City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 66.132.186.0 - 66.132.186.255
CIDR: 66.132.186.0/24
NetName: CENSY
NetHandle: NET-66-132-186-0-1
Parent: NET66 (NET-66-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Censys, Inc. (CENSY)
RegDate: 2024-05-14
Updated: 2024-05-14
Ref: https://rdap.arin.net/registry/ip/66.132.186.0
OrgName: Censys, Inc.
OrgId: CENSY
Address: 116 1/2 S Main Street
City: Ann Arbor
StateProv: MI
PostalCode: 48104
Country: US
RegDate: 2018-08-06
Updated: 2019-08-03
Comment: https://censys.io
Ref: https://rdap.arin.net/registry/entity/CENSY
OrgTechHandle: COT12-ARIN
OrgTechName: Censys Operations Team
OrgTechPhone: +1-248-629-0125
OrgTechEmail: ops@censys.com
OrgTechRef: https://rdap.arin.net/registry/entity/COT12-ARIN
OrgAbuseHandle: CAT20-ARIN
OrgAbuseName: Censys Abuse Team
OrgAbusePhone: +1-248-629-0125
OrgAbuseEmail: scan-abuse@censys.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/CAT20-ARIN
OrgNOCHandle: COT12-ARIN
OrgNOCName: Censys Operations Team
OrgNOCPhone: +1-248-629-0125
OrgNOCEmail: ops@censys.com
OrgNOCRef: https://rdap.arin.net/registry/entity/COT12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.132.186.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17725
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.132.186.189. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032600 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 26 23:30:33 CST 2026
;; MSG SIZE rcvd: 107189.186.132.66.in-addr.arpa domain name pointer 189.186.132.66.censys-scanner.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
189.186.132.66.in-addr.arpa name = 189.186.132.66.censys-scanner.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.29.192.203 | attackbots | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2019-07-05 10:46:01 |
| 151.248.56.210 | attack | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2019-07-05 10:45:34 |
| 134.209.157.162 | attackbotsspam | Jul 5 04:22:44 vtv3 sshd\[11900\]: Invalid user kan from 134.209.157.162 port 49774 Jul 5 04:22:44 vtv3 sshd\[11900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.157.162 Jul 5 04:22:46 vtv3 sshd\[11900\]: Failed password for invalid user kan from 134.209.157.162 port 49774 ssh2 Jul 5 04:28:03 vtv3 sshd\[14360\]: Invalid user gitolite from 134.209.157.162 port 48720 Jul 5 04:28:03 vtv3 sshd\[14360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.157.162 Jul 5 04:38:13 vtv3 sshd\[19379\]: Invalid user nm from 134.209.157.162 port 40338 Jul 5 04:38:14 vtv3 sshd\[19379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.157.162 Jul 5 04:38:16 vtv3 sshd\[19379\]: Failed password for invalid user nm from 134.209.157.162 port 40338 ssh2 Jul 5 04:40:50 vtv3 sshd\[21085\]: Invalid user ftpuser from 134.209.157.162 port 38486 Jul 5 04:40:50 vtv3 sshd\[2 |
2019-07-05 10:16:20 |
| 78.128.113.66 | attackbots | dovecot jail smtp auth [dl] |
2019-07-05 10:19:54 |
| 201.42.95.64 | attackbots | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2019-07-05 10:43:32 |
| 185.212.202.251 | attackspam | Many RDP login attempts detected by IDS script |
2019-07-05 10:49:57 |
| 101.101.166.63 | attack | miraniessen.de 101.101.166.63 \[05/Jul/2019:00:52:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 5972 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" miraniessen.de 101.101.166.63 \[05/Jul/2019:00:52:28 +0200\] "POST /wp-login.php HTTP/1.1" 200 5972 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-07-05 10:53:51 |
| 198.108.66.73 | attack | Brute force attack stopped by firewall |
2019-07-05 10:23:59 |
| 54.193.103.38 | attackbots | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2019-07-05 10:47:19 |
| 210.190.168.90 | attack | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2019-07-05 10:26:38 |
| 85.105.43.165 | attackbots | 2019-07-04T23:53:56.959494abusebot-4.cloudsearch.cf sshd\[10497\]: Invalid user jojo from 85.105.43.165 port 43296 |
2019-07-05 10:55:16 |
| 188.165.200.217 | attack | Brute force attack stopped by firewall |
2019-07-05 10:33:29 |
| 118.24.21.105 | attackbotsspam | Automated report - ssh fail2ban: Jul 5 01:24:34 authentication failure Jul 5 01:24:36 wrong password, user=magalie, port=39554, ssh2 Jul 5 01:27:12 authentication failure |
2019-07-05 10:36:46 |
| 111.45.123.117 | attack | Jul 5 02:52:47 localhost sshd\[22171\]: Invalid user network from 111.45.123.117 port 41292 Jul 5 02:52:47 localhost sshd\[22171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.45.123.117 ... |
2019-07-05 11:00:39 |
| 195.201.112.4 | attackbotsspam | NAME : HETZNER-nbg1-dc3 CIDR : 195.201.112.0/21 | STATUS : 403 {Looking for resource vulnerabilities} DDoS Attack Germany - block certain countries :) IP: 195.201.112.4 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-07-05 10:57:51 |