JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.57

66.132.195.57 was found in our database!

This IP was reported 1,882 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	57.195.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.57

Whois 66.132.195.57

IP Abuse Reports for 66.132.195.57:

This IP address has been reported a total of 1,882 times from 415 distinct sources. 66.132.195.57 was first reported on March 22nd 2026, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sefinek.net	2026-03-23 16:59:14 (2 months ago)	Blocked by UFW on NY01 [22/tcp] \| SPT: 55494 \| TTL: 54 \| LEN: 60 \| TOS: 0x08 • Reported by: github.c ... show more Blocked by UFW on NY01 [22/tcp] \| SPT: 55494 \| TTL: 54 \| LEN: 60 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH
🇫🇷 sthoyer.de	2026-03-23 16:24:13 (2 months ago)	Mar 23 17:23:54 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Mar 23 17:23:54 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.195.57 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=9000 DF PROTO=TCP SPT=57296 DPT=4190 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 23 17:23:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.195.57 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=9001 DF PROTO=TCP SPT=57296 DPT=4190 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 23 17:23:57 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.195.57 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=9002 DF PROTO=TCP SPT=57296 DPT=4190 WINDOW=21900 RES=0x00 SYN URGP=0 Mar 23 17:24:01 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.132.195.57 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=9003 DF PROTO=TCP SPT=57296 DPT=4190 WINDOW=219 ... show less	Port Scan
🇺🇸 NXTwoThou	2026-03-23 12:56:54 (2 months ago)	Verb	Web App Attack
🇧🇷 SOC Blue Team	2026-03-23 11:26:06 (2 months ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇩🇪 2048	2026-03-23 11:13:06 (2 months ago)	2026-03-23T12:13:03.437160+01:00 machodeer kernel: [2521202.594610] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-03-23T12:13:03.437160+01:00 machodeer kernel: [2521202.594610] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=66.132.195.57 DST=REDACTED LEN=60 TOS=0x00 PREC=0x20 TTL=53 ID=55414 DF PROTO=TCP SPT=56534 DPT=30680 WINDOW=21900 RES=0x00 SYN URGP=0 2026-03-23T12:13:04.435020+01:00 machodeer kernel: [2521203.592798] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=66.132.195.57 DST=REDACTED LEN=60 TOS=0x00 PREC=0x20 TTL=53 ID=48169 DF PROTO=TCP SPT=56548 DPT=30680 WINDOW=21900 RES=0x00 SYN URGP=0 2026-03-23T12:13:05.435466+01:00 machodeer kernel: [2521204.592953] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=66.132.195.57 DST=REDACTED LEN=60 TOS=0x00 PREC=0x20 TTL=53 ID=22758 DF PROTO=TCP SPT=56558 DPT=30680 WINDOW=21900 RES=0x00 SYN URGP=0 show less	Port Scan
🇳🇱 VMHeaven.io	2026-03-23 09:26:47 (2 months ago)	Blocked by UFW [60002/tcp] Source port: 38094 TTL: 57 Packet length: 60	Port Scan
🇫🇷 ISPLtd	2026-03-23 09:25:29 (2 months ago)	Mar 23 10:25:27 66.132.195.57 TCP SPT=40530 DPT=8547 SYN Mar 23 10:25:28 66.132.195.57 TCP SPT=40530 ... show more Mar 23 10:25:27 66.132.195.57 TCP SPT=40530 DPT=8547 SYN Mar 23 10:25:28 66.132.195.57 TCP SPT=40530 DPT=8547 SYN Mar 23 10:25:29 66.132.195.57 TCP SPT=40552 DPT=8547 ... show less	Port Scan
🇩🇪 D3RP4UL	2026-03-23 08:55:43 (2 months ago)	Honeypot hit: Empty payload (likely service probe); 8090 [2] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 8090 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇷 diego	2026-03-23 06:10:41 (2 months ago)	[probe-44-49] 2026-03-23 05:50:54, Client: 66.132.195.57, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-44-49] 2026-03-23 05:50:54, Client: 66.132.195.57, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇺🇸 xmission.com	2026-03-23 05:36:53 (2 months ago)	Blocked by UFW (TCP on 9519) Source port: 39438 TTL: 53 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9519) Source port: 39438 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 66.132.195.57) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-03-23 04:29:55 (2 months ago)	Connection to port 10250 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 LSPCCU	2026-03-23 03:03:18 (2 months ago)	TSEC Honeypot Network report. Threat score: 60/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 60/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 66. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇧🇷 diego	2026-03-23 00:05:41 (2 months ago)	[probe-44-49] 2026-03-22 23:47:21, Client: 66.132.195.57, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-44-49] 2026-03-22 23:47:21, Client: 66.132.195.57, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇷🇺 nyuuzyou	2026-03-22 23:31:44 (2 months ago)	{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "21", "server": "ftp_server", "src_ip": ... show more {"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "21", "server": "ftp_server", "src_ip": "66.132.195.57", "src_port": "33558", "timestamp": "2026-03-22T23:31:04.875169"} show less	Port Scan FTP Brute-Force
🇹🇷 Threat.live	2026-03-22 22:00:09 (2 months ago)	Suspicious activity, tcp/993	Port Scan

Showing 1846 to 1860 of 1882 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 203.242.185.211

🇧🇴 181.115.147.5

🇫🇮 147.185.133.213

🇺🇸 147.185.132.201

🇺🇸 146.70.168.240

🇺🇸 47.254.24.46

🇳🇱 45.87.249.200

🇧🇪 34.156.104.73

🇺🇸 8.229.103.240

🇺🇸 216.133.145.86

🇳🇱 195.178.110.199

🇬🇧 193.163.125.169

🇯🇵 124.155.125.131

🇩🇪 91.98.236.136

🇺🇸 72.10.32.138

🇺🇸 66.132.195.60

🇸🇬 45.82.78.104

🇮🇩 103.178.16.18

🇫🇷 85.217.140.47

🇷🇺 80.69.186.68