JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.73

66.132.195.73 was found in our database!

This IP was reported 2,117 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	73.195.132.66.censys-scanner.com
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.73

Whois 66.132.195.73

IP Abuse Reports for 66.132.195.73:

This IP address has been reported a total of 2,117 times from 457 distinct sources. 66.132.195.73 was first reported on March 22nd 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-06-25 17:27:44 (7 minutes ago)	2026-06-25T20:27:43.431923+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-06-25T20:27:43.431923+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=66.132.195.73 DST=10.0.0.30 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=57707 DF PROTO=TCP SPT=15004 DPT=993 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-06-25 16:44:42 (50 minutes ago)	Shorewall log file match.	Port Scan
🇩🇪 kingjan1999	2026-06-25 16:28:42 (1 hour ago)	Blocked by UFW [9443/tcp] \| SPT: 53466 \| TTL: 58 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [9443/tcp] \| SPT: 53466 \| TTL: 58 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 Maxetow	2026-06-25 16:23:27 (1 hour ago)	Scan port: 3306 \| 10 total \| size=60B	Port Scan
🇪🇸 librebit	2026-06-25 14:40:07 (2 hours ago)	Brute force	Brute-Force
🇳🇱 mthmulders	2026-06-25 10:29:06 (7 hours ago)	2026-06-25T12:28:59.396022+02:00 euler sshd-session[92266]: Connection reset by 66.132.195.73 port 1 ... show more 2026-06-25T12:28:59.396022+02:00 euler sshd-session[92266]: Connection reset by 66.132.195.73 port 16126 2026-06-25T12:29:05.320026+02:00 euler sshd-session[92267]: Unable to negotiate with 66.132.195.73 port 8268: no matching MAC found. Their offer: hmac-sha2-256,hmac-sha1,hmac-sha1-96 [preauth] ... show less	Brute-Force SSH
🇷🇺 DZBOT	2026-06-25 09:32:58 (8 hours ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇬🇧 OptimusGO	2026-06-25 07:06:11 (10 hours ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-25 08:06:11 UTC Log evidence: 06/25/2026-08:06:09.721453 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 66.132.195.73:60138 -> 185.127.18.66:16468 06/25/2026-08:06:09.844408 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 66.132.195.73:38556 -> 185.127.18.66:16468 show less	Port Scan Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-25 06:39:08 (10 hours ago)	Honeypot hit: Empty payload (likely service probe); 27592 [1] TCP	Port Scan
🇺🇸 aks4226	2026-06-25 05:58:54 (11 hours ago)	Attacking common web applications. (n01)	Web App Attack
🇵🇱 IT RDC	2026-06-25 05:56:53 (11 hours ago)	2026/06/25 07:56:52 [info] 57866#0: 498838 client sent plain HTTP request to HTTPS port while readi ... show more 2026/06/25 07:56:52 [info] 57866#0: 498838 client sent plain HTTP request to HTTPS port while reading client request headers, client: 66.132.195.73, server: zimbra, request: "GET /robots.txt HTTP/1.1", host: "83.238.86.39:443" ... show less	Web App Attack
🇺🇸 LotPhantom	2026-06-25 05:46:40 (11 hours ago)	2026-06-25T05:46:38.871906+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-06-25T05:46:38.871906+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=66.132.195.73 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=32341 DF PROTO=TCP SPT=62470 DPT=25061 WINDOW=21900 RES=0x00 SYN URGP=0 2026-06-25T05:46:39.891996+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=66.132.195.73 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=32342 DF PROTO=TCP SPT=62470 DPT=25061 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇩🇪 iNetWorker	2026-06-25 05:40:51 (11 hours ago)	trying to access non-authorized port	Port Scan
🇩🇪 acadeova	2026-06-25 05:19:12 (12 hours ago)	🚨 Recon detected (nft drop) SRC=66.132.195.73 Observed=TCP dpt=11434 in=enp0s6 ttl=59 Time=recent(jo ... show more 🚨 Recon detected (nft drop) SRC=66.132.195.73 Observed=TCP dpt=11434 in=enp0s6 ttl=59 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 pjfasano	2026-06-25 03:16:20 (14 hours ago)	Jun 25 03:15:41 fermi postfix/smtpd[1686685]: lost connection after CONNECT from 73.195.132.66.censy ... show more Jun 25 03:15:41 fermi postfix/smtpd[1686685]: lost connection after CONNECT from 73.195.132.66.censys-scanner.com[66.132.195.73] Jun 25 03:15:44 fermi postfix/smtpd[1686685]: lost connection after CONNECT from 73.195.132.66.censys-scanner.com[66.132.195.73] Jun 25 03:15:47 fermi postfix/smtpd[1686685]: lost connection after CONNECT from 73.195.132.66.censys-scanner.com[66.132.195.73] Jun 25 03:15:52 fermi postfix/smtpd[1686685]: lost connection after CONNECT from 73.195.132.66.censys-scanner.com[66.132.195.73] Jun 25 03:16:00 fermi postfix/smtpd[1686685]: lost connection after CONNECT from 73.195.132.66.censys-scanner.com[66.132.195.73] Jun 25 03:16:04 fermi postfix/smtpd[1686685]: lost connection after CONNECT from 73.195.132.66.censys-scanner.com[66.132.195.73] Jun 25 03:16:08 fermi postfix/smtpd[1686685]: lost connection after CONNECT from 73.195.132.66.censys-scanner.com[66.132.195.73] Jun 25 03:16:11 fermi postfix/smtpd[1686685]: lost connection after CONNECT from 73.195.132.66.ce ... show less	Brute-Force SSH

Showing 1 to 15 of 2117 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.219

🇺🇸 172.208.48.177

🇺🇸 162.216.149.51

🇨🇳 106.13.228.234

🇺🇸 44.89.177.167

🇨🇳 220.205.123.57

🇳🇱 195.178.110.26

🇧🇬 194.146.233.152

🇹🇯 185.177.2.241

🇺🇸 162.216.149.158

🇺🇸 44.100.8.183

🇺🇸 20.65.192.33

🇺🇸 3.83.245.221

🇨🇳 202.194.98.204

🇵🇰 175.107.0.200

🇺🇸 172.71.254.167

🇳🇱 154.211.2.9

🇺🇸 152.32.183.236

🇩🇪 148.153.166.205

🇫🇮 147.185.133.203