JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.195.91

66.132.195.91 was found in our database!

This IP was reported 2,545 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	91.195.132.66.censys-scanner.com
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.195.91

Whois 66.132.195.91

IP Abuse Reports for 66.132.195.91:

This IP address has been reported a total of 2,545 times from 506 distinct sources. 66.132.195.91 was first reported on March 22nd 2026, and the most recent report was 35 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 modscleo4	2026-07-10 02:50:44 (35 minutes ago)	2026-07-09T23:50:44.077540-03:00 salada-de-fruta sshd[736756]: error: kex_exchange_identification: r ... show more 2026-07-09T23:50:44.077540-03:00 salada-de-fruta sshd[736756]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-09T23:50:44.077844-03:00 salada-de-fruta sshd[736756]: Connection reset by 66.132.195.91 port 47322 ... show less	Port Scan Brute-Force SSH
🇧🇷 diego	2026-07-10 02:36:07 (50 minutes ago)	[rede-44-49] 07/09/2026-23:36:06.860156, 66.132.195.91, Protocol: 6, ET DROP Dshield Block Listed So ... show more [rede-44-49] 07/09/2026-23:36:06.860156, 66.132.195.91, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇵🇱 nakordoni.eu	2026-07-10 01:30:02 (1 hour ago)	Blocked by nakordoni.eu automated security: vulnerability scanner / probe attack. Jail: nakordoni-se ... show more Blocked by nakordoni.eu automated security: vulnerability scanner / probe attack. Jail: nakordoni-security-probe, 3 matches. ISP: Censys, Inc. (US), Usage: Commercial. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇺🇸 MPL	2026-07-10 00:43:52 (2 hours ago)	tcp/51443 (12 or more attempts)	Port Scan
🇺🇸 donarev419	2026-07-10 00:31:59 (2 hours ago)	Connection to port 5432 with data transfer. Data preview:	Port Scan Hacking
🇿🇦 voolik.com	2026-07-09 23:03:53 (4 hours ago)	2026-07-10T01:03:29.338910+02:00 bla016-truserv-jhb1-001 sshd[1606058]: refused connect from 66.132. ... show more 2026-07-10T01:03:29.338910+02:00 bla016-truserv-jhb1-001 sshd[1606058]: refused connect from 66.132.195.91 (66.132.195.91) 2026-07-10T01:03:38.994565+02:00 bla016-truserv-jhb1-001 sshd[1606331]: refused connect from 66.132.195.91 (66.132.195.91) 2026-07-10T01:03:45.807006+02:00 bla016-truserv-jhb1-001 sshd[1606649]: refused connect from 66.132.195.91 (66.132.195.91) 2026-07-10T01:03:52.107335+02:00 bla016-truserv-jhb1-001 sshd[1606998]: refused connect from 66.132.195.91 (66.132.195.91) ... show less	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-07-09 21:21:46 (6 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 5903 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 5903 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇿🇦 slartybartfast69420blazit	2026-07-09 20:29:47 (6 hours ago)	Fail2ban picked up 66.132.195.91 attacking nginx	Web App Attack
🇫🇷 evvsk	2026-07-09 19:47:58 (7 hours ago)	8092/tcp	Port Scan
Anonymous	2026-07-09 14:40:51 (12 hours ago)	Blocked by UFW (TCP on 8080) Source port: 14608 TTL: 48 Packet length: 60 TOS: 0x14 This report (fo ... show more Blocked by UFW (TCP on 8080) Source port: 14608 TTL: 48 Packet length: 60 TOS: 0x14 This report (for 66.132.195.91) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 NetGuard	2026-07-09 13:46:51 (13 hours ago)	#honeypot #netguard247 #cowrie #sshtelnetprobe Captured by NetGuard 24/7 T-Pot honeypot (netguard24- ... show more #honeypot #netguard247 #cowrie #sshtelnetprobe Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-07-09T13:46:51.088+00:00 Attacker IP: 66.132.195.91 \| Port: 23 \| Country: United States Honeypot: cowrie \| Attack: ssh_telnet_probe Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
🇬🇧 sonot	2026-07-09 13:02:27 (14 hours ago)	Blocked by UFW on tunneluk01 [49664/tcp] \| SPT: 55078 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [49664/tcp] \| SPT: 55078 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dispaisyenterprises	2026-07-09 12:45:45 (14 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 31287 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 31287 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 [email protected]	2026-07-09 12:45:01 (14 hours ago)	Total attacks: 2	Brute-Force SSH
Anonymous	2026-07-09 12:28:48 (14 hours ago)	This IP was detected by CrowdSec triggering local/postfix-sasl-persistent-brute	Email Spam Brute-Force

Showing 1 to 15 of 2545 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.151

🇬🇧 195.206.182.218

🇺🇸 195.184.76.215

🇩🇪 167.94.145.16

🇩🇪 104.207.50.235

🇸🇬 101.47.27.73

🇺🇸 99.113.185.211

🇧🇬 79.124.56.202

🇧🇬 79.124.49.174

🇱🇹 77.90.185.16

🇫🇮 46.8.96.254

🇮🇪 2a05:d018:bb5:3302:e7f4:87bc:bb92:b428

🇺🇸 2a04:c300:400::9f

🇹🇼 211.75.3.37

🇪🇹 196.188.93.169

🇺🇸 162.215.213.210

🇭🇰 150.109.75.185

🇨🇳 118.212.123.149

🇫🇷 91.231.89.247

🇳🇱 91.92.40.176