JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.172.184

66.132.172.184 was found in our database!

This IP was reported 2,852 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	184.172.132.66.censys-scanner.com
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.172.184

Whois 66.132.172.184

IP Abuse Reports for 66.132.172.184:

This IP address has been reported a total of 2,852 times from 537 distinct sources. 66.132.172.184 was first reported on March 20th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 ki3	2026-07-07 13:30:17 (8 minutes ago)	Fail2Ban: Postfix Attack 66.132.172.184 1783431017.0(JST)	Email Spam Brute-Force
🇦🇺 LiftUp Hosting	2026-07-07 12:45:56 (53 minutes ago)	Honeypot hit: Empty payload (likely service probe); 40125 [1] TCP	Port Scan
🇬🇧 sandra361	2026-07-07 11:10:33 (2 hours ago)	Port scan detected: 19 attempts across 1 port (48366). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=66 ... show more Port scan detected: 19 attempts across 1 port (48366). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=66.132.172.184 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=53931 DF PROTO=TCP SPT=5574 DPT=48366 WINDOW=21900 RES=0x00 ACK RST URGP=0 show less	Port Scan
🇩🇪 ITSNF	2026-07-07 09:45:06 (3 hours ago)	Blocked by OPNsense firewall; 25 hits, proto=tcp, ports=80	Port Scan Hacking
🇭🇰 sandra361	2026-07-07 09:16:23 (4 hours ago)	Port scan detected: 14 attempts across 1 port (22989). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=66.132 ... show more Port scan detected: 14 attempts across 1 port (22989). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=66.132.172.184 LEN=283 TOS=0x14 PREC=0x00 TTL=51 ID=34419 DF PROTO=TCP SPT=61252 DPT=22989 WINDOW=21900 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇩🇪 BULLSEYE	2026-07-07 08:43:57 (4 hours ago)	Automated detection from Windows Firewall. Observed patterns: Top: TCP/445=5 (possible SMB scan/exp ... show more Automated detection from Windows Firewall. Observed patterns: Top: TCP/445=5 (possible SMB scan/exploit attempt). Traffic characteristics strongly indicate automated scanning activity. show less	Port Scan Hacking
🇫🇷 mailox	2026-07-07 08:42:55 (4 hours ago)	Unauthorized SSH connection on tarpit ...	SSH
🇩🇪 Axel	2026-07-07 07:50:29 (5 hours ago)	[2026-07-07 07:50:29 UTC] Honeypot IoT-targeted remote mgmt abuse connection attempt \| AXFRA HONEYPO ... show more [2026-07-07 07:50:29 UTC] Honeypot IoT-targeted remote mgmt abuse connection attempt \| AXFRA HONEYPOT show less	IoT Targeted
🇦🇺 gregoo23	2026-07-07 07:40:32 (5 hours ago)	66.132.172.184 - - [07/Jul/2026:17:40:19 +1000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03L\xCFn\ ... show more 66.132.172.184 - - [07/Jul/2026:17:40:19 +1000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03L\xCFn\xD6\x99\xAAt/\xDB\xA8\xB3\xF5\xAD&\x15\xCA\x08\xFDu\x01\x9B\xF3\xC3\x9F\xE1\x9B\xA1i;\x922\x17 X#xy\x03\x0El\x95\xCA\x223\xB1T\xD4\xB0:\x01<\x07\xE0a\xC6\xD6\xE8K\xD6\xAE\x08\x10d\x80\xE0\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 154 "-" "-" 66.132.172.184 - - [07/Jul/2026:17:40:30 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.172.184 - - [07/Jul/2026:17:40:31 +1000] "GET / HTTP/1.1" 400 154 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" ... show less	Bad Web Bot Web App Attack
🇩🇪 dispaisyenterprises	2026-07-07 07:33:38 (6 hours ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic on 21/ftpd Reported by DisPaisy Enterprises (dispai ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic on 21/ftpd Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 66691337	2026-07-07 06:16:35 (7 hours ago)	2026-07-07T06:16:10.622Z ACCEPT host=66.132.172.184 port=19994 fd=5 n=2/4096 2026-07-07T06:16:10.622 ... show more 2026-07-07T06:16:10.622Z ACCEPT host=66.132.172.184 port=19994 fd=5 n=2/4096 2026-07-07T06:16:10.622Z ACCEPT host=66.132.172.184 port=19994 fd=5 n=2/4096 2026-07-07T06:16:31.205Z ACCEPT host=66.132.172.184 port=18102 fd=6 n=3/4096 2026-07-07T06:16:31.205Z ACCEPT host=66.132.172.184 port=18102 fd=6 n=3/4096 2026-07-07T06:16:34.761Z ACCEPT host=66.132.172.184 port=18110 fd=7 n=4/4096 2026-07-07T06:16:34.761Z ACCEPT host=66.132.172.184 port=18110 fd=7 n=4/4096 2026-07-07T06:16:34.782Z ACCEPT host=66.132.172.184 port=18126 fd=8 n=5/4096 2026-07-07T06:16:34.782Z ACCEPT host=66.132.172.184 port=18126 fd=8 n=5/4096 ... show less	Brute-Force SSH
🇺🇸 donarev419	2026-07-07 04:36:23 (9 hours ago)	Port scan detected on port 18860 (connection without data transfer)	Port Scan
🇦🇺 LiftUp Hosting	2026-07-07 03:51:58 (9 hours ago)	Honeypot hit: Empty payload (likely service probe); 25524 [1] TCP	Port Scan
🇫🇷 GoodOldTOS	2026-07-07 02:01:19 (11 hours ago)	Highly suspect IP	Hacking Web App Attack
🇫🇷 Thaliruth	2026-07-06 23:51:05 (13 hours ago)	Jul 7 01:51:04 151 dovecot: imap-login: Login aborted: Connection closed (no auth attempts in 6 sec ... show more Jul 7 01:51:04 151 dovecot: imap-login: Login aborted: Connection closed (no auth attempts in 6 secs) (no_auth_attempts): user=<>, rip=66.132.172.184, lip=92.205.28.48, TLS: Connection closed, session=<PvQs8vlV/CRChKy4> ... show less	Hacking Brute-Force

Showing 1 to 15 of 2852 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c5a::123

🇺🇸 136.107.239.56

🇧🇩 59.153.17.153

🇺🇸 50.6.250.45

🇬🇧 35.203.210.94

🇨🇭 209.99.191.19

🇧🇷 191.210.133.134

🇫🇷 147.135.138.90

🇨🇮 102.209.220.86

🇺🇸 74.125.17.247

🇨🇳 58.19.140.122

🇨🇳 58.19.76.90

🇺🇸 45.79.191.178

🇰🇪 41.215.23.98

🇨🇳 39.100.86.127

🇵🇭 14.1.65.67

🇺🇸 192.3.251.33

🇩🇪 167.94.146.33

🇺🇿 84.54.73.58

🇳🇱 74.125.181.212