162.142.125.33

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Censys Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	162.142.125.33 - - [04/Oct/2020:18:46:06 +0100] "GET / HTTP/1.1" 444 0 "-" "-" ...	2020-10-10 19:59:09
attackspambots	Unauthorized connection attempt from IP address 162.142.125.33 on Port 3306(MYSQL)	2020-09-13 22:24:21
attack	Unauthorized connection attempt from IP address 162.142.125.33 on port 465	2020-09-13 14:20:17
attack	Unauthorized connection attempt from IP address 162.142.125.33 on Port 465(SMTPS)	2020-09-13 06:04:49
attack	Unauthorized SSH login attempts	2020-09-03 20:22:47
attack	Unauthorized access to SSH at 3/Sep/2020:02:20:02 +0000. Received: (SSH-2.0-Go)	2020-09-03 12:07:17
attack	Sep 02 13:14:19 askasleikir sshd[8041]: Connection reset by 162.142.125.33 port 55086	2020-09-03 04:26:20
attackspambots	Unauthorized connection attempt detected from IP address 162.142.125.33 to port 5900 [T]	2020-09-01 14:15:20

Comments on same subnet:

IP	Type	Details	Datetime
162.142.125.86	botsattack	Bad IP	2025-03-06 19:09:23
162.142.125.197	attackproxy	Fraud connect	2024-09-05 12:48:39
162.142.125.12	proxy	Scan	2023-06-05 16:37:12
162.142.125.11	proxy	VPN fraud	2023-06-05 12:59:49
162.142.125.223	proxy	VPN fraud	2023-05-31 21:46:50
162.142.125.225	proxy	VPN fraud	2023-05-29 12:47:59
162.142.125.84	proxy	VPN scan	2023-05-22 12:51:31
162.142.125.224	proxy	VPN fraud	2023-05-18 12:47:47
162.142.125.89	proxy	VPN f	2023-05-13 12:57:08
162.142.125.217	proxy	VPN fraud	2023-05-13 12:54:50
162.142.125.14	proxy	VPN fraud	2023-05-12 14:21:18
162.142.125.214	proxy	VPN fraud	2023-03-31 12:54:37
162.142.125.87	proxy	VPN fraud	2023-03-29 12:58:45
162.142.125.13	proxy	VPN fraud	2023-03-29 12:56:42
162.142.125.10	attack	DANGER DUDE ATTACK	2022-02-18 10:02:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.142.125.33
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44308
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.142.125.33.			IN	A

;; AUTHORITY SECTION:
.			467	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090100 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 01 14:15:13 CST 2020
;; MSG SIZE  rcvd: 118

