City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 66.132.195.0 - 66.132.195.255
CIDR: 66.132.195.0/24
NetName: CENSY
NetHandle: NET-66-132-195-0-1
Parent: NET66 (NET-66-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Censys, Inc. (CENSY)
RegDate: 2024-05-14
Updated: 2024-05-14
Ref: https://rdap.arin.net/registry/ip/66.132.195.0
OrgName: Censys, Inc.
OrgId: CENSY
Address: 116 1/2 S Main Street
City: Ann Arbor
StateProv: MI
PostalCode: 48104
Country: US
RegDate: 2018-08-06
Updated: 2019-08-03
Comment: https://censys.io
Ref: https://rdap.arin.net/registry/entity/CENSY
OrgAbuseHandle: CAT20-ARIN
OrgAbuseName: Censys Abuse Team
OrgAbusePhone: +1-248-629-0125
OrgAbuseEmail: scan-abuse@censys.io
OrgAbuseRef: https://rdap.arin.net/registry/entity/CAT20-ARIN
OrgTechHandle: COT12-ARIN
OrgTechName: Censys Operations Team
OrgTechPhone: +1-248-629-0125
OrgTechEmail: ops@censys.io
OrgTechRef: https://rdap.arin.net/registry/entity/COT12-ARIN
OrgNOCHandle: COT12-ARIN
OrgNOCName: Censys Operations Team
OrgNOCPhone: +1-248-629-0125
OrgNOCEmail: ops@censys.io
OrgNOCRef: https://rdap.arin.net/registry/entity/COT12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.132.195.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37296
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.132.195.55. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026043000 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 30 22:00:17 CST 2026
;; MSG SIZE rcvd: 10655.195.132.66.in-addr.arpa domain name pointer 55.195.132.66.censys-scanner.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
55.195.132.66.in-addr.arpa name = 55.195.132.66.censys-scanner.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 165.227.39.71 | attack | Jul 22 16:05:07 OPSO sshd\[11953\]: Invalid user love from 165.227.39.71 port 36724 Jul 22 16:05:07 OPSO sshd\[11953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.39.71 Jul 22 16:05:09 OPSO sshd\[11953\]: Failed password for invalid user love from 165.227.39.71 port 36724 ssh2 Jul 22 16:12:02 OPSO sshd\[12957\]: Invalid user odoo from 165.227.39.71 port 33188 Jul 22 16:12:02 OPSO sshd\[12957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.39.71 |
2019-07-23 05:58:45 |
| 77.83.85.185 | attackbots | WordPress XMLRPC scan :: 77.83.85.185 0.172 BYPASS [22/Jul/2019:23:10:59 1000] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 200 382 "https://www.[censored_1]/" "PHP/6.3.86" |
2019-07-23 05:58:26 |
| 132.232.42.181 | attackspambots | Jul 22 16:01:24 mail2 sshd[13876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.42.181 user=mysql Jul 22 16:01:26 mail2 sshd[13876]: Failed password for mysql from 132.232.42.181 port 53542 ssh2 Jul 22 16:01:26 mail2 sshd[13876]: Received disconnect from 132.232.42.181: 11: Bye Bye [preauth] Jul 22 16:16:23 mail2 sshd[16294]: Did not receive identification string from 132.232.42.181 Jul 22 16:23:31 mail2 sshd[17191]: Invalid user admin from 132.232.42.181 Jul 22 16:23:31 mail2 sshd[17191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.42.181 Jul 22 16:23:33 mail2 sshd[17191]: Failed password for invalid user admin from 132.232.42.181 port 59882 ssh2 Jul 22 16:23:34 mail2 sshd[17191]: Received disconnect from 132.232.42.181: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=132.232.42.181 |
2019-07-23 05:33:24 |
| 211.80.89.37 | attack | Jul 22 14:59:47 mxgate1 postfix/postscreen[7227]: CONNECT from [211.80.89.37]:23842 to [176.31.12.44]:25 Jul 22 14:59:47 mxgate1 postfix/dnsblog[7952]: addr 211.80.89.37 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 22 14:59:47 mxgate1 postfix/dnsblog[7943]: addr 211.80.89.37 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 22 14:59:53 mxgate1 postfix/postscreen[7227]: DNSBL rank 3 for [211.80.89.37]:23842 Jul x@x Jul 22 14:59:54 mxgate1 postfix/postscreen[7227]: HANGUP after 1.6 from [211.80.89.37]:23842 in tests after SMTP handshake Jul 22 14:59:54 mxgate1 postfix/postscreen[7227]: DISCONNECT [211.80.89.37]:23842 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=211.80.89.37 |
2019-07-23 06:04:10 |
| 41.60.235.174 | attackbotsspam | [21/Jul/2019:11:50:31 -0400] "GET / HTTP/1.1" Chrome 52.0 UA |
2019-07-23 05:49:38 |
| 191.53.254.1 | attack | failed_logins |
2019-07-23 06:12:19 |
| 179.164.177.203 | attackbotsspam | Jul 22 14:52:13 srv1 sshd[32099]: Address 179.164.177.203 maps to 179-164-177-203.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 22 14:52:14 srv1 sshd[32099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.164.177.203 user=r.r Jul 22 14:52:16 srv1 sshd[32099]: Failed password for r.r from 179.164.177.203 port 30528 ssh2 Jul 22 14:52:16 srv1 sshd[32100]: Received disconnect from 179.164.177.203: 11: Bye Bye Jul 22 14:52:19 srv1 sshd[32120]: Address 179.164.177.203 maps to 179-164-177-203.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 22 14:52:19 srv1 sshd[32120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.164.177.203 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=179.164.177.203 |
2019-07-23 05:35:51 |
| 202.5.198.1 | attack | Jul 22 23:21:53 meumeu sshd[11927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.5.198.1 Jul 22 23:21:54 meumeu sshd[11927]: Failed password for invalid user test2 from 202.5.198.1 port 50382 ssh2 Jul 22 23:27:29 meumeu sshd[12987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.5.198.1 ... |
2019-07-23 05:28:31 |
| 59.52.97.130 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2019-07-23 06:14:33 |
| 104.206.128.10 | attackspambots | 22.07.2019 19:19:11 Connection to port 21 blocked by firewall |
2019-07-23 05:54:09 |
| 47.95.195.212 | attack | www.geburtshaus-fulda.de 47.95.195.212 \[22/Jul/2019:15:11:14 +0200\] "POST /wp-login.php HTTP/1.1" 200 5790 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 47.95.195.212 \[22/Jul/2019:15:11:19 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4106 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-07-23 05:42:25 |
| 113.173.222.241 | attackspambots | Jul 23 00:07:12 srv-4 sshd\[29413\]: Invalid user admin from 113.173.222.241 Jul 23 00:07:12 srv-4 sshd\[29413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.173.222.241 Jul 23 00:07:14 srv-4 sshd\[29413\]: Failed password for invalid user admin from 113.173.222.241 port 42189 ssh2 ... |
2019-07-23 05:43:14 |
| 51.77.221.191 | attackbotsspam | Reported by AbuseIPDB proxy server. |
2019-07-23 05:44:06 |
| 183.91.73.114 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 15:39:26,002 INFO [shellcode_manager] (183.91.73.114) no match, writing hexdump (bc01f68d065098ae044d1f740ecc97ae :1865279) - MS17010 (EternalBlue) |
2019-07-23 06:08:56 |
| 185.85.162.242 | attack | Automatic report - Banned IP Access |
2019-07-23 06:16:29 |