66.228.41.127
Classification: Malicious
66.228.41.127 is a malicious IP address in Cedar Knolls, US. 7,572 sightings from 6 threat sources (Port Scanner, Hacking), last seen 2026-10-18.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-05-20 02:11:47 | 2026-10-18 11:09:48 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-05-20 02:11:44 | 2026-10-18 11:09:46 | attacker malicious-activity | |
| Mail Spammer | Barracuda | 2023-05-07 15:56:08 | 2026-10-16 18:12:42 | attacker malicious-activity | |
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-09-13 16:23:13 | 2026-10-16 16:14:03 | attacker malicious-activity reconnaissance | |
| Malicious Host | CIArmy | 2026-05-19 15:00:35 | 2026-10-13 20:06:53 | attacker malicious-activity | |
| Empty reason | Blocklist.net.ua | 2026-09-12 16:06:02 | 2026-09-12 16:06:02 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-05-13 10:07:31 | 2026-09-05 10:20:43 | attacker malicious-activity reconnaissance | |
| Hacking | AbuseIPDB | 2026-05-18 14:45:12 | 2026-09-05 09:59:43 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-05-18 14:45:12 | 2026-09-05 08:10:28 | attacker compromised malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-05-18 20:36:47 | 2026-09-05 08:10:28 | attacker malicious-activity | |
| SIP Attacker | AbuseIPDB | 2026-08-05 05:53:55 | 2026-09-05 05:53:20 | attacker malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-05-20 00:51:09 | 2026-09-04 23:26:49 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-05-18 23:26:43 | 2026-09-04 08:39:25 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-05-19 12:41:32 | 2026-09-04 08:39:25 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-05-18 20:36:47 | 2026-09-03 15:50:28 | attacker malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-05-19 11:50:05 | 2026-09-01 15:25:32 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-05-29 01:21:05 | 2026-09-01 01:25:34 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-05-21 06:36:16 | 2026-08-31 17:35:25 | iot malicious-activity | |
| Known Attacker | AbuseIPDB | 2026-05-19 11:50:05 | 2026-08-16 13:00:05 | attacker malicious-activity | |
| Proxy | AbuseIPDB | 2026-05-28 11:09:11 | 2026-08-15 21:00:53 | anonymization proxy | |
| IMAP Attacker | AbuseIPDB | 2026-05-20 17:13:13 | 2026-07-17 17:38:20 | attacker malicious-activity | |
| DNS Poisoning | AbuseIPDB | 2026-07-05 00:17:51 | 2026-07-07 00:51:59 | compromised malicious-activity | |
| DNS Compromise | AbuseIPDB | 2026-07-05 00:19:14 | 2026-07-05 00:19:14 | compromised malicious-activity | |
| SQL Injection | AbuseIPDB | 2026-05-18 22:47:28 | 2026-07-03 07:40:52 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2023-05-07 00:00:00 | 2023-05-07 00:00:00 | malicious-activity |
Tags
abuseWhois information
- AS name
- AS63949 Linode
- AS registry
- arin
- AS date
- 2011-02-25 00:00:00
- AS CIDR
- 66.228.32.0/20
- CIDR
- 66.228.32.0/19
- Registrant
- Linode
- Address
- 145 Broadway
- City
- Cedar Knolls
- State
- NJ
- Postal code
- 07927
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2023-05-07 15:56:08
- Last updated
- 2026-10-18 11:10:01
Malicious IPs in the same CIDR
66.228.41.127 66.228.32.115 66.228.42.113 66.228.44.217 66.228.44.215 66.228.35.88 66.228.34.203 66.228.40.35 66.228.47.92 66.228.47.163 66.228.40.98 66.228.43.238 66.228.44.89 66.228.43.252 66.228.43.8 66.228.47.125 66.228.33.190 66.228.37.128