Host info

33.125.142.162.in-addr.arpa domain name pointer scanner-04.ch1.censys-scanner.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
33.125.142.162.in-addr.arpa	name = scanner-04.ch1.censys-scanner.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
213.183.101.89	attackbots	Jul 17 02:57:53 giegler sshd[13591]: Invalid user sav from 213.183.101.89 port 45494	2019-07-17 09:04:20
177.101.139.136	attack	Jul 17 02:48:54 mail sshd\[15875\]: Invalid user toby from 177.101.139.136 port 35582 Jul 17 02:48:54 mail sshd\[15875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.101.139.136 Jul 17 02:48:56 mail sshd\[15875\]: Failed password for invalid user toby from 177.101.139.136 port 35582 ssh2 Jul 17 02:54:51 mail sshd\[16648\]: Invalid user test from 177.101.139.136 port 33718 Jul 17 02:54:51 mail sshd\[16648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.101.139.136	2019-07-17 09:16:40
47.223.114.69	attack	Jul 16 23:06:24 localhost sshd\[4310\]: Invalid user pi from 47.223.114.69 Jul 16 23:06:24 localhost sshd\[4312\]: Invalid user pi from 47.223.114.69 Jul 16 23:06:24 localhost sshd\[4310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.223.114.69 Jul 16 23:06:24 localhost sshd\[4312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.223.114.69 Jul 16 23:06:26 localhost sshd\[4310\]: Failed password for invalid user pi from 47.223.114.69 port 47586 ssh2 ...	2019-07-17 09:37:39
119.204.246.89	attackbotsspam	2019-07-16T23:52:00.602977abusebot-8.cloudsearch.cf sshd\[12945\]: Invalid user odoo from 119.204.246.89 port 37152	2019-07-17 09:04:40
69.135.100.82	attack	Jul 16 20:43:45 TORMINT sshd\[22537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.135.100.82 user=root Jul 16 20:43:46 TORMINT sshd\[22537\]: Failed password for root from 69.135.100.82 port 37896 ssh2 Jul 16 20:49:19 TORMINT sshd\[22911\]: Invalid user admin from 69.135.100.82 Jul 16 20:49:20 TORMINT sshd\[22911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.135.100.82 ...	2019-07-17 09:00:35
119.226.21.114	attackbotsspam	fraudulent SSH attempt	2019-07-17 09:00:09
119.249.54.236	attackspam	Apr 11 14:53:21 server sshd\[119600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.249.54.236 user=root Apr 11 14:53:22 server sshd\[119600\]: Failed password for root from 119.249.54.236 port 41424 ssh2 Apr 11 14:53:29 server sshd\[119602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.249.54.236 user=root ...	2019-07-17 08:59:36
103.242.15.86	attack	2019-07-16 16:06:58 H=(lithoexpress.it) [103.242.15.86]:57465 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-07-16 16:06:58 H=(lithoexpress.it) [103.242.15.86]:57465 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-07-16 16:06:59 H=(lithoexpress.it) [103.242.15.86]:57465 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-07-17 09:25:33
185.175.93.105	attackspambots	Port scan attempt detected by AWS-CCS, CTS, India	2019-07-17 09:31:47
174.103.158.175	attackbots	The only information I have is the user BKANE was attempting to brute force into one of my SQL servers to attempt to steal a database. When this attempt did not work, he resorted to a lowly DDOS attempt.	2019-07-17 08:58:43
112.85.42.194	attackspambots	Jul 17 03:28:46 legacy sshd[10646]: Failed password for root from 112.85.42.194 port 21365 ssh2 Jul 17 03:29:35 legacy sshd[10674]: Failed password for root from 112.85.42.194 port 63456 ssh2 ...	2019-07-17 09:34:49
119.18.154.235	attackspambots	Jul 8 18:01:41 server sshd\[122772\]: Invalid user xu from 119.18.154.235 Jul 8 18:01:41 server sshd\[122772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.18.154.235 Jul 8 18:01:44 server sshd\[122772\]: Failed password for invalid user xu from 119.18.154.235 port 43296 ssh2 ...	2019-07-17 09:12:05
185.53.88.125	attack	Jul 17 01:49:30 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=185.53.88.125 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=11198 PROTO=TCP SPT=47074 DPT=9898 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-07-17 09:43:27
139.59.79.56	attackspam	2019-07-16 UTC: 3x - dino,roman(2x)	2019-07-17 09:22:52
51.68.138.143	attackspam	Jul 17 03:27:14 localhost sshd\[3896\]: Invalid user flor from 51.68.138.143 port 59132 Jul 17 03:27:14 localhost sshd\[3896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.138.143 Jul 17 03:27:16 localhost sshd\[3896\]: Failed password for invalid user flor from 51.68.138.143 port 59132 ssh2	2019-07-17 09:42:35

Recently Reported IPs

41.13.158.224	184.159.222.145	54.132.141.44	101.133.174.69
32.57.52.209	250.9.1.26	203.254.198.80	131.45.193.166
122.150.17.140	91.144.222.178	63.233.110.1	253.14.32.139
50.67.3.223	237.171.206.100	73.188.141.80	145.36.241.66
134.159.121.85	205.176.76.190	35.34.244.212	6.124.54.181