JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.108

66.132.195.108 was found in our database!

This IP was reported 1,519 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	108.195.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.108

Whois 66.132.195.108

IP Abuse Reports for 66.132.195.108:

This IP address has been reported a total of 1,519 times from 419 distinct sources. 66.132.195.108 was first reported on March 23rd 2026, and the most recent report was 28 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 pingusurmars	2026-05-31 06:45:39 (3 days ago)	Blocked by UFW on amperetwo [23000/tcp] Source port: 41466 TTL: 59 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [23000/tcp] Source port: 41466 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 hermawan	2026-05-31 06:20:05 (3 days ago)	1780208396.742151 66.132.195.108 103.166.156.58 21900_2-4-8-1-3_1460_10 2026-05-31 13:19:56 WIB ...	Email Spam Hacking
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-31 06:02:58 (3 days ago)	Honeypot hit: Empty payload (likely service probe); 49668 [1] TCP	Port Scan
🇺🇸 drewf.ink	2026-05-31 04:35:42 (3 days ago)	[04:35] Port scanning. Port(s) scanned: TCP/993, TCP/3306, TCP/6443, TCP/143, TCP/8080, TCP/6001, TC ... show more [04:35] Port scanning. Port(s) scanned: TCP/993, TCP/3306, TCP/6443, TCP/143, TCP/8080, TCP/6001, TCP/1433, TCP/25 show less	Port Scan
🇧🇬 MazenHost	2026-05-31 04:09:30 (3 days ago)	1780200569 - 05/31/2026 07:09:29 Host: 66.132.195.108/66.132.195.108 Port: 111 TCP Blocked ...	Port Scan
🇧🇬 MazenHost	2026-05-31 03:18:54 (3 days ago)	1780197533 - 05/31/2026 06:18:53 Host: 66.132.195.108/66.132.195.108 Port: 111 TCP Blocked ...	Port Scan
🇧🇬 MazenHost	2026-05-31 01:21:11 (4 days ago)	1780190470 - 05/31/2026 04:21:10 Host: 66.132.195.108/66.132.195.108 Port: 111 TCP Blocked ...	Port Scan
🇦🇹 Pingger Shikkoken	2026-05-31 01:07:39 (4 days ago)	2026-05-31T01:07:39+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-05-31T01:07:39+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=66.132.195.108 DST=10.1.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=52520 DF PROTO=TCP SPT=6028 DPT=993 WINDOW=21900 RES=0x00 SYN URGP=0 2026-05-31T01:07:40+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=66.132.195.108 DST=10.1.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=52521 DF PROTO=TCP SPT=6028 DPT=993 WINDOW=21900 RES=0x00 SYN URGP=0 2026-05-31T01:07:42+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=66.132.195.108 DST=10.1.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=52522 DF PROTO=TCP SPT=6028 DPT=993 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Hacking Brute-Force
Anonymous	2026-05-31 00:47:32 (4 days ago)	Firewall - Suricata IDS [Priority 2 - High]: ET DROP Dshield Block Listed Source group 1	Port Scan Hacking
🇩🇪 cloudmax	2026-05-31 00:06:47 (4 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
Anonymous	2026-05-30 21:54:51 (4 days ago)	Reported from Nginx log analysis 19. Log: 66.132.195.108 - - [30/May/2026:xx:xx:xx 0200] "GET / HTT ... show more Reported from Nginx log analysis 19. Log: 66.132.195.108 - - [30/May/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; https://about.censys.io/)" "-" "US United States -" "AS398324" "Censys, Inc." show less	Port Scan Brute-Force SSH
🇺🇸 mutebot.net	2026-05-30 21:15:38 (4 days ago)	SRC=66.132.195.108, PROTO=TCP, SPT=55150, DPT=465 SRC=66.132.195.108, PROTO=TCP, SPT=55150, DPT=465 ... show more SRC=66.132.195.108, PROTO=TCP, SPT=55150, DPT=465 SRC=66.132.195.108, PROTO=TCP, SPT=55150, DPT=465 SRC=66.132.195.108, PROTO=TCP, SPT=55150, DPT=465 SRC=66.132.195.108, PROTO=TCP, SPT=55150, DPT=465 SRC=66.132.195.108, PROTO=TCP, SPT=55150, DPT=465 show less	Port Scan
🇫🇷 evvsk	2026-05-30 21:11:41 (4 days ago)	5678/tcp	Port Scan
🇩🇪 fleckenbase	2026-05-30 19:16:39 (4 days ago)	mosquitto-auth ...	Hacking
🇳🇱 rmvanderspek	2026-05-30 19:15:00 (4 days ago)	MikroTik Winbox (8291) scan detected.	Port Scan

Showing 76 to 90 of 1519 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 52.167.144.172

🇺🇸 45.79.205.116

🇬🇧 35.203.211.34

🇰🇷 211.216.58.204

🇮🇹 194.60.212.183

🇺🇸 129.121.96.159

🇨🇳 111.225.148.191

🇫🇷 91.196.152.183

🇫🇷 91.196.152.32

🇺🇸 82.29.157.149

🇹🇷 78.187.230.168

🇺🇸 64.62.156.32

🇺🇸 50.62.183.144

🇺🇸 48.214.144.125

🇸🇬 45.78.198.228

🇺🇸 20.65.202.2

🇺🇸 194.39.123.37

🇺🇸 192.3.218.12

🇺🇸 185.255.100.14

🇺🇸 162.216.150.194