JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.172.247

66.132.172.247 was found in our database!

This IP was reported 1,249 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	247.172.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.172.247

Whois 66.132.172.247

IP Abuse Reports for 66.132.172.247:

This IP address has been reported a total of 1,249 times from 75 distinct sources. 66.132.172.247 was first reported on March 20th 2026, and the most recent report was 27 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-06-04 08:55:43 (27 minutes ago)	[rede-arem1] 06/04/2026-05:55:43.235644, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Listed ... show more [rede-arem1] 06/04/2026-05:55:43.235644, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇩🇪 Admins@FBN	2026-06-04 07:52:58 (1 hour ago)	FW-PortScan: Traffic Blocked srcport=46792 dstport=30581	Port Scan
🇧🇷 diego	2026-06-04 07:43:40 (1 hour ago)	[rede-164-29] 06/04/2026-04:43:39.777637, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Listed ... show more [rede-164-29] 06/04/2026-04:43:39.777637, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇺🇸 rellim.com	2026-06-04 06:30:15 (2 hours ago)	Jun 3 12:28:44 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jun 3 12:28:44 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=66.132.172.247 DST=204.17.205.254 LEN=48 TOS=0x00 PREC=0x00 TTL=40 ID=15745 PROTO=UDP SPT=2112 DPT=52532 LEN=28 Jun 3 15:42:30 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=66.132.172.247 DST=204.17.205.254 LEN=30 TOS=0x00 PREC=0x00 TTL=40 ID=29439 PROTO=UDP SPT=4665 DPT=37012 LEN=10 Jun 3 23:30:15 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=66.132.172.247 DST=204.17.205.254 LEN=30 TOS=0x00 PREC=0x00 TTL=39 ID=61697 PROTO=UDP SPT=30737 DPT=26392 LEN=10 ... show less	Port Scan
🇧🇷 SSP	2026-06-04 05:44:06 (3 hours ago)	Automatic firewall report. Port scan or unauthorized connection attempt detected.	Web App Attack
🇩🇪 Admins@FBN	2026-06-04 05:03:16 (4 hours ago)	FW-PortScan: Traffic Blocked srcport=4361 dstport=36017	Port Scan
🇩🇪 ValtonTahiri	2026-06-04 04:33:46 (4 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=66.132.172.247; proto=UDP; source_port=63280; target_port=57585 show less	Port Scan
🇩🇪 Admins@FBN	2026-06-04 04:05:15 (5 hours ago)	FW-PortScan: Traffic Blocked srcport=13738 dstport=1759	Port Scan
🇳🇴 tmiland	2026-06-04 02:43:12 (6 hours ago)	Suricata Detected 198 attacks from 66.132.172.247.; ET DROP Dshield Block Listed Source group 1; IP: ... show more Suricata Detected 198 attacks from 66.132.172.247.; ET DROP Dshield Block Listed Source group 1; IP: 66.132.172.247; Ports: 54704; Direction: to_server; Trigger: DROP; Category: Misc Attack; Severity: 2 show less	Port Scan
🇧🇷 diego	2026-06-04 01:56:32 (7 hours ago)	[rede-arem1] 06/03/2026-22:56:32.378766, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Listed ... show more [rede-arem1] 06/03/2026-22:56:32.378766, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇳🇴 tmiland	2026-06-04 01:18:54 (8 hours ago)	Suricata Detected 196 attacks from 66.132.172.247.; ET DROP Dshield Block Listed Source group 1; IP: ... show more Suricata Detected 196 attacks from 66.132.172.247.; ET DROP Dshield Block Listed Source group 1; IP: 66.132.172.247; Ports: 62818; Direction: to_server; Trigger: DROP; Category: Misc Attack; Severity: 2 show less	Port Scan
🇬🇧 andypiper	2026-06-04 01:02:37 (8 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇧🇷 diego	2026-06-04 00:55:37 (8 hours ago)	[rede-168-134] 06/03/2026-21:55:36.847283, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Liste ... show more [rede-168-134] 06/03/2026-21:55:36.847283, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇧🇷 diego	2026-06-04 00:36:30 (8 hours ago)	[rede-164-29] 06/03/2026-21:36:30.126387, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Listed ... show more [rede-164-29] 06/03/2026-21:36:30.126387, 66.132.172.247, Protocol: 17, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇨🇭 SOC [GOLINE SA]	2026-06-04 00:19:47 (9 hours ago)	IDS Alert: ET DROP Dshield Block Listed Source group 1 === ATTACK === Signature: ET DROP Dshield Blo ... show more IDS Alert: ET DROP Dshield Block Listed Source group 1 === ATTACK === Signature: ET DROP Dshield Block Listed Source group 1 \| SID: 2402000 \| Severity: 2 \| Category: Misc Attack === SOURCE === IP: 66.132.172.247 (IPv4) \| Port: 12473 \| Country: United States \| ISP: CENSY \| rDNS: 247.172.132.66.censys-scanner.com === TARGET === Host: insightvm.goline.ch \| IP: 185.54.80.24 \| Port: 41232 \| Protocol: UDP \| App: failed === RESPONSE === Time: 2026-06-04 02:19:47 \| Action: Blocked show less	Exploited Host Hacking

Showing 1 to 15 of 1249 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.178.95

🇩🇪 213.209.159.236

🇮🇩 182.253.50.139

🇭🇰 123.58.212.28

🇸🇬 114.119.137.80

🇨🇳 106.12.58.78

🇰🇷 61.72.145.38

🇺🇸 54.83.120.131

🇺🇸 47.42.131.93

🇺🇸 8.34.210.45

🇭🇰 223.197.248.209

🇷🇺 195.2.67.184

🇮🇳 103.181.5.124

🇯🇵 101.36.105.94

🇬🇧 89.37.172.134

🇬🇧 35.203.211.120

🇹🇭 125.26.40.82

🇸🇬 114.119.136.221

🇮🇳 103.249.82.242

🇧🇬 79.124.58.138