This IP address has been reported a total of
3,675
times from
401 distinct
sources.
66.228.53.4 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot hit: HTTP/1.1 request on 4321
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_ ...
show moreHoneypot hit: HTTP/1.1 request on 4321
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 4321 [2] TCP
show less
2026-06-07T10:15:56.456032+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[773452]: banner exchange: Connectio ...
show more2026-06-07T10:15:56.456032+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[773452]: banner exchange: Connection from 66.228.53.4 port 57808: invalid format
2026-06-07T10:15:56.698407+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[773454]: banner exchange: Connection from 66.228.53.4 port 46928: invalid format
...
show less
Bunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was ...
show moreBunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was identified within the request arguments, triggering a security rule designed to prevent application attacks.
show less
Connection to port 999 with data transfer.
Data preview: GET / HTTP/1.1
Host: 167.253.66.144:999
U ...
show moreConnection to port 999 with data transfer.
Data preview: GET / HTTP/1.1
Host: 167.253.66.144:999
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) A
show less
[probe-44-49] 2026-06-07 01:47:25, Client: 66.228.53.4, Protocol: 6, Unauthorized activity to HTTP: ...
show more[probe-44-49] 2026-06-07 01:47:25, Client: 66.228.53.4, Protocol: 6, Unauthorized activity to HTTP: GET /
show less
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 1220
GET /
User-Agent: Mozilla/5.0 (Macintosh; Inte ...
show moreHoneypot [fra-de-honeypot]: HTTP/1.1 request on 1220
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 1220 [2] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Honeypot hit: HTTP/1.1 request on 2021
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_ ...
show moreHoneypot hit: HTTP/1.1 request on 2021
GET /
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 2021 [2] TCP
show less