JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.77

66.132.195.77 was found in our database!

This IP was reported 1,622 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	77.195.132.66.censys-scanner.com
Domain Name	censys.io
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.77

Whois 66.132.195.77

IP Abuse Reports for 66.132.195.77:

This IP address has been reported a total of 1,622 times from 400 distinct sources. 66.132.195.77 was first reported on March 22nd 2026, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Kinsei Engineering Inc.	2026-03-24 05:37:56 (2 months ago)	UFW:High-frequency access to unused ports	Port Scan
🇹🇭 Sawasdee	2026-03-24 04:11:32 (2 months ago)	Port Scan ...	Port Scan
🇳🇱 i-turnradio.nl	2026-03-24 02:29:28 (2 months ago)	2026-03-24 03:29:28 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇺🇸 xmission.com	2026-03-24 02:22:35 (2 months ago)	Blocked by UFW (TCP on 19) Source port: 51560 TTL: 59 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 19) Source port: 51560 TTL: 59 Packet length: 60 TOS: 0x00 This report (for 66.132.195.77) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 andypiper	2026-03-24 02:01:51 (2 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 Trashware	2026-03-24 01:43:36 (2 months ago)	Malicious connection attempt	Hacking Web App Attack
🇩🇪 zupan	2026-03-24 01:12:59 (2 months ago)	Blocked by UFW [993/tcp] \| SPT: 59176 \| TTL: 56 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefi ... show more Blocked by UFW [993/tcp] \| SPT: 59176 \| TTL: 56 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-24 00:45:44 (2 months ago)	Malicious Probing/Bad Request	Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-03-24 00:23:50 (2 months ago)	2026-03-24T00:23:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-03-24T00:23:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=66.132.195.77 DST=10.1.1.5 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=45145 DF PROTO=TCP SPT=32908 DPT=2222 WINDOW=21900 RES=0x00 SYN URGP=0 2026-03-24T00:23:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=66.132.195.77 DST=10.1.1.5 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=45146 DF PROTO=TCP SPT=32908 DPT=2222 WINDOW=21900 RES=0x00 SYN URGP=0 2026-03-24T00:23:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=66.132.195.77 DST=10.1.1.5 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=45147 DF PROTO=TCP SPT=32908 DPT=2222 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Hacking Brute-Force SSH
🇵🇱 sefinek.net	2026-03-23 22:54:32 (2 months ago)	Honeypot hit: Empty payload (likely service probe); 65126 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 65126 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇯🇵 mkaraki	2026-03-23 22:07:10 (2 months ago)	1774303628 # Service_probe # SIGNATURE_SEND # source_ip:66.132.195.77 # dst_port:14265 ...	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-03-23 22:05:44 (2 months ago)	Honeypot hit: Unauthorized traffic (243 bytes of payload); 8636 [2] TCP	Port Scan
Anonymous	2026-03-23 21:46:56 (2 months ago)	SSH-Multi login Attempt	Brute-Force SSH
🇺🇸 pjfasano	2026-03-23 17:35:49 (2 months ago)	Mar 23 17:35:42 fermi dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 7 se ... show more Mar 23 17:35:42 fermi dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 7 secs): user=<>, rip=66.132.195.77, lip=205.166.159.14, TLS: Connection closed, session=<hfLJdrRN4uBChMNN> Mar 23 17:35:44 fermi dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=66.132.195.77, lip=205.166.159.14, session=<BdvidrRNlMtChMNN> Mar 23 17:35:45 fermi dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=66.132.195.77, lip=205.166.159.14, session=<wIX5drRNnMtChMNN> Mar 23 17:35:47 fermi dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=66.132.195.77, lip=205.166.159.14, session=<PbMNd7RNsMtChMNN> Mar 23 17:35:49 fermi dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=66.132.195.77, lip=205.166.159.14, session=<BjErd7RNtMtChMNN> ... show less	Brute-Force SSH
🇹🇷 Threat.live	2026-03-23 16:55:05 (2 months ago)	Suspicious activity, tcp/888	Port Scan

Showing 1591 to 1605 of 1622 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.232.212.207

🇨🇳 182.92.181.218

🇨🇳 113.117.73.206

🇰🇿 5.34.126.34

🇺🇦 193.176.251.229

🇨🇳 175.178.128.72

🇺🇸 167.160.76.212

🇩🇪 130.12.181.109

🇨🇳 119.98.234.126

🇺🇸 73.176.192.235

🇳🇱 45.148.10.157

🇲🇽 187.213.232.52

🇨🇳 125.211.170.245

🇩🇪 69.5.169.125

🇺🇸 65.49.1.162

🇧🇷 45.232.73.84

🇺🇸 40.75.131.16

🇺🇸 207.90.244.6

🇳🇱 178.16.54.22

🇺🇸 167.172.158.128