JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.186.189

66.132.186.189 was found in our database!

This IP was reported 1,745 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	189.186.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.186.189

Whois 66.132.186.189

IP Abuse Reports for 66.132.186.189:

This IP address has been reported a total of 1,745 times from 395 distinct sources. 66.132.186.189 was first reported on March 21st 2026, and the most recent report was 29 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-03-25 16:44:12 (2 months ago)	Port Scan ...	Port Scan
🇫🇮 6kilowatti	2026-03-25 16:38:06 (2 months ago)	2026-03-25T18:38:05.574490+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-03-25T18:38:05.574490+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=66.132.186.189 DST=5.61.88.83 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=36812 DF PROTO=TCP SPT=46856 DPT=8000 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 GoodOldTOS	2026-03-25 10:38:15 (2 months ago)	Connection to SSHTarpit	Hacking SSH
🇩🇪 Moritz	2026-03-25 10:23:42 (2 months ago)	Honeypot hit: Empty payload (likely service probe); 29103 [1] TCP	Port Scan
🇦🇺 trentwiles.com	2026-03-25 07:53:55 (2 months ago)	Unauthorized connection attempt detected from IP address 66.132.186.189 to port 5090 [SYD]	Port Scan
🇫🇷 sthoyer.de	2026-03-25 06:41:48 (2 months ago)	Mar 25 07:41:45 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Mar 25 07:41:45 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=32825 DF PROTO=TCP SPT=20070 DPT=22000 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 25 07:41:46 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=32826 DF PROTO=TCP SPT=20070 DPT=22000 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 25 07:41:46 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=23648 DF PROTO=TCP SPT=20074 DPT=22000 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 25 07:41:47 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.186.189 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=23649 DF PROTO=TCP SPT=20074 DPT=2200 ... show less	Port Scan
🇨🇭 pingusurmars	2026-03-25 06:05:48 (2 months ago)	Blocked by UFW on amperetwo [21119/tcp] Source port: 64078 TTL: 59 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [21119/tcp] Source port: 64078 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-25 05:11:19 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇬🇧 andypiper	2026-03-25 02:02:50 (2 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 shabi	2026-03-25 01:35:13 (2 months ago)	UFW Blocked [143/TCP] Source: 66.132.186.189:36924 TTL: 54 Lenth: 60 TOS: 0x08	Port Scan
🇨🇳 ThreatBook.io	2026-03-25 01:10:19 (2 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/66.132.186.189 2026-03 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/66.132.186.189 2026-03-24 00:51:13 * 2026-03-24 00:52:09 /sitemap.xml 2026-03-24 00:51:19 /favicon.ico 2026-03-24 00:51:09 / show less	Web App Attack
🇺🇸 ISPLtd	2026-03-25 00:34:38 (2 months ago)	Mar 24 18:34:37 66.132.186.189 TCP SPT=25806 DPT=22 SYN ...	Port Scan SSH
🇧🇷 diego	2026-03-25 00:28:56 (2 months ago)	[rede-top188] 03/24/2026-21:28:56.795042, 66.132.186.189, Protocol: 6, ET DROP Dshield Block Listed ... show more [rede-top188] 03/24/2026-21:28:56.795042, 66.132.186.189, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇺🇸 drewf.ink	2026-03-25 00:18:56 (2 months ago)	[00:18] Port scanning. Port(s) scanned: TCP/110	Port Scan
🇬🇧 gbzret4d	2026-03-25 00:04:50 (2 months ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 22929 [1] TCP	Port Scan

Showing 1681 to 1695 of 1745 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.89.138.40

🇰🇿 212.19.134.75

🇨🇳 116.179.32.66

🇮🇩 114.141.59.195

🇸🇬 103.250.11.116

🇺🇸 91.230.168.109

🇸🇬 47.82.10.30

🇲🇽 45.167.93.80

🇨🇳 221.13.93.118

🇹🇼 198.235.24.70

🇧🇷 177.11.17.179

🇳🇱 176.65.149.50

🇸🇦 167.100.163.40

🇨🇮 160.120.191.213

🇺🇸 150.107.38.68

🇨🇳 120.246.18.192

🇨🇳 119.255.245.44

🇺🇸 74.125.17.246

🇮🇳 59.98.124.42

🇱🇹 45.227.254.170