JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.186.173

66.132.186.173 was found in our database!

This IP was reported 2,181 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	173.186.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.186.173

Whois 66.132.186.173

IP Abuse Reports for 66.132.186.173:

This IP address has been reported a total of 2,181 times from 478 distinct sources. 66.132.186.173 was first reported on March 21st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇴 tmiland	2026-06-30 22:17:51 (3 hours ago)	Suricata Detected 6 attacks from 66.132.186.173.; ET DROP Dshield Block Listed Source group 1; IP: 6 ... show more Suricata Detected 6 attacks from 66.132.186.173.; ET DROP Dshield Block Listed Source group 1; IP: 66.132.186.173; Ports: 21602; Direction: to_server; Trigger: DROP; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇧🇬 MazenHost	2026-06-30 22:17:43 (3 hours ago)	1782857863 - 07/01/2026 01:17:43 Host: 66.132.186.173/66.132.186.173 Port: 2000 TCP Blocked ...	Port Scan
🇦🇺 LiftUp Hosting	2026-06-30 21:52:04 (3 hours ago)	Honeypot hit: Empty payload (likely service probe); 51059 [1] TCP	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-30 20:34:53 (5 hours ago)	Honeypot hit: Unauthorized traffic (10 bytes of payload); 20546 [2] TCP	Port Scan
🇲🇹 neilcaruana	2026-06-30 19:38:19 (6 hours ago)	Sentinel detected an attack on port [137]	Hacking
🇨🇦 celestialcity	2026-06-30 17:44:53 (8 hours ago)	Blocked by UFW on celestialcityna [25598/tcp] \| SPT: 60542 \| TTL: 49 \| LEN: 60 \| TOS: 0x08 • Reporte ... show more Blocked by UFW on celestialcityna [25598/tcp] \| SPT: 60542 \| TTL: 49 \| LEN: 60 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Brian Minton	2026-06-30 17:43:31 (8 hours ago)	2026-06-30T12:43:21.601759-05:00 lab dovecot: imap-login: Disconnected: Connection closed (no auth a ... show more 2026-06-30T12:43:21.601759-05:00 lab dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=66.132.186.173, lip=199.181.238.151, TLS: Connection closed, session=<j+tuHHxVoJRChLqt> 2026-06-30T12:43:26.341816-05:00 lab dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=66.132.186.173, lip=199.181.238.151, session=<LUC3HHxVjk5ChLqt> 2026-06-30T12:43:27.813124-05:00 lab dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=66.132.186.173, lip=199.181.238.151, session=<RLPNHHxVlk5ChLqt> 2026-06-30T12:43:28.886372-05:00 lab dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=66.132.186.173, lip=199.181.238.151, session=<gBPeHHxVmk5ChLqt> 2026-06-30T12:43:30.534143-05:00 lab dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=66.132.186.173, lip=199 ... show less	Brute-Force
🇩🇪 dispaisyenterprises	2026-06-30 17:27:51 (8 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 50268 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 50268 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 security.rdmc.fr	2026-06-30 17:25:38 (8 hours ago)	Port Scan Attack proto:TCP src:16430 dst:21	Port Scan
🇨🇭 pingusurmars	2026-06-30 16:57:07 (8 hours ago)	Blocked by UFW on amperetwo [25/tcp] Source port: 57514 TTL: 59 Packet length: 60 TOS: 0x00 This re ... show more Blocked by UFW on amperetwo [25/tcp] Source port: 57514 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-06-30 16:35:59 (9 hours ago)	SRC=66.132.186.173, PROTO=TCP, SPT=24332, DPT=3128 SRC=66.132.186.173, PROTO=TCP, SPT=24332, DPT=312 ... show more SRC=66.132.186.173, PROTO=TCP, SPT=24332, DPT=3128 SRC=66.132.186.173, PROTO=TCP, SPT=24332, DPT=3128 SRC=66.132.186.173, PROTO=TCP, SPT=24378, DPT=3128 SRC=66.132.186.173, PROTO=TCP, SPT=24378, DPT=3128 SRC=66.132.186.173, PROTO=TCP, SPT=24392, DPT=3128 show less	Port Scan
🇳🇴 tmiland	2026-06-30 16:07:56 (9 hours ago)	Suricata Detected 4 attacks from 66.132.186.173.; ET DROP Dshield Block Listed Source group 1; IP: 6 ... show more Suricata Detected 4 attacks from 66.132.186.173.; ET DROP Dshield Block Listed Source group 1; IP: 66.132.186.173; Ports: 60394; Direction: to_server; Trigger: DROP; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇧🇷 diego	2026-06-30 15:51:28 (9 hours ago)	[rede-168-134] 06/30/2026-12:51:28.639500, 66.132.186.173, Protocol: 6, ET DROP Dshield Block Listed ... show more [rede-168-134] 06/30/2026-12:51:28.639500, 66.132.186.173, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇭🇰 sandra361	2026-06-30 15:00:22 (10 hours ago)	Port scan detected: 23 attempts across 1 ports (20546). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=66.13 ... show more Port scan detected: 23 attempts across 1 ports (20546). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=66.132.186.173 LEN=60 TOS=0x14 PREC=0x00 TTL=54 ID=31467 DF PROTO=TCP SPT=58968 DPT=20546 WINDOW=21900 RES=0x00 SYN URGP=0 show less	Port Scan
🇫🇷 Fasetech	2026-06-30 13:40:10 (12 hours ago)	SecLedge detected suspicious activity. Score: 222.96. Sensor: T-Pot.	Brute-Force Web App Attack

Showing 1 to 15 of 2181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.247.194

🇫🇮 147.185.133.211

🇸🇮 102.220.160.47

🇹🇷 94.154.43.57

🇱🇹 81.30.98.49

🇺🇸 73.216.174.234

🇺🇸 66.240.223.240

🇺🇸 64.62.156.31

🇳🇱 45.153.34.43

🇬🇧 2.57.17.95

🇺🇸 195.184.76.180

🇺🇸 173.239.254.63

🇺🇸 170.187.165.130

🇨🇳 113.201.207.134

🇪🇪 109.206.241.199

🇱🇹 77.90.185.62

🇪🇸 68.221.67.111

🇸🇬 47.84.111.19

🇨🇳 36.106.167.211

🇺🇸 20.65.194.108