JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.76

66.132.195.76 was found in our database!

This IP was reported 1,620 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	76.195.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.76

Whois 66.132.195.76

IP Abuse Reports for 66.132.195.76:

This IP address has been reported a total of 1,620 times from 402 distinct sources. 66.132.195.76 was first reported on March 22nd 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇱 router.al	2026-05-29 06:37:57 (6 days ago)	05/29/2026-06:37:56.712330 66.132.195.76 Protocol: 6 SURICATA HTTP2 too long frame data	Hacking
🇳🇱 donarev419	2026-05-29 05:57:55 (6 days ago)	Connection to port 2456 with data transfer. Data preview: ��	Port Scan Hacking
🇦🇺 obiahmar	2026-05-29 05:40:32 (6 days ago)	This IP was detected triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 Luhte	2026-05-29 05:34:24 (6 days ago)	Unsolicited TCP connection from 66.132.195.76 to port 0 at 2026-05-29T05:34:24Z. Source IP completed ... show more Unsolicited TCP connection from 66.132.195.76 to port 0 at 2026-05-29T05:34:24Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 marcel-knorr.de	2026-05-29 05:29:20 (6 days ago)	[fwbs-database] Blocked by UFW	Port Scan
🇨🇳 pengpeng	2026-05-29 05:19:21 (6 days ago)	monitor: on VM-0-7-ubuntu \| port: 18080 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 18080 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 manuelisus	2026-05-29 04:58:31 (6 days ago)	Honeypot SSH: +10: honeypot_connection, +15: short_automated_session, +30: known_scanner_org, +25: r ... show more Honeypot SSH: +10: honeypot_connection, +15: short_automated_session, +30: known_scanner_org, +25: rdns_contains_scan, +10: os_server_linux show less	Brute-Force SSH
🇩🇪 2048	2026-05-29 04:17:26 (6 days ago)	2026-05-29T06:17:22.833858+02:00 machodeer kernel: [2736160.362200] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-29T06:17:22.833858+02:00 machodeer kernel: [2736160.362200] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=66.132.195.76 DST=REDACTED LEN=60 TOS=0x08 PREC=0x40 TTL=45 ID=17382 DF PROTO=TCP SPT=18396 DPT=62051 WINDOW=21900 RES=0x00 SYN URGP=0 2026-05-29T06:17:23.937417+02:00 machodeer kernel: [2736161.466008] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=66.132.195.76 DST=REDACTED LEN=60 TOS=0x08 PREC=0x40 TTL=44 ID=42274 DF PROTO=TCP SPT=18410 DPT=62051 WINDOW=21900 RES=0x00 SYN URGP=0 2026-05-29T06:17:24.982114+02:00 machodeer kernel: [2736162.510695] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=66.132.195.76 DST=REDACTED LEN=60 TOS=0x08 PREC=0x40 TTL=46 ID=49766 DF PROTO=TCP SPT=18414 DPT=62051 WINDOW=21900 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-05-29 02:47:41 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇦🇹 SchiWaGoA	2026-05-29 02:44:24 (6 days ago)	This IP was detected by CrowdSec trigger from crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇫🇷 GabrielJST	2026-05-29 02:21:51 (6 days ago)	Port Scan detected from 66.132.195.76 (US/United States/76.195.132.66.censys-scanner.com).	Port Scan
🇷🇺 DZBOT	2026-05-29 02:03:34 (6 days ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇩🇪 dispaisyenterprises	2026-05-29 01:39:42 (6 days ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (243 bytes of payload); 49565 [2] TCP Reported by D ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (243 bytes of payload); 49565 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-05-29 01:27:16 (6 days ago)	Unauthorized Repeated Recursive Lookups Domain: ip.parrotdns.com	DNS Poisoning
🇳🇱 donarev419	2026-05-29 00:54:03 (6 days ago)	Port scan detected on port 372 (connection without data transfer)	Port Scan

Showing 121 to 135 of 1620 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇲 2620:171:78:f001:9999::112

🇮🇹 217.26.179.5

🇸🇾 193.43.159.163

🇺🇦 178.34.188.74

🇨🇳 175.0.73.75

🇮🇶 169.224.106.146

🇺🇸 164.92.70.69

🇪🇸 141.109.168.80

🇮🇩 103.151.140.97

🇫🇮 95.216.2.94

🇬🇧 92.25.165.230

🇺🇸 66.132.195.93

🇺🇸 64.94.156.223

🇨🇳 60.16.197.170

🇭🇰 8.212.10.159

🇨🇳 171.114.228.158

🇻🇳 160.191.54.171

🇮🇩 157.10.109.69

🇭🇰 154.198.162.75

🇨🇳 120.48.140.232