JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.38

66.132.195.38 was found in our database!

This IP was reported 2,194 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	38.195.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.38

Whois 66.132.195.38

IP Abuse Reports for 66.132.195.38:

This IP address has been reported a total of 2,194 times from 465 distinct sources. 66.132.195.38 was first reported on March 22nd 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-07-03 10:18:22 (7 minutes ago)	[rede-164-29] 07/03/2026-07:18:21.731556, 66.132.195.38, Protocol: 6, ET DROP Dshield Block Listed S ... show more [rede-164-29] 07/03/2026-07:18:21.731556, 66.132.195.38, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇩🇪 iNetWorker	2026-07-03 10:12:25 (13 minutes ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 mccsoft.io	2026-07-03 08:04:37 (2 hours ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇩🇪 london2038.com	2026-07-03 06:46:44 (3 hours ago)	2026-07-03 08:45:56.781 5555/TCP connection CID-2446181 failed from 66.132.195.38 (38.195.132.66.cen ... show more 2026-07-03 08:45:56.781 5555/TCP connection CID-2446181 failed from 66.132.195.38 (38.195.132.66.censys-scanner.com), port 46162, code 5 show less	Port Scan
🇺🇸 mutebot.net	2026-07-03 06:22:24 (4 hours ago)	SRC=66.132.195.38, PROTO=TCP, SPT=33650, DPT=15631 SRC=66.132.195.38, PROTO=TCP, SPT=33650, DPT=1563 ... show more SRC=66.132.195.38, PROTO=TCP, SPT=33650, DPT=15631 SRC=66.132.195.38, PROTO=TCP, SPT=33650, DPT=15631 SRC=66.132.195.38, PROTO=TCP, SPT=33662, DPT=15631 SRC=66.132.195.38, PROTO=TCP, SPT=33662, DPT=15631 SRC=66.132.195.38, PROTO=TCP, SPT=33676, DPT=15631 show less	Port Scan
🇩🇪 dispaisyenterprises	2026-07-03 03:45:53 (6 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 49152 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 49152 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-03 02:28:34 (7 hours ago)	Honeypot hit: Empty payload (likely service probe); 64096 [1] TCP	Port Scan
Anonymous	2026-07-03 01:29:12 (8 hours ago)	66.132.195.38 - - [03/Jul/2026:01:29:11 +0000] "\x16\x03\x01" 400 432 "-" "-" ...	Bad Web Bot Web App Attack
🇺🇸 SSP	2026-07-03 00:05:26 (10 hours ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 20 Unique Ports: 24 Destination Ports: 1046, 110, 143, 25, 9594, 7581, 12500, 4190, 8445, 11500, 31210, 22, 8086, 8080, 587, 5201, 2030, 13613, 4559, 993, 15112, 8096, 8009, 3001 First Seen: 2026-06-21 04:55 UTC Last Seen: 2026-07-03 00:05 UTC show less	Port Scan
🇲🇹 neilcaruana	2026-07-03 00:05:04 (10 hours ago)	Sentinel detected an attack on port [6443]	Hacking
🇫🇷 Thaliruth	2026-07-02 21:37:58 (12 hours ago)	Jul 2 23:37:57 151 postfix/smtpd[1936508]: lost connection after EHLO from 38.195.132.66.censys-sca ... show more Jul 2 23:37:57 151 postfix/smtpd[1936508]: lost connection after EHLO from 38.195.132.66.censys-scanner.com[66.132.195.38] ... show less	Hacking Brute-Force
🇫🇷 Little Iguana	2026-07-02 19:15:43 (15 hours ago)	trying to access non-authorized port	Port Scan
🇩🇪 dispaisyenterprises	2026-07-02 17:39:51 (16 hours ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (7 bytes of payload); 1200 [2] TCP Reported by DisP ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (7 bytes of payload); 1200 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 gbzret4d	2026-07-02 17:33:50 (16 hours ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 22503 [1] TCP	Port Scan
🇫🇮 6kilowatti	2026-07-02 17:30:33 (16 hours ago)	2026-07-02T20:30:32.392547+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-07-02T20:30:32.392547+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=66.132.195.38 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=62906 DF PROTO=TCP SPT=12688 DPT=587 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 2194 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.223.235.4

🇺🇸 165.154.182.92

🇳🇱 212.192.240.126

🇮🇳 172.69.73.145

🇮🇩 157.15.40.58

🇺🇸 143.110.137.171

🇨🇳 120.211.167.230

🇳🇬 105.113.8.24

🇺🇸 74.7.243.242

🇺🇸 50.116.30.137

🇺🇸 47.251.161.178

🇮🇩 43.157.224.34

🇧🇪 198.235.24.184

🇺🇸 192.177.103.216

🇸🇬 185.150.0.108

🇹🇭 182.52.137.227

🇻🇳 160.191.87.31

🇵🇰 138.252.175.34

🇺🇸 71.120.200.254

🇯🇵 40.93.130.67