66.228.47.163

Classification: Malicious

66.228.47.163 is a malicious IP address in Cedar Knolls, US. 1,518 sightings from 5 threat sources (Port Scanner, Hacking), last seen 2026-10-16.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Unauthorized scanning of hosts Blocklist.net.ua 2026-09-18 16:25:45 2026-10-16 16:14:03 attacker malicious-activity reconnaissance
Hacking AbuseIPDB 2026-07-12 04:45:11 2026-10-15 21:11:33 attacker malicious-activity
Port Scanner AbuseIPDB 2026-07-03 07:08:58 2026-10-15 21:11:33 attacker malicious-activity reconnaissance
Malicious Host CIArmy 2026-07-07 20:02:03 2026-10-13 20:06:53 attacker malicious-activity
Bruteforce AbuseIPDB 2026-07-13 13:08:30 2026-10-11 14:56:53 attacker malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2026-07-16 11:07:16 2026-10-05 10:08:36 attacker malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2026-07-16 11:07:14 2026-10-05 10:08:34 attacker malicious-activity
HTTP Attacker AbuseIPDB 2026-07-12 02:00:23 2026-10-03 19:49:34 attacker malicious-activity
Phishing AbuseIPDB 2026-09-30 12:05:57 2026-09-30 12:05:57 malicious-activity phishing
HTTP Scrapper AbuseIPDB 2026-07-27 20:53:09 2026-09-30 05:40:29 attacker malicious-activity
SQL Injection AbuseIPDB 2026-09-26 03:20:39 2026-09-26 03:20:39 attacker malicious-activity
Malicious Host AbuseIPDB 2026-07-13 23:22:22 2026-09-24 01:09:33 attacker compromised malicious-activity
SSH Attacker AbuseIPDB 2026-07-19 12:02:33 2026-09-19 14:11:07 attacker malicious-activity
Mail Spammer AbuseIPDB 2026-07-14 03:29:22 2026-09-12 11:46:39 attacker malicious-activity
Bruteforce login attacker Blocklist.de 2026-09-08 09:00:38 2026-09-09 09:00:41 attacker malicious-activity
HTTP Attacker Blocklist.de 2026-09-08 07:00:46 2026-09-09 07:00:53 attacker malicious-activity
DDoS Attacker AbuseIPDB 2026-07-13 13:08:30 2026-09-04 17:59:53 attacker malicious-activity
SIP Attacker AbuseIPDB 2026-07-22 23:07:33 2026-07-22 23:07:33 attacker malicious-activity
DNS Poisoning AbuseIPDB 2026-07-15 01:07:19 2026-07-15 01:07:19 compromised malicious-activity
Suspicious Host AbuseIPDB 2025-01-09 17:57:09 2025-01-12 20:07:59 anomalous-activity

Tags

apache ddos rfi attacker login bruteforce bot joomla wordpress abuse

Whois information

AS name
AS63949 Linode
AS registry
arin
AS date
2011-02-25 00:00:00
AS CIDR
66.228.32.0/20
CIDR
66.228.32.0/19
Registrant
Linode
Address
145 Broadway
City
Cedar Knolls
State
NJ
Postal code
07927
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2025-01-10 08:18:13
Last updated
2026-10-16 16:14:03

Malicious IPs in the same CIDR

66.228.41.127 66.228.32.115 66.228.42.113 66.228.44.217 66.228.44.215 66.228.35.88 66.228.34.203 66.228.40.35 66.228.47.92 66.228.47.163 66.228.40.98 66.228.43.238 66.228.44.89 66.228.43.252 66.228.43.8 66.228.47.125 66.228.33.190 66.228.37.128