JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.58

66.132.195.58 was found in our database!

This IP was reported 1,927 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	58.195.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.58

Whois 66.132.195.58

IP Abuse Reports for 66.132.195.58:

This IP address has been reported a total of 1,927 times from 424 distinct sources. 66.132.195.58 was first reported on March 22nd 2026, and the most recent report was 28 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 さいとうあすか	2026-04-01 02:56:20 (2 months ago)	Apr 1 10:56:18 pbs sshd[4189323]: Connection closed by 66.132.195.58 port 53252 [preauth] ...	Brute-Force SSH
🇩🇪 kingjan1999	2026-04-01 02:35:44 (2 months ago)	Blocked by UFW [3001/tcp] \| SPT: 44032 \| TTL: 58 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [3001/tcp] \| SPT: 44032 \| TTL: 58 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 LiftUp Hosting	2026-04-01 02:31:15 (2 months ago)	Honeypot hit: Unauthorized traffic on 21/ftpd	Port Scan
🇳🇱 donarev419	2026-04-01 02:14:16 (2 months ago)	Port scan detected on port 8008 (connection without data transfer)	Port Scan
🇩🇪 Pascal den Bekker	2026-04-01 00:23:50 (2 months ago)	CrowdSec automated report - crowdsecurity/postfix-spam	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-03-31 22:16:57 (2 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/66.132.195.58 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/66.132.195.58 2026-03-31 00:17:47 /./favicon.ico 2026-03-31 00:17:47 /favicon.ico 2026-03-31 00:17:52 /login 2026-03-31 00:17:46 * 2026-03-31 00:17:46 / show less	SSH
🇫🇷 ISPLtd	2026-03-31 22:07:03 (2 months ago)	Apr 1 00:07:02 66.132.195.58 TCP SPT=33100 DPT=3000 SYN Apr 1 00:07:02 66.132.195.58 TCP SPT=29728 ... show more Apr 1 00:07:02 66.132.195.58 TCP SPT=33100 DPT=3000 SYN Apr 1 00:07:02 66.132.195.58 TCP SPT=29728 DPT=50051 SYN Apr 1 00:07:02 66.132.195.58 TCP SPT=38042 DPT=4190 ... show less	Port Scan
Anonymous	2026-03-31 21:52:59 (2 months ago)	Reported from Nginx log analysis 6. Log: 66.132.195.58 - - [31/Mar/2026:xx:xx:xx 0200] "GET / HTTP/ ... show more Reported from Nginx log analysis 6. Log: 66.132.195.58 - - [31/Mar/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; https://about.censys.io/)" "-" "US United States -" "AS398324" "Censys, Inc." show less	Port Scan Brute-Force SSH
🇩🇪 mattk	2026-03-31 21:10:53 (2 months ago)	port scan	Port Scan
🇬🇧 gbzret4d	2026-03-31 21:10:38 (2 months ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 63553 [1] TCP	Port Scan
🇩🇪 dispaisyenterprises	2026-03-31 20:21:37 (2 months ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 50704 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 50704 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-03-31 19:17:13 (2 months ago)	2026-03-31T20:17:11.993588+01:00 vps kernel: [36724857.233155] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-03-31T20:17:11.993588+01:00 vps kernel: [36724857.233155] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=66.132.195.58 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=25718 DF PROTO=TCP SPT=58406 DPT=20000 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 ghostwarriors	2026-03-31 18:20:10 (2 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇨🇭 pingusurmars	2026-03-31 17:13:32 (2 months ago)	Blocked by UFW on amperetwo [587/tcp] Source port: 46038 TTL: 59 Packet length: 60 TOS: 0x00 This r ... show more Blocked by UFW on amperetwo [587/tcp] Source port: 46038 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 cloudmax	2026-03-31 16:20:17 (2 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan

Showing 1696 to 1710 of 1927 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.232.212.207

🇨🇳 182.92.181.218

🇨🇳 113.117.73.206

🇰🇿 5.34.126.34

🇺🇦 193.176.251.229

🇨🇳 175.178.128.72

🇺🇸 167.160.76.212

🇩🇪 130.12.181.109

🇨🇳 119.98.234.126

🇺🇸 73.176.192.235

🇳🇱 45.148.10.157

🇲🇽 187.213.232.52

🇨🇳 125.211.170.245

🇩🇪 69.5.169.125

🇺🇸 65.49.1.162

🇧🇷 45.232.73.84

🇺🇸 40.75.131.16

🇺🇸 207.90.244.6

🇳🇱 178.16.54.22

🇺🇸 167.172.158.128