JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.172.161

66.132.172.161 was found in our database!

This IP was reported 115 times. Confidence of Abuse is 54%: ?

54%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	161.172.132.66.censys-scanner.com
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.172.161

Whois 66.132.172.161

IP Abuse Reports for 66.132.172.161:

This IP address has been reported a total of 115 times from 22 distinct sources. 66.132.172.161 was first reported on March 19th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NxtGenIT	2026-06-24 09:42:54 (2 days ago)	CiscoASA Honeypot hit, Payload: "GET /version HTTP/1.1" 404 -,	Brute-Force
Anonymous	2026-06-23 08:19:47 (3 days ago)	66.132.172.161 - - [23/Jun/2026:08:19:38 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 66.132.172.161 - - ... show more 66.132.172.161 - - [23/Jun/2026:08:19:38 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 66.132.172.161 - - [23/Jun/2026:08:19:43 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03G\xBFH\xAA\xBF\x9B\xE7YULg3\xB0\xC4\xBD\xBD\xB0^%m~-\xAE\xD3\x86\xA1R\xE5\xAC&-\xCB 5\x9A\xA7\xCE#DP~}(\xAD\xACO\xDE\xCC\xB6\x14Hw\xB7\xF8\xA9>3\xB5\xD9\xBA\x9E)\xD1\xE0\x93\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" 66.132.172.161 - - [23/Jun/2026:08:19:47 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03X.<\x94\xDC\xEF9\xB3\xC4\x8B/yn\xAF\xF6\xEA\xFE\xC2wq\x9C&X\x98\xECd\xB4n\x9B\x07\xB0\xA7 9\xA8\xB3Q\|\x95\xFF\x8C\x8A\xA3\xA4\xF1\xAD\xE7\xD7\xBB\xADCwP\x14,\xC9t\xA2\xF7\xC8\xDB\xFF\xDE\xBC\xEE\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" ... show less	Brute-Force
🇩🇪 ManagedStack	2026-06-22 23:30:01 (4 days ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
Anonymous	2026-06-20 12:17:50 (6 days ago)	66.132.172.161 - - [20/Jun/2026:12:17:41 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 66.132.172.161 - - ... show more 66.132.172.161 - - [20/Jun/2026:12:17:41 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 66.132.172.161 - - [20/Jun/2026:12:17:46 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE6d\x5C\x22X\xBE\x84'\xB7\xB6\x13\xC9\x07\xDF" 400 166 "-" "-" 66.132.172.161 - - [20/Jun/2026:12:17:50 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x8AW\xDB5\x14\x04!F\xA7\x87\x82\x10}\xA9\xADo\x1DC[\x96\x85\x90\xAA\xDFs\x16\xC0L\xADe\xC3\xFD \xC2\x01\x86\xD3Z\xC7\x7F\xE0\x86\xA1\xC6\x13\x9A\xCAu\xA73\x04\x8D\xC0\xDE\xB4\x83c\xD86^R/F\x7F}\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" ... show less	Brute-Force
🇫🇷 thecocasio	2026-06-19 17:17:03 (1 week ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 110 (POP3) on a host running no ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 110 (POP3) on a host running no such service. Automated port-scan detection at 2026-06-19T17:17:03Z. show less	Port Scan
🇩🇪 itak	2026-06-19 02:59:15 (1 week ago)	postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ... show more postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP. show less	DDoS Attack Port Scan
Anonymous	2026-06-16 15:01:13 (1 week ago)	66.132.172.161 - - [16/Jun/2026:15:01:03 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 66.132.172.161 - - ... show more 66.132.172.161 - - [16/Jun/2026:15:01:03 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" 66.132.172.161 - - [16/Jun/2026:15:01:08 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x030\xE5\x94SqT\xCE\xEE\xF0!\x17\x15\xA5x\x9F\xA9\xD0\x88\xDA\x17A\xD1\xDCh\xEBi\x96\x1A2\xFA\xEB\xAC \x86\xE7\xE5\xE0b7\x05\x19\xF3\xC2\xB2VOIr\x19\x97\xAD4RB\x12\x96m/" 400 166 "-" "-" 66.132.172.161 - - [16/Jun/2026:15:01:12 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x0B\x09\xF5Q\xA4\xBA<\x85W\xC4\x88H\xBB}\xAB\x92(\xF9\x9D\xCF\x5C`8#\xB7\x9A\xA5\xAEr\xB7\xC7d VI\xA2\x09\xC2\x98\x04%\x1F;\x8E\xA1\xBA;c\|fX\xE2V\xD1\xEB;M\xCD\xC1\xE7l\x8C\x19\x89\xC8\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" ... show less	Brute-Force
🇫🇮 Erpelstolz	2026-06-15 14:49:21 (1 week ago)	external host: 2026-06-10T11:44:09.221265+02:00 Erpelstolz postfix/smtpd[174995]: lost connection af ... show more external host: 2026-06-10T11:44:09.221265+02:00 Erpelstolz postfix/smtpd[174995]: lost connection after STARTTLS from 161.172.132.66.censys-scanner.com[66.132.172.161] 2026-06-12T05:50:06.218239+02:00 Erpelstolz postfix/smtpd[346763]: lost connection after STARTTLS from 161.172.132.66.censys-scanner.com[66.132.172.161] 2026-06-15T16:49:21.276567+02:00 Erpelstolz postfix/smtpd[961212]: lost connection after STARTTLS from 161.172.132.66.censys-scanner.com[66.132.172.161] show less	Email Spam
Anonymous	2026-06-13 15:36:56 (1 week ago)	2026-06-13T17:36:55.717985+02:00 gollum postfix/submission/smtpd[632682]: lost connection after STAR ... show more 2026-06-13T17:36:55.717985+02:00 gollum postfix/submission/smtpd[632682]: lost connection after STARTTLS from 161.172.132.66.censys-scanner.com[66.132.172.161] ... show less	DDoS Attack Brute-Force
🇩🇪 ecs.ge	2026-06-10 14:30:59 (2 weeks ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇩🇪 ecs.ge	2026-06-08 17:23:06 (2 weeks ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇩🇪 ecs.ge	2026-06-06 18:24:52 (2 weeks ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
Anonymous	2026-06-06 07:58:51 (2 weeks ago)		DNS Compromise DDoS Attack
🇩🇪 itak	2026-06-05 22:20:31 (3 weeks ago)	postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ... show more postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP. show less	DDoS Attack Port Scan
🇷🇺 Andrey Ganichvili	2026-06-04 10:40:07 (3 weeks ago)	Unauthorized sitemap access (/sitemap.xml) from 66.132.172.161	Web App Attack

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 154.40.142.174

🇹🇷 85.105.200.32

🇰🇷 61.42.103.133

🇳🇱 45.14.224.5

🇺🇸 40.74.208.9

🇺🇸 20.168.121.44

🇸🇬 5.223.87.239

🇨🇳 218.200.9.182

🇧🇷 205.210.31.218

🇬🇧 193.163.125.183

🇲🇽 177.241.61.200

🇳🇱 176.65.148.84

🇺🇸 137.184.228.138

🇹🇼 110.25.112.143

🇷🇺 95.190.131.202

🇸🇪 90.233.193.173

🇺🇸 45.156.129.65

🇸🇬 198.38.91.141

🇳🇱 194.26.192.29

🇷🇺 188.162.252.0