City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 66.132.172.0 - 66.132.172.255
CIDR: 66.132.172.0/24
NetName: CENSY
NetHandle: NET-66-132-172-0-1
Parent: NET66 (NET-66-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Censys, Inc. (CENSY)
RegDate: 2024-05-14
Updated: 2024-05-14
Ref: https://rdap.arin.net/registry/ip/66.132.172.0
OrgName: Censys, Inc.
OrgId: CENSY
Address: 116 1/2 S Main Street
City: Ann Arbor
StateProv: MI
PostalCode: 48104
Country: US
RegDate: 2018-08-06
Updated: 2019-08-03
Comment: https://censys.io
Ref: https://rdap.arin.net/registry/entity/CENSY
OrgAbuseHandle: CAT20-ARIN
OrgAbuseName: Censys Abuse Team
OrgAbusePhone: +1-248-629-0125
OrgAbuseEmail: scan-abuse@censys.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/CAT20-ARIN
OrgTechHandle: COT12-ARIN
OrgTechName: Censys Operations Team
OrgTechPhone: +1-248-629-0125
OrgTechEmail: ops@censys.com
OrgTechRef: https://rdap.arin.net/registry/entity/COT12-ARIN
OrgNOCHandle: COT12-ARIN
OrgNOCName: Censys Operations Team
OrgNOCPhone: +1-248-629-0125
OrgNOCEmail: ops@censys.com
OrgNOCRef: https://rdap.arin.net/registry/entity/COT12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.132.172.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33471
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.132.172.208. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026040200 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 03 00:00:24 CST 2026
;; MSG SIZE rcvd: 107208.172.132.66.in-addr.arpa domain name pointer 208.172.132.66.censys-scanner.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
208.172.132.66.in-addr.arpa name = 208.172.132.66.censys-scanner.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 176.115.100.201 | attackspam | Oct 10 06:01:46 SilenceServices sshd[25343]: Failed password for root from 176.115.100.201 port 55014 ssh2 Oct 10 06:06:06 SilenceServices sshd[26488]: Failed password for root from 176.115.100.201 port 37960 ssh2 |
2019-10-10 18:56:47 |
| 178.137.16.19 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-10 18:38:22 |
| 130.61.28.159 | attackbotsspam | SSH/22 MH Probe, BF, Hack - |
2019-10-10 18:54:04 |
| 2.50.53.125 | attackbots | Automatic report - Port Scan |
2019-10-10 18:40:47 |
| 188.52.164.77 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 10-10-2019 04:45:21. |
2019-10-10 18:36:09 |
| 49.88.112.66 | attackbotsspam | Oct 10 06:40:50 xentho sshd[1164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.66 user=root Oct 10 06:40:52 xentho sshd[1164]: Failed password for root from 49.88.112.66 port 17735 ssh2 Oct 10 06:40:54 xentho sshd[1164]: Failed password for root from 49.88.112.66 port 17735 ssh2 Oct 10 06:40:50 xentho sshd[1164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.66 user=root Oct 10 06:40:52 xentho sshd[1164]: Failed password for root from 49.88.112.66 port 17735 ssh2 Oct 10 06:40:54 xentho sshd[1164]: Failed password for root from 49.88.112.66 port 17735 ssh2 Oct 10 06:40:50 xentho sshd[1164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.66 user=root Oct 10 06:40:52 xentho sshd[1164]: Failed password for root from 49.88.112.66 port 17735 ssh2 Oct 10 06:40:54 xentho sshd[1164]: Failed password for root from 49.88.112.66 port 17735 ... |
2019-10-10 18:49:43 |
| 122.144.143.213 | attack | Oct 10 07:22:34 meumeu sshd[16485]: Failed password for root from 122.144.143.213 port 37748 ssh2 Oct 10 07:27:17 meumeu sshd[17151]: Failed password for root from 122.144.143.213 port 45910 ssh2 ... |
2019-10-10 18:43:39 |
| 218.90.183.100 | attack | RDP Bruteforce |
2019-10-10 19:01:05 |
| 125.105.74.129 | attackspam | Lines containing failures of 125.105.74.129 Oct 10 05:38:30 srv02 sshd[8055]: Invalid user admin from 125.105.74.129 port 50421 Oct 10 05:38:30 srv02 sshd[8055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.105.74.129 Oct 10 05:38:32 srv02 sshd[8055]: Failed password for invalid user admin from 125.105.74.129 port 50421 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.105.74.129 |
2019-10-10 18:50:13 |
| 167.114.253.182 | attackbotsspam | www.handydirektreparatur.de 167.114.253.182 \[10/Oct/2019:05:45:01 +0200\] "POST /wp-login.php HTTP/1.1" 200 5665 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.handydirektreparatur.de 167.114.253.182 \[10/Oct/2019:05:45:01 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4114 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-10 18:52:26 |
| 133.130.107.88 | attack | Oct 10 09:07:15 *** sshd[17213]: Invalid user hadoop from 133.130.107.88 |
2019-10-10 19:05:15 |
| 125.25.82.205 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 10-10-2019 04:45:19. |
2019-10-10 18:39:20 |
| 197.48.135.102 | attack | Oct 10 05:37:58 server378 sshd[2112711]: reveeclipse mapping checking getaddrinfo for host-197.48.135.102.tedata.net [197.48.135.102] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 10 05:37:58 server378 sshd[2112711]: Invalid user admin from 197.48.135.102 Oct 10 05:37:58 server378 sshd[2112711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.48.135.102 Oct 10 05:38:00 server378 sshd[2112711]: Failed password for invalid user admin from 197.48.135.102 port 48578 ssh2 Oct 10 05:38:00 server378 sshd[2112711]: Connection closed by 197.48.135.102 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.48.135.102 |
2019-10-10 18:42:58 |
| 132.248.192.9 | attackspam | 2019-10-10T09:21:02.308639hub.schaetter.us sshd\[6070\]: Invalid user 12345trewq from 132.248.192.9 port 39948 2019-10-10T09:21:02.317451hub.schaetter.us sshd\[6070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.192.9 2019-10-10T09:21:03.971200hub.schaetter.us sshd\[6070\]: Failed password for invalid user 12345trewq from 132.248.192.9 port 39948 ssh2 2019-10-10T09:25:24.958895hub.schaetter.us sshd\[6089\]: Invalid user 12345trewq from 132.248.192.9 port 50720 2019-10-10T09:25:24.967863hub.schaetter.us sshd\[6089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.192.9 ... |
2019-10-10 19:01:31 |
| 218.4.163.146 | attackbots | Automatic report - Banned IP Access |
2019-10-10 18:54:50 |