66.132.172.154
Classification: Whitelisted
66.132.172.154 is a whitelisted (trusted) IP address. Reported by 6 threat sources, last seen 2026-09-14. Network: AS398324 Censys, Inc..
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-03-21 02:10:42 | 2026-09-14 09:07:47 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-03-21 02:10:39 | 2026-09-14 09:07:45 | attacker malicious-activity | |
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-09-09 16:03:27 | 2026-09-13 16:22:59 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2026-03-20 15:04:41 | 2026-09-11 20:01:13 | attacker malicious-activity | |
| Empty reason | Blocklist.net.ua | 2026-09-11 16:25:38 | 2026-09-11 16:25:38 | attacker malicious-activity | |
| Unknown malware | ThreatFox Abuse.ch | 2026-09-04 23:09:25 | 2026-09-04 23:25:35 | malicious-activity | |
| Matched whitelist source: Censys_registrant | Maltiverse | 2026-09-04 01:07:06 | 2026-09-04 01:07:06 | benign | |
| Port Scanner | AbuseIPDB | 2026-03-19 21:36:54 | 2026-09-04 00:42:18 | anomalous-activity attacker malicious-activity reconnaissance | |
| Malicious Host | AbuseIPDB | 2026-03-20 23:11:40 | 2026-09-03 11:36:58 | attacker compromised malicious-activity | |
| Hacking | AbuseIPDB | 2026-03-19 22:54:00 | 2026-09-03 11:36:58 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-03-19 22:54:00 | 2026-09-03 08:16:54 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-06-06 05:36:32 | 2026-09-02 15:32:01 | anomalous-activity attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-06-06 05:36:32 | 2026-09-02 15:32:01 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-06-24 17:30:42 | 2026-08-31 00:02:20 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-03-19 23:55:41 | 2026-03-19 23:55:41 | anomalous-activity | |
| DDoS Attacker | AbuseIPDB | 2026-03-19 22:47:36 | 2026-03-19 22:54:00 | malicious-activity |
Tags
port:22060 suricata t-pot abuseWhois information
- AS name
- AS398324 Censys, Inc.
- Registrant
- Censys, Inc.
- City
- Ann Arbor
- State
- MI
- Postal code
- 48109
- Country
- US — United States 🇺🇸
- First indexed
- 2026-03-20 01:05:06
- Last updated
- 2026-09-14 09:07:57