66.167.166.0
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- RCN
- Usage Type
- Fixed Line ISP
- ASN
- AS3257
- Hostname(s)
- h-66-167-166-0.dnvt.co.dynamic.globalcapacity.com
- Domain Name
- astound.com
- Country
- 🇺🇸 United States of America
- City
- Chicago, Illinois
No reports in the last 60 days
66.167.166.0 has been reported 109 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
109 from
43 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/66.167.166.0
|
SSH | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud
|
Hacking IoT Targeted | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 37779
TTL: 45
Packet length: 40
TOS: 0x08
This report (for 66.167.166.0) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 sthoyer.de |
May 16 10:42:32 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.167.166.0 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=46462 PROTO=TCP SPT=37779 DPT=23 WINDOW=52604 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:36618 dst:23
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud
|
Hacking IoT Targeted | |
| 🇺🇸 RAP |
2026-05-10 03:15:02 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇧🇪 sauron-le-noir |
scan port : 23 from États Unis at Sat May 9 23:02:04 2026
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force | |
| 🇫🇷 sthoyer.de |
May 7 13:38:38 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=66.167.166.0 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=5780 PROTO=TCP SPT=37055 DPT=23 WINDOW=744 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force | |
| 🇨🇭 TOCE |
18 hits seen on 2026-05-07, ports 23 (Telnet) on a honeypot from www.toce.ch
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown