JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

66.132.195.219

Recent Activity

Abuse confidence score ?

100% Critical

161 reports

91 reporters · latest 3 minutes ago

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	219.195.132.66.censys-scanner.com
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 66.132.195.219

Export CSV

This IP address has been reported a total of 161 times from 91 distinct sources. 66.132.195.219 was first reported on October 7th 2026, and the most recent report was 3 minutes ago. In the last 60 days, the top reporter locations were: Germany with 55 reports; France with 25 reports; United States of America with 21 reports. The most common categories in these recent reports were: Port Scan 90 times; Web App Attack 52 times; Brute-Force 28 times; Hacking 23 times; SSH 10 times; Other 17 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NetShield-DE	2026-10-16 14:07:58 (3 minutes ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-16T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-16T16:07:02+0200. Last: 2026-10-16T16:07:02+0200. Samples: - 2026-10-11 06:41:14,072 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 66.132.195.219 show less	Web App Attack
🇩🇪 TheDjRider	2026-10-16 12:17:29 (1 hour ago)	CrowdSec detected Malicious web crawler or bad web bot. Scenario: crowdsecurity/http-bad-user-agent. ... show more CrowdSec detected Malicious web crawler or bad web bot. Scenario: crowdsecurity/http-bad-user-agent. Automatic ban triggered. Detection time (UTC): 2026-10-16T12:17:20.397913431Z. Context: http_status=301, http_status=302 show less	Bad Web Bot Web App Attack
🇨🇿 sweet_acid	2026-10-16 11:16:40 (2 hours ago)	Local mail evidence: family=mail_proto_abuse; ref=mail_goblin.	Port Scan
🇩🇪 kingjan1999	2026-10-16 10:26:39 (3 hours ago)	Blocked by UFW [55901/tcp] \| SPT: 33366 \| TTL: 58 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [55901/tcp] \| SPT: 33366 \| TTL: 58 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 NetShield-DE	2026-10-16 09:07:59 (5 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-16T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-16T11:07:02+0200. Last: 2026-10-16T11:07:02+0200. Samples: - 2026-10-11 06:41:14,072 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 66.132.195.219 show less	Web App Attack
🇫🇷 zulzeen	2026-10-16 08:39:02 (5 hours ago)	[incypit-web] Banned by Fail2ban (Jail: syswarden-portscan)	Port Scan
🇳🇱 donarev419	2026-10-16 08:35:57 (5 hours ago)	Connection to port 4190 with data transfer. Data preview: CAPABILITY LOGOUT	Port Scan Hacking
🇫🇮 Daniel Baer	2026-10-16 06:50:03 (7 hours ago)	CrowdSec local HTTP alert scenario: crowdsecurity/http-bad-user-agent alert_id: 11316 events: 2 crea ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-bad-user-agent alert_id: 11316 events: 2 created_at: 2026-10-16T06:49:16Z message: Ip 66.132.195.219 performed 'crowdsecurity/http-bad-user-agent' (2 events over 5.209846959s) at 2026-10-16 06:49:15.557063688 +0000 UTC target_uri: ["/","/sellers.json"] method: ["GET"] status: ["301"] user_agent: ["Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"] show less	Bad Web Bot Web App Attack
🇩🇪 NetShield-DE	2026-10-16 04:07:57 (10 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-16T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-16T06:07:02+0200. Last: 2026-10-16T06:07:02+0200. Samples: - 2026-10-11 06:41:14,072 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 66.132.195.219 show less	Web App Attack
🇩🇪 ManagedStack	2026-10-16 03:45:03 (10 hours ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇩🇪 IVski.com	2026-10-16 03:28:20 (10 hours ago)	IVski WAF \| Sensitive file probe detected - looking for .env	Hacking Brute-Force Web App Attack
Anonymous	2026-10-16 03:15:30 (10 hours ago)	Shorewall log file match.	Port Scan
🇯🇵 gomasy	2026-10-16 01:20:01 (12 hours ago)	_:80 66.132.195.219 - - [16/Oct/2026:10:20:00 +0900] "\x16\x03\x01\x05\xCD\x01\x00\x05\xC9\x03\x03\x ... show more _:80 66.132.195.219 - - [16/Oct/2026:10:20:00 +0900] "\x16\x03\x01\x05\xCD\x01\x00\x05\xC9\x03\x03\xEE\xEB\xA2\xD5\x17%\x8A\x05\xA8\xC8\xA2\x92\x8D\x94p\x80\x9A?:c\xB2\xDD8Q\xCF\xFB\x86cx\x93@\xF9 x\xC4\xFD,j&\xC7\xEB\x88\x06i\xEA\|\x5Cw\xED\x80p\x81Y" 500 170 "-" "-" ... show less	Web App Attack
🇫🇷 Kejult	2026-10-15 23:42:08 (14 hours ago)	Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target p ... show more Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target ports and 2 source port(s). Ports: 1912/service, 1961/service. Sensors: Honeytrap. show less	Port Scan
🇩🇪 NetShield-DE	2026-10-15 23:08:01 (15 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-16T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-10-16T01:07:02+0200. Last: 2026-10-16T01:07:02+0200. Samples: - 2026-10-11 06:41:14,072 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 66.132.195.219 show less	Web App Attack

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.185.195

🇺🇸 195.184.76.235

🇳🇱 185.136.15.86

🇸🇬 150.109.16.200

🇫🇷 91.231.89.190

🇬🇧 35.189.72.44

🇮🇱 34.165.90.205

🇧🇪 34.76.9.181

🇩🇪 34.32.88.195

🇳🇱 195.178.110.26

🇨🇳 183.224.97.83

🇩🇪 162.158.86.41

🇺🇸 134.209.7.244

🇮🇹 101.57.100.79

🇳🇱 89.124.124.44

🇫🇷 85.217.140.18

🇳🇱 45.148.10.157

🇨🇳 42.203.168.5

🇹🇼 36.235.83.25

🇺🇸 20.46.254.79