162.142.125.26

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Censys Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	firewall-block, port(s): 33389/tcp	2020-10-09 02:16:10
attack	Found on CINS badguys / proto=6 . srcport=51956 . dstport=445 SMB . (1122)	2020-10-08 18:13:40
attackspam	firewall-block, port(s): 21/tcp	2020-09-12 02:22:00
attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-09-11 18:14:54

Comments on same subnet:

IP	Type	Details	Datetime
162.142.125.86	botsattack	Bad IP	2025-03-06 19:09:23
162.142.125.197	attackproxy	Fraud connect	2024-09-05 12:48:39
162.142.125.12	proxy	Scan	2023-06-05 16:37:12
162.142.125.11	proxy	VPN fraud	2023-06-05 12:59:49
162.142.125.223	proxy	VPN fraud	2023-05-31 21:46:50
162.142.125.225	proxy	VPN fraud	2023-05-29 12:47:59
162.142.125.84	proxy	VPN scan	2023-05-22 12:51:31
162.142.125.224	proxy	VPN fraud	2023-05-18 12:47:47
162.142.125.89	proxy	VPN f	2023-05-13 12:57:08
162.142.125.217	proxy	VPN fraud	2023-05-13 12:54:50
162.142.125.14	proxy	VPN fraud	2023-05-12 14:21:18
162.142.125.214	proxy	VPN fraud	2023-03-31 12:54:37
162.142.125.87	proxy	VPN fraud	2023-03-29 12:58:45
162.142.125.13	proxy	VPN fraud	2023-03-29 12:56:42
162.142.125.10	attack	DANGER DUDE ATTACK	2022-02-18 10:02:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.142.125.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2194
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.142.125.26.			IN	A

;; AUTHORITY SECTION:
.			391	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091100 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 11 18:14:51 CST 2020
;; MSG SIZE  rcvd: 118

Host info

26.125.142.162.in-addr.arpa domain name pointer scanner-01.ch1.censys-scanner.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
26.125.142.162.in-addr.arpa	name = scanner-01.ch1.censys-scanner.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.136.39.254	attackbots	Tried sshing with brute force.	2020-07-29 01:30:12
54.38.187.5	attackbots	Jul 28 19:23:22 piServer sshd[1276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.187.5 Jul 28 19:23:24 piServer sshd[1276]: Failed password for invalid user yepeng from 54.38.187.5 port 36124 ssh2 Jul 28 19:27:22 piServer sshd[1745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.187.5 ...	2020-07-29 01:32:01
128.199.81.66	attackbots	Jul 28 15:23:37 hidden sshd[32163]: Failed password for invalid user cbiuser from 128.199.81.66 port 57302 ssh2 Jul 28 16:03:23 hidden sshd[63238]: Invalid user wlk-lab from 128.199.81.66 port 41482 Jul 28 16:03:23 hidden sshd[63238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.81.66 Jul 28 16:03:25 hidden sshd[63238]: Failed password for invalid user wlk-lab from 128.199.81.66 port 41482 ssh2 Jul 28 16:18:59 hidden sshd[35976]: Invalid user andrey from 128.199.81.66 port 55164	2020-07-29 01:21:16
129.211.173.127	attackspam	Jul 28 16:50:32 ip106 sshd[12609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.173.127 Jul 28 16:50:33 ip106 sshd[12609]: Failed password for invalid user ibm from 129.211.173.127 port 54316 ssh2 ...	2020-07-29 00:58:44
213.14.250.182	attackspambots	Unauthorized connection attempt from IP address 213.14.250.182 on Port 445(SMB)	2020-07-29 01:28:33
180.126.162.146	attack	Jul 28 13:50:22 php sshd[14723]: Bad protocol version identification '' from 180.126.162.146 port 53571 Jul 28 13:50:29 php sshd[14724]: Invalid user NetLinx from 180.126.162.146 port 53940 Jul 28 13:50:30 php sshd[14724]: Connection closed by 180.126.162.146 port 53940 [preauth] Jul 28 13:50:40 php sshd[14726]: Invalid user plexuser from 180.126.162.146 port 56854 Jul 28 13:50:40 php sshd[14726]: Connection closed by 180.126.162.146 port 56854 [preauth] Jul 28 13:50:48 php sshd[14809]: Connection closed by 180.126.162.146 port 60963 [preauth] Jul 28 13:50:59 php sshd[14811]: Connection closed by 180.126.162.146 port 35856 [preauth] Jul 28 13:51:09 php sshd[14847]: Connection closed by 180.126.162.146 port 40119 [preauth] Jul 28 13:51:21 php sshd[14856]: Connection closed by 180.126.162.146 port 43811 [preauth] Jul 28 13:51:33 php sshd[14962]: Connection closed by 180.126.162.146 port 48587 [preauth] Jul 28 13:51:43 php sshd[14964]: Connection closed by 180.126.162.146 ........ -------------------------------	2020-07-29 01:14:11
106.12.121.179	attackbotsspam	Jul 28 18:44:34 pornomens sshd\[11895\]: Invalid user teraria from 106.12.121.179 port 49516 Jul 28 18:44:34 pornomens sshd\[11895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.121.179 Jul 28 18:44:35 pornomens sshd\[11895\]: Failed password for invalid user teraria from 106.12.121.179 port 49516 ssh2 ...	2020-07-29 01:01:20
2403:6200:8000:a6:fdcd:2d23:11c7:11a9	attackbots	xmlrpc attack	2020-07-29 01:21:54
59.16.176.94	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-07-29 01:11:22
195.231.81.43	attack	Jul 28 11:52:27 Host-KEWR-E sshd[7799]: Disconnected from invalid user jhua 195.231.81.43 port 51652 [preauth] ...	2020-07-29 01:11:10
88.75.11.19	attackbots	Invalid user hysms from 88.75.11.19 port 49049	2020-07-29 01:09:43
180.151.56.114	attackspambots	SSH Brute-Force. Ports scanning.	2020-07-29 01:06:11
191.235.239.47	attackbotsspam	TCP (SYN) 191.235.239.47:25618 -> port 23, len 44	2020-07-29 00:52:43
177.94.201.56	attack	Jul 28 17:11:04 mail sshd[15634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.94.201.56 Jul 28 17:11:06 mail sshd[15634]: Failed password for invalid user yangweifei from 177.94.201.56 port 54454 ssh2 ...	2020-07-29 00:53:20
89.248.174.215	attack	10 attempts against mh-misc-ban on creek	2020-07-29 01:25:27

Recently Reported IPs

77.94.126.68	233.42.138.38	60.129.24.84	191.227.76.140
220.135.244.139	86.91.104.37	186.162.14.67	148.77.224.103
190.193.70.20	169.132.127.164	121.203.58.46	180.142.213.68
65.18.146.200	149.255.60.185	248.8.70.150	143.254.14.180
70.56.143.111	160.213.183.161	192.99.175.86	185.100.87.135