JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.186.189

66.132.186.189 was found in our database!

This IP was reported 1,745 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	189.186.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.186.189

Whois 66.132.186.189

IP Abuse Reports for 66.132.186.189:

This IP address has been reported a total of 1,745 times from 395 distinct sources. 66.132.186.189 was first reported on March 21st 2026, and the most recent report was 29 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Security_Whaller	2026-03-28 17:03:35 (2 months ago)	Malicious activity detected on Honeypot.	Brute-Force Hacking Web App Attack
🇵🇱 nfsec.pl	2026-03-28 16:33:34 (2 months ago)	Detected: TCP scan on port: 21 with flags: SYN	Port Scan
🇦🇹 SchiWaGoA	2026-03-28 14:37:33 (2 months ago)	This IP was detected by CrowdSec trigger from crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
Anonymous	2026-03-28 13:53:34 (2 months ago)	Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.ce ... show more Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) show less	Web App Attack
🇺🇸 Szymekk	2026-03-28 11:45:16 (2 months ago)	Fail2Ban: SSH brute force attempt [srv05]	Brute-Force SSH
🇺🇸 ISPLtd	2026-03-28 08:11:51 (2 months ago)	Mar 28 05:11:49 66.132.186.189 TCP SPT=41364 DPT=4007 SYN Mar 28 05:11:50 66.132.186.189 TCP SPT=413 ... show more Mar 28 05:11:49 66.132.186.189 TCP SPT=41364 DPT=4007 SYN Mar 28 05:11:50 66.132.186.189 TCP SPT=41390 DPT=4007 SYN Mar 28 05:11:51 66.132.186.189 TCP SPT=41390 DPT=4007 ... show less	Port Scan
🇺🇸 rjdefrancisco	2026-03-28 07:08:28 (2 months ago)	Unwanted traffic detected by honeypot on March 27, 2026: port scans (1 port 22 scan).	Port Scan Brute-Force SSH
🇩🇪 ValtonTahiri	2026-03-28 06:37:25 (2 months ago)	Honeypot hit: Unauthorized traffic on 27017/mongod	Port Scan
🇫🇷 sthoyer.de	2026-03-28 06:35:43 (2 months ago)	Mar 28 07:35:41 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Mar 28 07:35:41 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=22279 DF PROTO=TCP SPT=7976 DPT=3100 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 28 07:35:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=22280 DF PROTO=TCP SPT=7976 DPT=3100 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 28 07:35:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=43816 DF PROTO=TCP SPT=30718 DPT=3100 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 gbzret4d	2026-03-28 06:08:17 (2 months ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 6699 [1] TCP	Port Scan
🇺🇸 ISPLtd	2026-03-27 23:24:49 (2 months ago)	Mar 27 20:24:47 66.132.186.189 TCP SPT=19588 DPT=5443 SYN Mar 27 20:24:48 66.132.186.189 TCP SPT=196 ... show more Mar 27 20:24:47 66.132.186.189 TCP SPT=19588 DPT=5443 SYN Mar 27 20:24:48 66.132.186.189 TCP SPT=19608 DPT=5443 SYN Mar 27 20:24:49 66.132.186.189 TCP SPT=19648 DPT=5443 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-03-27 22:38:48 (2 months ago)	Mar 27 23:38:44 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Mar 27 23:38:44 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=22674 DF PROTO=TCP SPT=55726 DPT=110 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 27 23:38:46 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=22675 DF PROTO=TCP SPT=55726 DPT=110 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 27 23:38:46 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=22675 DF PROTO=TCP SPT=55726 DPT=110 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 27 23:38:48 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=22676 DF PROTO=TCP SPT=55726 DPT=110 WINDOW ... show less	Port Scan
🇷🇺 DZBOT	2026-03-27 19:12:47 (2 months ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇯🇵 S.O.B.A. Dev.	2026-03-27 18:46:03 (2 months ago)	Persistent port scanning or vulnerability scanning	SQL Injection Port Scan
🇹🇭 Sawasdee	2026-03-27 18:18:15 (2 months ago)	SSH break in attempt ...	SSH

Showing 1621 to 1635 of 1745 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.89.138.40

🇰🇿 212.19.134.75

🇨🇳 116.179.32.66

🇮🇩 114.141.59.195

🇸🇬 103.250.11.116

🇺🇸 91.230.168.109

🇸🇬 47.82.10.30

🇲🇽 45.167.93.80

🇨🇳 221.13.93.118

🇹🇼 198.235.24.70

🇧🇷 177.11.17.179

🇳🇱 176.65.149.50

🇸🇦 167.100.163.40

🇨🇮 160.120.191.213

🇺🇸 150.107.38.68

🇨🇳 120.246.18.192

🇨🇳 119.255.245.44

🇺🇸 74.125.17.246

🇮🇳 59.98.124.42

🇱🇹 45.227.254.170