JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.107

66.132.195.107 was found in our database!

This IP was reported 2,429 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	107.195.132.66.censys-scanner.com
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.107

Whois 66.132.195.107

IP Abuse Reports for 66.132.195.107:

This IP address has been reported a total of 2,429 times from 537 distinct sources. 66.132.195.107 was first reported on March 23rd 2026, and the most recent report was 36 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mccsoft.io	2026-07-20 09:53:26 (36 minutes ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇩🇪 london2038.com	2026-07-20 08:50:24 (1 hour ago)	Malformed or malicious web request 66.132.195.107 - - [20/Jul/2026:10:50:13 +0200] "PRI * HTTP/2.0" ... show more Malformed or malicious web request 66.132.195.107 - - [20/Jul/2026:10:50:13 +0200] "PRI * HTTP/2.0" 400 157 "-" "-" show less	Hacking Web App Attack
🇺🇸 ras07	2026-07-20 08:00:17 (2 hours ago)	Brute force SSH login attempts.	Brute-Force SSH
🇧🇷 diego	2026-07-20 07:53:48 (2 hours ago)	[probe-44-49] 2026-07-20 07:34:27, Client: 66.132.195.107, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-07-20 07:34:27, Client: 66.132.195.107, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-07-20 07:12:10 (3 hours ago)	[rede-44-49] 07/20/2026-04:12:10.130665, 66.132.195.107, Protocol: 6, ET DROP Dshield Block Listed S ... show more [rede-44-49] 07/20/2026-04:12:10.130665, 66.132.195.107, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇧🇷 SSP	2026-07-20 06:20:37 (4 hours ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences: 10 Unique Ports: 3 Destination Ports: 2022, 31210, 8006 First Seen: 2026-07-12 15:35 UTC Last Seen: 2026-07-20 06:20 UTC show less	Port Scan
🇧🇷 diego	2026-07-20 06:14:12 (4 hours ago)	[rede-arem1] 07/20/2026-03:14:11.967277, 66.132.195.107, Protocol: 6, ET DROP Dshield Block Listed S ... show more [rede-arem1] 07/20/2026-03:14:11.967277, 66.132.195.107, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
Anonymous	2026-07-20 05:11:03 (5 hours ago)	Port Scan detected from 66.132.195.107 (US/United States/107.195.132.66.censys-scanner.com). 5 hit ... show more Port Scan detected from 66.132.195.107 (US/United States/107.195.132.66.censys-scanner.com). 5 hits in the last 5 seconds show less	Brute-Force Port Scan
🇬🇧 sandra361	2026-07-20 04:16:33 (6 hours ago)	Port scan detected: 26 attempts across 1 port (10503). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=66 ... show more Port scan detected: 26 attempts across 1 port (10503). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=66.132.195.107 LEN=81 TOS=0x00 PREC=0x00 TTL=47 ID=59706 DF PROTO=TCP SPT=54760 DPT=10503 WINDOW=21900 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇫🇷 EvoX	2026-07-20 03:34:56 (6 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: Unauthorized mysqld/tcp traffic (dst port 3306, src port 29950) agains ... show more 🛡️ Honeypot [bsts-tpot-hive]: Unauthorized mysqld/tcp traffic (dst port 3306, src port 29950) against a passive decoy service with no legitimate function, consistent with automated scanning. show less	Port Scan
🇺🇸 HamSammich	2026-07-20 01:44:53 (8 hours ago)	Automated sensor: 2 port 53 connection/probe attempts over the last 24h (latest 2026-07-20T01:44Z).	Port Scan Brute-Force
🇨🇭 SOC [GOLINE SA]	2026-07-20 01:25:35 (9 hours ago)	IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 106 === ATTACK === Signature: ... show more IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 106 === ATTACK === Signature: ET CINS Active Threat Intelligence Poor Reputation IP group 106 \| SID: 2403405 \| Severity: 2 \| Category: Misc Attack === SOURCE === IP: 66.132.195.107 (IPv4) \| Port: 44392 \| Country: United States \| ISP: CENSY \| rDNS: 107.195.132.66.censys-scanner.com === TARGET === Host: insightvm.goline.ch \| IP: 185.54.80.24 \| Port: 60413 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-07-20 03:25:35 \| Action: Blocked show less	Exploited Host Hacking
🇫🇷 dusfor72	2026-07-19 20:02:52 (14 hours ago)	aggressive portscan ...	Port Scan
Anonymous	2026-07-19 19:35:05 (14 hours ago)	attempts to hack passwords	Port Scan Brute-Force
🇫🇷 GoodOldTOS	2026-07-19 18:59:00 (15 hours ago)	Connection to MSSQL honeypot	Hacking

Showing 1 to 15 of 2429 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.119.239.217

🇺🇸 69.49.246.176

🇮🇩 69.5.0.120

🇮🇳 68.233.116.124

🇺🇸 67.207.93.64

🇺🇸 67.205.177.48

🇭🇰 66.232.15.73

🇺🇸 66.179.209.172

🇺🇸 66.94.113.255

🇦🇺 65.254.93.170

🇺🇸 65.49.139.223

🇮🇳 64.227.169.171

🇺🇸 64.227.90.185

🇩🇪 64.226.108.164

🇺🇸 64.225.23.125

🇱🇺 64.89.160.253

🇳🇬 62.173.38.229

🇺🇸 62.146.173.198

🇳🇱 62.60.235.162

🇩🇪 62.54.176.203