Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Censys Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
port
2020-09-25 03:12:29
attackbotsspam
" "
2020-09-24 18:56:21
attackspam
 TCP (SYN) 162.142.125.66:20122 -> port 9332, len 44
2020-09-20 00:37:59
attackspambots
 TCP (SYN) 162.142.125.66:58408 -> port 9503, len 44
2020-09-19 16:25:51
Comments on same subnet:
IP Type Details Datetime
162.142.125.86 botsattack
Bad IP
2025-03-06 19:09:23
162.142.125.197 attackproxy
Fraud connect
2024-09-05 12:48:39
162.142.125.12 proxy
Scan
2023-06-05 16:37:12
162.142.125.11 proxy
VPN fraud
2023-06-05 12:59:49
162.142.125.223 proxy
VPN fraud
2023-05-31 21:46:50
162.142.125.225 proxy
VPN fraud
2023-05-29 12:47:59
162.142.125.84 proxy
VPN scan
2023-05-22 12:51:31
162.142.125.224 proxy
VPN fraud
2023-05-18 12:47:47
162.142.125.89 proxy
VPN f
2023-05-13 12:57:08
162.142.125.217 proxy
VPN fraud
2023-05-13 12:54:50
162.142.125.14 proxy
VPN fraud
2023-05-12 14:21:18
162.142.125.214 proxy
VPN fraud
2023-03-31 12:54:37
162.142.125.87 proxy
VPN fraud
2023-03-29 12:58:45
162.142.125.13 proxy
VPN fraud
2023-03-29 12:56:42
162.142.125.10 attack
DANGER DUDE ATTACK
2022-02-18 10:02:36
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.142.125.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54058
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.142.125.66.			IN	A

;; AUTHORITY SECTION:
.			407	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091802 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 19 16:25:43 CST 2020
;; MSG SIZE  rcvd: 118
Host info
66.125.142.162.in-addr.arpa domain name pointer scanner-10.ch1.censys-scanner.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
66.125.142.162.in-addr.arpa	name = scanner-10.ch1.censys-scanner.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
183.111.125.199 attackspambots
Dec 13 22:00:39 areeb-Workstation sshd[17795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.125.199 
Dec 13 22:00:40 areeb-Workstation sshd[17795]: Failed password for invalid user pos from 183.111.125.199 port 46830 ssh2
...
2019-12-14 01:03:53
93.39.104.224 attack
Dec 13 06:11:37 web1 sshd\[27581\]: Invalid user ausgrabungsstaette from 93.39.104.224
Dec 13 06:11:37 web1 sshd\[27581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.39.104.224
Dec 13 06:11:39 web1 sshd\[27581\]: Failed password for invalid user ausgrabungsstaette from 93.39.104.224 port 53546 ssh2
Dec 13 06:17:32 web1 sshd\[28177\]: Invalid user wwwadmin from 93.39.104.224
Dec 13 06:17:32 web1 sshd\[28177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.39.104.224
2019-12-14 00:31:32
103.44.2.98 attackbots
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2019-12-14 00:56:54
27.193.190.175 attackbotsspam
2323/tcp
[2019-12-13]1pkt
2019-12-14 00:53:51
94.25.229.122 attackspam
Unauthorized connection attempt detected from IP address 94.25.229.122 to port 445
2019-12-14 00:34:40
182.48.84.6 attackbots
Dec 13 06:16:10 web9 sshd\[16815\]: Invalid user dwyane from 182.48.84.6
Dec 13 06:16:10 web9 sshd\[16815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.48.84.6
Dec 13 06:16:12 web9 sshd\[16815\]: Failed password for invalid user dwyane from 182.48.84.6 port 41102 ssh2
Dec 13 06:24:28 web9 sshd\[18195\]: Invalid user libby from 182.48.84.6
Dec 13 06:24:28 web9 sshd\[18195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.48.84.6
2019-12-14 00:40:12
83.68.33.217 attack
[portscan] Port scan
2019-12-14 00:47:34
111.42.102.134 attack
5060/udp
[2019-12-13]1pkt
2019-12-14 00:53:02
58.214.9.174 attack
Dec 13 18:56:55 hosting sshd[16884]: Invalid user Admin from 58.214.9.174 port 47772
Dec 13 18:56:55 hosting sshd[16884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.214.9.174
Dec 13 18:56:55 hosting sshd[16884]: Invalid user Admin from 58.214.9.174 port 47772
Dec 13 18:56:57 hosting sshd[16884]: Failed password for invalid user Admin from 58.214.9.174 port 47772 ssh2
Dec 13 19:19:45 hosting sshd[18879]: Invalid user svncode from 58.214.9.174 port 54494
...
2019-12-14 00:50:51
1.160.46.171 attackspam
Fail2Ban Ban Triggered
2019-12-14 01:02:52
104.236.175.127 attackbots
2019-12-13T16:49:21.938980shield sshd\[23952\]: Invalid user eslab from 104.236.175.127 port 60856
2019-12-13T16:49:21.943675shield sshd\[23952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.175.127
2019-12-13T16:49:23.799632shield sshd\[23952\]: Failed password for invalid user eslab from 104.236.175.127 port 60856 ssh2
2019-12-13T16:54:55.344950shield sshd\[25238\]: Invalid user philippine from 104.236.175.127 port 41524
2019-12-13T16:54:55.349819shield sshd\[25238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.175.127
2019-12-14 00:59:17
145.239.91.88 attackspam
$f2bV_matches
2019-12-14 00:57:29
81.183.166.219 attackspambots
Automatic report - Port Scan Attack
2019-12-14 00:37:47
101.230.236.177 attackbotsspam
Dec 13 16:59:37 MK-Soft-VM3 sshd[26823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.230.236.177 
Dec 13 16:59:40 MK-Soft-VM3 sshd[26823]: Failed password for invalid user dddddd from 101.230.236.177 port 39038 ssh2
...
2019-12-14 00:43:03
162.158.63.161 attackbots
8080/tcp 8080/tcp
[2019-12-13]2pkt
2019-12-14 00:50:13

Recently Reported IPs

96.103.223.82 114.227.41.87 188.2.102.173 25.35.160.148
98.102.212.150 45.127.62.253 225.99.131.37 109.165.208.89
72.79.63.143 21.229.12.229 148.126.133.209 38.33.138.41
92.53.90.70 14.174.252.219 13.35.245.91 169.203.142.103
120.59.125.242 178.239.148.136 15.228.52.164 174.82.85.27