City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 66.132.195.0 - 66.132.195.255
CIDR: 66.132.195.0/24
NetName: CENSY
NetHandle: NET-66-132-195-0-1
Parent: NET66 (NET-66-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Censys, Inc. (CENSY)
RegDate: 2024-05-14
Updated: 2024-05-14
Ref: https://rdap.arin.net/registry/ip/66.132.195.0
OrgName: Censys, Inc.
OrgId: CENSY
Address: 116 1/2 S Main Street
City: Ann Arbor
StateProv: MI
PostalCode: 48104
Country: US
RegDate: 2018-08-06
Updated: 2019-08-03
Comment: https://censys.io
Ref: https://rdap.arin.net/registry/entity/CENSY
OrgAbuseHandle: CAT20-ARIN
OrgAbuseName: Censys Abuse Team
OrgAbusePhone: +1-248-629-0125
OrgAbuseEmail: scan-abuse@censys.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/CAT20-ARIN
OrgNOCHandle: COT12-ARIN
OrgNOCName: Censys Operations Team
OrgNOCPhone: +1-248-629-0125
OrgNOCEmail: ops@censys.com
OrgNOCRef: https://rdap.arin.net/registry/entity/COT12-ARIN
OrgTechHandle: COT12-ARIN
OrgTechName: Censys Operations Team
OrgTechPhone: +1-248-629-0125
OrgTechEmail: ops@censys.com
OrgTechRef: https://rdap.arin.net/registry/entity/COT12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.132.195.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4750
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.132.195.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070101 1800 900 604800 86400
;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 02 02:00:05 CST 2026
;; MSG SIZE rcvd: 106
54.195.132.66.in-addr.arpa domain name pointer 54.195.132.66.censys-scanner.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
54.195.132.66.in-addr.arpa name = 54.195.132.66.censys-scanner.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 120.131.3.144 | attackspam | May 12 05:57:45 *** sshd[2548]: User www-data from 120.131.3.144 not allowed because not listed in AllowUsers |
2020-05-12 14:39:03 |
| 111.229.101.155 | attackbots | May 12 07:54:16 vps639187 sshd\[28023\]: Invalid user nagios from 111.229.101.155 port 46524 May 12 07:54:16 vps639187 sshd\[28023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.101.155 May 12 07:54:18 vps639187 sshd\[28023\]: Failed password for invalid user nagios from 111.229.101.155 port 46524 ssh2 ... |
2020-05-12 14:44:19 |
| 195.54.167.15 | attack | May 12 09:01:52 debian-2gb-nbg1-2 kernel: \[11525776.301878\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.167.15 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=32539 PROTO=TCP SPT=48020 DPT=20002 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-12 15:05:11 |
| 202.98.248.123 | attack | May 12 05:41:24 Ubuntu-1404-trusty-64-minimal sshd\[26431\]: Invalid user yhlee from 202.98.248.123 May 12 05:41:24 Ubuntu-1404-trusty-64-minimal sshd\[26431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.98.248.123 May 12 05:41:26 Ubuntu-1404-trusty-64-minimal sshd\[26431\]: Failed password for invalid user yhlee from 202.98.248.123 port 40758 ssh2 May 12 06:03:38 Ubuntu-1404-trusty-64-minimal sshd\[8157\]: Invalid user hadoop from 202.98.248.123 May 12 06:03:38 Ubuntu-1404-trusty-64-minimal sshd\[8157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.98.248.123 |
2020-05-12 15:04:50 |
| 206.189.239.103 | attackbots | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-05-12 15:17:53 |
| 109.238.215.116 | attack | Virus on this IP ! |
2020-05-12 14:54:20 |
| 106.12.161.99 | attack | May 12 07:56:27 ArkNodeAT sshd\[16757\]: Invalid user deploy from 106.12.161.99 May 12 07:56:27 ArkNodeAT sshd\[16757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.161.99 May 12 07:56:28 ArkNodeAT sshd\[16757\]: Failed password for invalid user deploy from 106.12.161.99 port 55194 ssh2 |
2020-05-12 14:43:57 |
| 157.245.104.96 | attackbotsspam | $f2bV_matches |
2020-05-12 14:49:26 |
| 159.89.207.146 | attack | $f2bV_matches |
2020-05-12 15:08:28 |
| 180.71.47.198 | attack | $f2bV_matches |
2020-05-12 15:10:06 |
| 111.30.9.82 | attackbots | 2020-05-12 05:52:01,721 fail2ban.actions: WARNING [ssh] Ban 111.30.9.82 |
2020-05-12 15:03:15 |
| 27.159.65.115 | attack | invalid login attempt (root) |
2020-05-12 14:41:08 |
| 80.229.37.136 | attackbotsspam | port 23 |
2020-05-12 15:22:58 |
| 139.59.15.251 | attack | May 12 06:37:45 PorscheCustomer sshd[22101]: Failed password for postgres from 139.59.15.251 port 60816 ssh2 May 12 06:41:49 PorscheCustomer sshd[22390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.15.251 May 12 06:41:51 PorscheCustomer sshd[22390]: Failed password for invalid user kk from 139.59.15.251 port 40848 ssh2 ... |
2020-05-12 14:43:31 |
| 180.250.28.34 | attackbotsspam | CMS (WordPress or Joomla) login attempt. |
2020-05-12 14:57:41 |