JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.172.226

66.132.172.226 was found in our database!

This IP was reported 5,443 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	226.172.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.172.226

Whois 66.132.172.226

IP Abuse Reports for 66.132.172.226:

This IP address has been reported a total of 5,443 times from 215 distinct sources. 66.132.172.226 was first reported on March 20th 2026, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ScanThe.Net	2026-07-02 18:09:29 (18 minutes ago)	ID: 4771478989 \| PORT: 4730 \| https://66-132-172-226.scanthe.net	Port Scan
🇧🇷 SSP	2026-07-02 16:25:09 (2 hours ago)	Automatically generated from firewall_v2 logs on SID:SVSPNC Category: Port Scan Occurrences: 20 U ... show more Automatically generated from firewall_v2 logs on SID:SVSPNC Category: Port Scan Occurrences: 20 Unique Ports: 37 Destination Ports: 2087, 8020, 9200, 16992, 25565, 14265, 53282, 8808, 5902, 4242, 20548, 20001, 12322, 26257, 2000, 788, 10001, 8545, 44819, 9999, 10260, 222, 8088, 636, 37215, 1801, 5000, 1200, 55615, 22222, 587, 16993, 2096, 14000, 9600, 5060, 51200 First Seen: 2026-06-19 06:05 UTC Last Seen: 2026-07-02 16:25 UTC show less	Port Scan
🇧🇷 diego	2026-07-02 15:58:41 (2 hours ago)	[rede-top188] 07/02/2026-12:58:41.473258, 66.132.172.226, Protocol: 17, ET DROP Dshield Block Listed ... show more [rede-top188] 07/02/2026-12:58:41.473258, 66.132.172.226, Protocol: 17, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇺🇸 thororen	2026-07-02 15:22:23 (3 hours ago)	Blocked by UFW [2456/tcp] Source port: 56910 TTL: 57 Packet length: 60 TOS: 0x00 This report was ge ... show more Blocked by UFW [2456/tcp] Source port: 56910 TTL: 57 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇴 tmiland	2026-07-02 14:54:17 (3 hours ago)	Suricata Detected 260 attacks from 66.132.172.226.; ET DROP Dshield Block Listed Source group 1; IP: ... show more Suricata Detected 260 attacks from 66.132.172.226.; ET DROP Dshield Block Listed Source group 1; IP: 66.132.172.226; Ports: 10341; Direction: to_server; Trigger: DROP; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇫🇮 sonot	2026-07-02 14:10:59 (4 hours ago)	Blocked by UFW on mail [8082/tcp] \| SPT: 44384 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [8082/tcp] \| SPT: 44384 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-07-02 13:33:43 (4 hours ago)	[rede-top188] 07/02/2026-10:33:43.239605, 66.132.172.226, Protocol: 6, ET DROP Dshield Block Listed ... show more [rede-top188] 07/02/2026-10:33:43.239605, 66.132.172.226, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇨🇭 SOC [GOLINE SA]	2026-07-02 11:40:34 (6 hours ago)	IDS Alert: 🐾 - 🚨 VxWorks WDB Agent 👀 Version checked over RPC 🥷 - T1592.003 === ATTACK === Signature ... show more IDS Alert: 🐾 - 🚨 VxWorks WDB Agent 👀 Version checked over RPC 🥷 - T1592.003 === ATTACK === Signature: 🐾 - 🚨 VxWorks WDB Agent 👀 Version checked over RPC 🥷 - T1592.003 \| SID: 3321483 \| Severity: 1 \| Category: Targeted Malicious Activity was Detected === SOURCE === IP: 66.132.172.226 (IPv4) \| Port: 55717 \| Country: United States \| ISP: CENSY \| rDNS: 226.172.132.66.censys-scanner.com === TARGET === Host: wireguard.goline.ch \| IP: 185.54.80.7 \| Port: 17184 \| Protocol: UDP \| App: failed === RESPONSE === Time: 2026-07-02 13:40:34 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇩🇪 ValtonTahiri	2026-07-02 11:27:32 (7 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=66.132.172.226; proto=UDP; source_port=8542; target_port=17185 show less	Port Scan
Anonymous	2026-07-02 09:46:23 (8 hours ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-07-02 08:10:52 (10 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/global-exclusion-high.	Hacking
🇷🇸 Smel	2026-07-02 07:40:12 (10 hours ago)	SIP/5060 Probe, Scan, BF, Hack -	Fraud VoIP Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-07-02 07:38:50 (10 hours ago)	tcp ports: 2086,110 (3 or more attempts)	Port Scan
Anonymous	2026-07-02 07:34:13 (10 hours ago)	2026-07-02T08:34:12.247051+01:00 vps kernel: [44717790.795067] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-07-02T08:34:12.247051+01:00 vps kernel: [44717790.795067] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=66.132.172.226 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=3698 PROTO=TCP SPT=31393 DPT=18789 WINDOW=42340 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 Fasetech	2026-07-02 07:34:09 (10 hours ago)	SecLedge detected suspicious activity. Score: 148.56. Sensor: T-Pot.	Brute-Force Web App Attack

Showing 1 to 15 of 5443 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.129.37.92

🇹🇼 198.235.24.125

🇻🇳 171.243.148.97

🇩🇪 164.90.236.107

🇭🇰 104.208.87.205

🇻🇳 103.189.208.13

🇷🇴 80.94.92.120

🇮🇶 65.20.160.107

🇫🇷 51.75.141.245

🇺🇸 2604:a880:0:202a::b41:8000

🇧🇷 187.94.25.205

🇵🇰 117.134.199.6

🇮🇳 80.225.206.1

🇳🇱 45.148.10.157

🇬🇧 35.203.211.186

🇨🇳 14.103.127.204

🇪🇸 212.30.33.248

🇺🇸 144.126.223.221

🇨🇳 122.224.164.194

🇭🇰 119.8.125.214