66.132.172.97📋 Copy

IP Intelligence Briefing: 66.132.172.97

Date: 2026-06-18

---

**1. Core Profile**

• Risk Score: Moderate (50/100)
• Owner: Censys, Inc. (ASN 398324)
• Geolocation: Boston, MA, US (ARIN-regulated)
• Network Role: Firewalled host with no open services (no TLS/HTTP detected).
• Threat Indicators: No malicious activity, spam, or known attacker associations.

---

**2. Observation History**

• Latest Signals (2026-06-18):

- DNSSEC validation confirmed.

- CAA records present but no DNSBL listings.

- Low threat persistence (0 persistent threats).

• Trend: Stable risk profile with no recent spikes.

---

**3. Relationships**

• DNS Associations: Linked to `97.172.132.66.censys-scanner.com` (Censys scanner infrastructure).
• Network Context: Part of the "CENSY" network, which has mixed risk siblings (64 medium/low-risk IPs in /24 subnet).
• No Known Campaigns or Malware Signatures.

---

**4. Neighborhood Analysis**

• Subnet: 66.132.172.0/24
• Abuse Density: 52.13% (high-risk subnet).
• Neighbor Risks:

- 49/95 siblings flagged as high/medium risk.

- 19 active IPs in subnet, 49 with threat indicators.

• Inherited Risk: 20% (moderate concern due to subnet context).

---

**5. Recommendations**

• Monitor: Traffic to/from this subnet due to high abuse density.
• Block/Allow: Consider restricting outbound access to the Censys scanner domain (`censys-scanner.com`) if not required.
• Investigate: Verify DNS records for `97.172.132.66.censys-scanner.com` to ensure legitimacy.
• Subnet-Level Mitigation: Evaluate isolating the 66.132.172.0/24 subnet if critical assets are exposed.

---

Note: This IP appears to be a legitimate Censys scanner host, but its subnet has a high risk profile. Balance operational needs with network segmentation to mitigate potential exposure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.