🇹🇿 41.59.42.113

🇺🇸 20.40.216.117

🇧🇪 207.175.48.69

🇱🇧 185.169.7.174

🇨🇳 183.221.19.94

🇧🇷 104.23.254.192

🇨🇦 85.217.149.14

🇳🇱 34.91.17.110