JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.115

66.132.195.115 was found in our database!

This IP was reported 2,149 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	115.195.132.66.censys-scanner.com
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.115

Whois 66.132.195.115

IP Abuse Reports for 66.132.195.115:

This IP address has been reported a total of 2,149 times from 495 distinct sources. 66.132.195.115 was first reported on March 23rd 2026, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-07-13 15:31:07 (10 minutes ago)	[MonJul1317:31:04.0825512026][security2:error][pid3040079:tid3040458][client66.132.195.115:0]ModSecu ... show more [MonJul1317:31:04.0825512026][security2:error][pid3040079:tid3040458][client66.132.195.115:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.carolin-mizio.ch\"][uri\"/\"][unique_id\"alUEuFB79BoiaF_uxiqz1wAAAQc\"] show less	Hacking Web App Attack
🇩🇪 sandra361	2026-07-13 14:28:01 (1 hour ago)	Port scan detected: 8 attempts across 1 port (11300). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=66.132. ... show more Port scan detected: 8 attempts across 1 port (11300). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=66.132.195.115 LEN=47 TOS=0x00 PREC=0x00 TTL=60 ID=10939 DF PROTO=TCP SPT=44494 DPT=11300 WINDOW=21900 RES=0x00 ACK PSH URGP=0 show less	Port Scan
Anonymous	2026-07-13 13:10:19 (2 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇫🇮 notelseit	2026-07-13 11:37:18 (4 hours ago)	2026-07-13T13:37:04.850053+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth ... show more 2026-07-13T13:37:04.850053+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 4 secs): user=<>, rip=66.132.195.115, lip=65.21.131.50, TLS: Connection closed, session=<1S50gnxWXEpChMNz> 2026-07-13T13:37:12.320867+02:00 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=66.132.195.115, lip=65.21.131.50, session=<vC3mgnxWhGlChMNz> 2026-07-13T13:37:13.877768+02:00 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=66.132.195.115, lip=65.21.131.50, session=<6O/9gnxWnGlChMNz> 2026-07-13T13:37:16.238014+02:00 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=66.132.195.115, lip=65.21.131.50, session=<IvMhg3xWumlChMNz> 2026-07-13T13:37:18.306444+02:00 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=66.132.195.115, lip=65.21.131. ... show less	Brute-Force Email Spam
🇬🇧 sonot	2026-07-13 10:43:48 (4 hours ago)	Blocked by UFW on tunneluk01 [110/tcp] \| SPT: 43764 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: g ... show more Blocked by UFW on tunneluk01 [110/tcp] \| SPT: 43764 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 zupan	2026-07-13 10:07:53 (5 hours ago)	Blocked by UFW on vps [5357/tcp] \| SPT: 33892 \| TTL: 56 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [5357/tcp] \| SPT: 33892 \| TTL: 56 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-07-13 10:03:48 (5 hours ago)	[probe-44-49] 2026-07-13 09:46:23, Client: 66.132.195.115, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-07-13 09:46:23, Client: 66.132.195.115, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇪🇸 librebit	2026-07-13 09:46:26 (5 hours ago)	Brute force	Brute-Force
🇺🇸 Nova Reed	2026-07-13 09:30:48 (6 hours ago)	Jul 13 17:30:44 racknerd-df72780 kernel: [367121.907293] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95 ... show more Jul 13 17:30:44 racknerd-df72780 kernel: [367121.907293] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=66.132.195.115 DST=67.215.241.238 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=57911 DF PROTO=TCP SPT=10060 DPT=5657 WINDOW=21900 RES=0x00 SYN URGP=0 Jul 13 17:30:45 racknerd-df72780 kernel: [367122.968325] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=66.132.195.115 DST=67.215.241.238 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=57912 DF PROTO=TCP SPT=10060 DPT=5657 WINDOW=21900 RES=0x00 SYN URGP=0 Jul 13 17:30:47 racknerd-df72780 kernel: [367125.137868] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=66.132.195.115 DST=67.215.241.238 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=12157 DF PROTO=TCP SPT=10076 DPT=5657 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Brute-Force SSH
🇩🇪 mattk	2026-07-13 08:28:18 (7 hours ago)	port scan	Port Scan
🇺🇸 sandap1	2026-07-13 08:15:02 (7 hours ago)	Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=41267,src_ip=66.132.195.115	Port Scan Hacking
🇫🇮 [email protected]	2026-07-13 06:56:09 (8 hours ago)	Attack attempt against Interwebbi servers; Port Scan detected from 66.132.195.115 (US/United State ... show more Attack attempt against Interwebbi servers; Port Scan detected from 66.132.195.115 (US/United States/115.195.132.66.censys-scanner.com). 5 hits in the last 311 seconds; IP: 66.132.195.115; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇮🇳 Parth Maniar	2026-07-13 06:28:52 (9 hours ago)	This IP address carried out 8 port scanning attempts on 12-07-2026. For more information or to repor ... show more This IP address carried out 8 port scanning attempts on 12-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇩🇪 Tamsweb	2026-07-13 06:06:01 (9 hours ago)	Unauthorized connection attempt or scan from 66.132.195.115 on port 48808 ...	Port Scan
🇧🇷 diego	2026-07-13 03:17:26 (12 hours ago)	[arem1] 2026-07-13 02:58:19, Client: 66.132.195.115, Protocol: 6, Unauthorized activity to HTTP: GET ... show more [arem1] 2026-07-13 02:58:19, Client: 66.132.195.115, Protocol: 6, Unauthorized activity to HTTP: GET /2j_04l1evliztte show less	Web App Attack

Showing 1 to 15 of 2149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 152.32.206.87

🇹🇭 118.194.251.17

🇧🇷 2804:d59:b009:a500:6089:30f7:353b:7367

🇧🇷 2804:d51:446e:3d00:40bf:757b:4edb:2d42

🇺🇸 198.96.94.26

🇵🇱 176.53.159.197

🇺🇸 152.32.235.36

🇺🇸 135.237.81.94

🇫🇷 91.196.152.180

🇯🇵 43.130.249.176

🇹🇼 36.232.106.217

🇮🇳 20.244.13.16

🇺🇸 20.65.193.174

🇺🇸 20.64.105.252

🇧🇷 191.252.3.182

🇲🇽 149.232.136.235

🇬🇧 139.162.241.237

🇨🇳 111.35.36.48

🇺🇸 74.125.80.152

🇯🇵 172.253.235.28