162.142.125.43

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Censys Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Oct 9 23:44:33 baraca inetd[34221]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp) Oct 9 23:44:35 baraca inetd[34222]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp) Oct 9 23:44:36 baraca inetd[34225]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp) ...	2020-10-11 04:00:57
attackspambots	Oct 9 23:44:33 baraca inetd[34221]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp) Oct 9 23:44:35 baraca inetd[34222]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp) Oct 9 23:44:36 baraca inetd[34225]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp) ...	2020-10-10 19:56:57
attackbotsspam	Aug 22 23:32:47 baraca inetd[9881]: refused connection from scanner-05.ch1.censys-scanner.com, service sshd (tcp) Aug 22 23:32:48 baraca inetd[9882]: refused connection from scanner-05.ch1.censys-scanner.com, service sshd (tcp) Aug 22 23:32:49 baraca inetd[9883]: refused connection from scanner-05.ch1.censys-scanner.com, service sshd (tcp) ...	2020-08-23 06:12:48

Type

Details

Datetime

attackbotsspam

Oct  9 23:44:33 baraca inetd[34221]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp)
Oct  9 23:44:35 baraca inetd[34222]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp)
Oct  9 23:44:36 baraca inetd[34225]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp)
...

2020-10-11 04:00:57

attackspambots

Oct  9 23:44:33 baraca inetd[34221]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp)
Oct  9 23:44:35 baraca inetd[34222]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp)
Oct  9 23:44:36 baraca inetd[34225]: refused connection from scanner-04.ch1.censys-scanner.com, service sshd (tcp)
...

2020-10-10 19:56:57

attackbotsspam

Aug 22 23:32:47 baraca inetd[9881]: refused connection from scanner-05.ch1.censys-scanner.com, service sshd (tcp)
Aug 22 23:32:48 baraca inetd[9882]: refused connection from scanner-05.ch1.censys-scanner.com, service sshd (tcp)
Aug 22 23:32:49 baraca inetd[9883]: refused connection from scanner-05.ch1.censys-scanner.com, service sshd (tcp)
...

2020-08-23 06:12:48

Comments on same subnet:

IP	Type	Details	Datetime
162.142.125.86	botsattack	Bad IP	2025-03-06 19:09:23
162.142.125.197	attackproxy	Fraud connect	2024-09-05 12:48:39
162.142.125.12	proxy	Scan	2023-06-05 16:37:12
162.142.125.11	proxy	VPN fraud	2023-06-05 12:59:49
162.142.125.223	proxy	VPN fraud	2023-05-31 21:46:50
162.142.125.225	proxy	VPN fraud	2023-05-29 12:47:59
162.142.125.84	proxy	VPN scan	2023-05-22 12:51:31
162.142.125.224	proxy	VPN fraud	2023-05-18 12:47:47
162.142.125.89	proxy	VPN f	2023-05-13 12:57:08
162.142.125.217	proxy	VPN fraud	2023-05-13 12:54:50
162.142.125.14	proxy	VPN fraud	2023-05-12 14:21:18
162.142.125.214	proxy	VPN fraud	2023-03-31 12:54:37
162.142.125.87	proxy	VPN fraud	2023-03-29 12:58:45
162.142.125.13	proxy	VPN fraud	2023-03-29 12:56:42
162.142.125.10	attack	DANGER DUDE ATTACK	2022-02-18 10:02:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.142.125.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61303
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.142.125.43.			IN	A

;; AUTHORITY SECTION:
.			559	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082201 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 23 06:12:45 CST 2020
;; MSG SIZE  rcvd: 118

