JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.172.204

66.132.172.204 was found in our database!

This IP was reported 1,915 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	204.172.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.172.204

Whois 66.132.172.204

IP Abuse Reports for 66.132.172.204:

This IP address has been reported a total of 1,915 times from 431 distinct sources. 66.132.172.204 was first reported on March 19th 2026, and the most recent report was 53 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-03-25 02:49:28 (2 months ago)	Connection to port 554 with data transfer. Data preview: OPTIONS rtsp://107.175.212.44:554/multicast ... show more Connection to port 554 with data transfer. Data preview: OPTIONS rtsp://107.175.212.44:554/multicast/profile2/media.smp RTSP/1.0 CSeq: 1 show less	Port Scan Hacking
🇹🇷 Threat.live	2026-03-25 02:10:05 (2 months ago)	Brute Force, tcp/22	Brute-Force
🇧🇷 diego	2026-03-25 00:25:50 (2 months ago)	[probe-68-69] 2026-03-25 00:05:15, Client: 66.132.172.204, Protocol: 6, Unauthorized activity to HTT ... show more [probe-68-69] 2026-03-25 00:05:15, Client: 66.132.172.204, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-03-25 00:05:14 (2 months ago)	[rede-164-29] 03/24/2026-21:05:14.642784, 66.132.172.204, Protocol: 6, ET DROP Dshield Block Listed ... show more [rede-164-29] 03/24/2026-21:05:14.642784, 66.132.172.204, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇩🇪 Moritz	2026-03-24 23:05:42 (2 months ago)	Honeypot hit: Unauthorized traffic (60 bytes of payload); 4839 [2] TCP	Port Scan
🇩🇪 femboy.cat	2026-03-24 21:12:51 (2 months ago)	Port scan to tcp/3000 from 66.132.172.204	Brute-Force
🇳🇱 lid3rc	2026-03-24 20:19:05 (2 months ago)	According to the AbuseIPDB risk analysis, the IP address is too high risk.	Web App Attack
🇫🇷 dwmp	2026-03-24 20:17:18 (2 months ago)	Mar 24 21:17:14 plesk postfix/smtpd[2936154]: lost connection after CONNECT from 204.172.132.66.cens ... show more Mar 24 21:17:14 plesk postfix/smtpd[2936154]: lost connection after CONNECT from 204.172.132.66.censys-scanner.com[66.132.172.204] Mar 24 21:17:17 plesk postfix/smtpd[2936154]: lost connection after CONNECT from 204.172.132.66.censys-scanner.com[66.132.172.204] Mar 24 21:17:18 plesk postfix/smtpd[2936154]: lost connection after CONNECT from 204.172.132.66.censys-scanner.com[66.132.172.204] ... show less	Brute-Force SSH
🇩🇪 psauxit	2026-03-24 19:11:29 (2 months ago)	Fail2Ban - UFW port probing on unauthorized port	Port Scan
🇫🇷 GoodOldTOS	2026-03-24 18:35:49 (2 months ago)	Connection to MSSQL honeypot	Hacking
🇩🇪 wiredalter	2026-03-24 18:29:05 (2 months ago)	Blocked by UFW on dVPS [27981/tcp] Source Port: 60786 TTL: 49 Packet Length: 60 TOS: 0x00 Analyzed ... show more Blocked by UFW on dVPS [27981/tcp] Source Port: 60786 TTL: 49 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇺🇸 LotPhantom	2026-03-24 17:22:14 (2 months ago)	2026-03-24T17:22:13.409433+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-03-24T17:22:13.409433+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=66.132.172.204 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=22353 DF PROTO=TCP SPT=53614 DPT=24042 WINDOW=21900 RES=0x00 SYN URGP=0 2026-03-24T17:22:14.416372+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=66.132.172.204 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=22354 DF PROTO=TCP SPT=53614 DPT=24042 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇩🇪 eskilbrun	2026-03-24 17:10:32 (2 months ago)	2026-03-24T18:10:31.352104+01:00 linode1.eskil.net dovecot[857]: imap-login: Disconnected: Connectio ... show more 2026-03-24T18:10:31.352104+01:00 linode1.eskil.net dovecot[857]: imap-login: Disconnected: Connection closed: read(size=597) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=66.132.172.204, lip=194.195.241.187, TLS handshaking: read(size=597) failed: Connection reset by peer, session=<qI2MOshNwJVChKzM> 2026-03-24T18:10:31.800779+01:00 linode1.eskil.net dovecot[857]: imap-login: Disconnected: Connection closed: read(size=597) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=66.132.172.204, lip=194.195.241.187, TLS handshaking: read(size=597) failed: Connection reset by peer, session=<P2eTOshNxJVChKzM> 2026-03-24T18:10:32.296238+01:00 linode1.eskil.net dovecot[857]: imap-login: Disconnected: Connection closed: read(size=676) failed: Connection reset by peer (no auth attempts in 1 secs): user=<>, rip=66.132.172.204, lip=194.195.241.187, TLS handshaking: read(size=676) failed: Connection reset by peer, session=<v/aaOshNyJVChKzM> ... show less	Brute-Force
🇩🇪 acadeova	2026-03-24 17:02:30 (2 months ago)	🚨 Recon detected (nft drop) SRC=66.132.172.204 Observed=TCP dpt=443 in=enp0s6 ttl=53 Time=recent(jou ... show more 🚨 Recon detected (nft drop) SRC=66.132.172.204 Observed=TCP dpt=443 in=enp0s6 ttl=53 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇫🇷 pm33	2026-03-24 16:56:28 (2 months ago)	Unsolicited connection attempts or aggressive port scan.	Port Scan

Showing 1786 to 1800 of 1915 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 178.210.229.116

🇧🇷 177.86.178.106

🇳🇱 176.65.148.147

🇯🇵 136.110.103.183

🇩🇪 91.99.210.171

🇺🇸 47.251.253.223

🇬🇧 35.203.210.251

🇩🇪 185.137.164.17

🇧🇷 177.159.150.111

🇺🇸 136.117.195.252

🇺🇸 66.240.236.116

🇺🇸 65.49.1.26

🇱🇹 62.60.130.128

🇱🇹 45.227.254.170

🇷🇺 5.3.149.246

🇮🇶 204.157.178.138

🇩🇪 194.88.98.90

🇩🇪 185.137.164.13

🇮🇶 185.122.255.190

🇮🇶 185.106.29.190