This IP address has been reported a total of
109
times from
22 distinct
sources.
66.132.172.162 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[[hidden by err]] Honeypot attempt US from 66.132.172.162 to port 23, with banner b'\x16\x03\x01\x00 ...
show more[[hidden by err]] Honeypot attempt US from 66.132.172.162 to port 23, with banner b'\x16\x03\x01\x00\xee\x01\x00\x00\xea\x03\x03\x06\x11!\x1c\x82RW\xa5\xaa\xea\x04\x17\xf1\xd0\x1b\xa8\x8e{\xca\x02\xcbFX\xb22\xe5\xfd:\xf9h\xf7\x93 H\xff\x1d\t\xcfg\xcf\x1b\x04\xde\x89\x05\xa1\xb6\x8e\xf0: \x05x\x0e\xf6\xd9\xed\x9a\xa5\xc0.\xb4\xb3D-\x00&\xcc\xa8\xcc\xa9\xc0/\xc00\xc0+\xc0,' | Detected type is tls
show less
PortSentry honeypot: unsolicited TCP connection to closed decoy port 25 (SMTP) on a host running no ...
show morePortSentry honeypot: unsolicited TCP connection to closed decoy port 25 (SMTP) on a host running no such service. Automated port-scan detection at 2026-07-03T22:25:08Z.
show less
postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ...
show morepostfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP.
show less
postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ...
show morepostfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP.
show less
[[hidden by err]] Honeypot attempt US from 66.132.172.162 to port 2200, with banner b'\x16\x03\x01\x ...
show more[[hidden by err]] Honeypot attempt US from 66.132.172.162 to port 2200, with banner b'\x16\x03\x01\x00\xee\x01\x00\x00\xea\x03\x03\x8c\xbb\x8b+\xc1\xb8g\x1a\xb1\xf45{2\t \xd64H\x02\x12\xacj\xc4B\xbad\x7f\xc0T\xdb\xc1\x82 \x83\xd4,\xd1"\xc8(\x1c\xd5}\x89\x07\x9e\xb5a\xa68\xda\x8c5\x8a7\xdfq\xe1\xafZ\xe1\xa7\xd7\xfc\xfc\x00&\xcc\xa8\xcc\xa9\xc0/\xc00\xc0+\xc0,' | Detected type is tls
show less
PortSentry honeypot: unsolicited TCP connection to closed decoy port 3306 (MySQL) on a host running ...
show morePortSentry honeypot: unsolicited TCP connection to closed decoy port 3306 (MySQL) on a host running no such service. Automated port-scan detection at 2026-06-19T13:26:18Z.
show less
Port Scan
Showing 1 to
15
of 109 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