Host info

43.125.142.162.in-addr.arpa domain name pointer scanner-05.ch1.censys-scanner.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
43.125.142.162.in-addr.arpa	name = scanner-05.ch1.censys-scanner.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
125.166.1.55	attackspambots	TCP (SYN) 125.166.1.55:6201 -> port 23, len 44	2020-10-05 17:12:28
121.33.237.102	attack	Triggered by Fail2Ban at Ares web server	2020-10-05 16:59:28
46.249.32.146	attackspambots	[2020-10-04 19:46:17] NOTICE[1182][C-000012c9] chan_sip.c: Call from '' (46.249.32.146:61792) to extension '011441904911054' rejected because extension not found in context 'public'. [2020-10-04 19:46:17] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-04T19:46:17.310-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441904911054",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.249.32.146/61792",ACLName="no_extension_match" [2020-10-04 19:46:50] NOTICE[1182][C-000012cb] chan_sip.c: Call from '' (46.249.32.146:55337) to extension '9011441904911054' rejected because extension not found in context 'public'. ...	2020-10-05 17:19:42
218.75.156.247	attackbotsspam	$f2bV_matches	2020-10-05 17:23:12
78.87.134.175	attackbots	Telnet Server BruteForce Attack	2020-10-05 16:56:56
185.219.56.243	attackbots	Found on CINS badguys / proto=6 . srcport=48977 . dstport=1433 . (3522)	2020-10-05 16:49:07
106.13.68.190	attackspam	SSH login attempts.	2020-10-05 16:46:38
185.221.134.250	attackspam	185.221.134.250 was recorded 5 times by 3 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 40, 522	2020-10-05 17:21:27
218.92.0.175	attack	Oct 5 11:22:24 pve1 sshd[14629]: Failed password for root from 218.92.0.175 port 52252 ssh2 Oct 5 11:22:29 pve1 sshd[14629]: Failed password for root from 218.92.0.175 port 52252 ssh2 ...	2020-10-05 17:22:41
45.231.163.160	attackspambots	Listed on zen-spamhaus also abuseat.org / proto=6 . srcport=16233 . dstport=23 Telnet . (3524)	2020-10-05 16:32:20
112.85.42.174	attackbotsspam	Oct 5 08:48:19 localhost sshd[25342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Oct 5 08:48:21 localhost sshd[25342]: Failed password for root from 112.85.42.174 port 21107 ssh2 Oct 5 08:48:24 localhost sshd[25342]: Failed password for root from 112.85.42.174 port 21107 ssh2 Oct 5 08:48:19 localhost sshd[25342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Oct 5 08:48:21 localhost sshd[25342]: Failed password for root from 112.85.42.174 port 21107 ssh2 Oct 5 08:48:24 localhost sshd[25342]: Failed password for root from 112.85.42.174 port 21107 ssh2 Oct 5 08:48:19 localhost sshd[25342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Oct 5 08:48:21 localhost sshd[25342]: Failed password for root from 112.85.42.174 port 21107 ssh2 Oct 5 08:48:24 localhost sshd[25342]: Failed pas ...	2020-10-05 16:54:36
37.187.96.130	attackspam	$f2bV_matches	2020-10-05 17:17:34
84.183.97.223	attackspambots	Automatic report - Port Scan Attack	2020-10-05 17:19:00
2a03:b0c0:3:e0::33c:b001	attackbots	2a03:b0c0:3:e0::33c:b001 - - [04/Oct/2020:21:36:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2863 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2a03:b0c0:3:e0::33c:b001 - - [04/Oct/2020:21:36:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2844 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2a03:b0c0:3:e0::33c:b001 - - [04/Oct/2020:21:37:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2844 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-05 17:07:33
165.227.52.184	attackbots	Oct 5 06:51:00 scw-tender-jepsen sshd[29691]: Failed password for root from 165.227.52.184 port 54476 ssh2	2020-10-05 17:05:45

Recently Reported IPs

103.125.191.146	157.230.34.92	173.234.151.157	94.249.61.130
196.179.253.33	182.50.130.227	114.217.145.116	14.143.251.38
177.131.16.197	185.193.26.153	172.93.224.140	111.72.194.125
92.53.49.149	187.178.192.97	62.210.75.68	154.133.213.87
65.169.243.133	196.55.151.135	216.17.72.124	83.224.13.222