162.142.125.7 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Censys Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	TCP (SYN) 162.142.125.7:58502 -> port 80, len 44	2020-08-28 03:47:33
attackspam	TCP (SYN) 162.142.125.7:17615 -> port 1433, len 44	2020-08-21 18:32:26

Comments on same subnet:

IP	Type	Details	Datetime
162.142.125.86	botsattack	Bad IP	2025-03-06 19:09:23
162.142.125.197	attackproxy	Fraud connect	2024-09-05 12:48:39
162.142.125.12	proxy	Scan	2023-06-05 16:37:12
162.142.125.11	proxy	VPN fraud	2023-06-05 12:59:49
162.142.125.223	proxy	VPN fraud	2023-05-31 21:46:50
162.142.125.225	proxy	VPN fraud	2023-05-29 12:47:59
162.142.125.84	proxy	VPN scan	2023-05-22 12:51:31
162.142.125.224	proxy	VPN fraud	2023-05-18 12:47:47
162.142.125.89	proxy	VPN f	2023-05-13 12:57:08
162.142.125.217	proxy	VPN fraud	2023-05-13 12:54:50
162.142.125.14	proxy	VPN fraud	2023-05-12 14:21:18
162.142.125.214	proxy	VPN fraud	2023-03-31 12:54:37
162.142.125.87	proxy	VPN fraud	2023-03-29 12:58:45
162.142.125.13	proxy	VPN fraud	2023-03-29 12:56:42
162.142.125.10	attack	DANGER DUDE ATTACK	2022-02-18 10:02:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.142.125.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12303
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.142.125.7.			IN	A

;; AUTHORITY SECTION:
.			251	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082001 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 21 18:32:22 CST 2020
;; MSG SIZE  rcvd: 117

Host info

7.125.142.162.in-addr.arpa domain name pointer scanner-01.ch1.censys-scanner.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
7.125.142.162.in-addr.arpa	name = scanner-01.ch1.censys-scanner.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.198	attackbotsspam	Apr 3 06:18:11 legacy sshd[3419]: Failed password for root from 218.92.0.198 port 31664 ssh2 Apr 3 06:19:14 legacy sshd[3447]: Failed password for root from 218.92.0.198 port 62350 ssh2 ...	2020-04-03 12:30:20
103.45.130.167	attack	Apr 3 05:42:02 mail.srvfarm.net postfix/smtpd[2424109]: NOQUEUE: reject: RCPT from unknown[103.45.130.167]: 450 4.1.8 <882@machineryinc.xyz>: Sender address rejected: Domain not found; from=<882@machineryinc.xyz> to= proto=ESMTP helo= Apr 3 05:42:13 mail.srvfarm.net postfix/smtpd[2428295]: NOQUEUE: reject: RCPT from unknown[103.45.130.167]: 450 4.1.8 <882@machineryinc.xyz>: Sender address rejected: Domain not found; from=<882@machineryinc.xyz> to= proto=ESMTP helo= Apr 3 05:42:18 mail.srvfarm.net postfix/smtpd[2428295]: NOQUEUE: reject: RCPT from unknown[103.45.130.167]: 450 4.1.8 <882@machineryinc.xyz>: Sender address rejected: Domain not found; from=<882@machineryinc.xyz> to= proto=ESMTP helo= Apr 3 05:42:23 mail.srvfarm.net postfix/smtpd[2428168]: NOQUEUE: reject: RCPT from unknown[103.45.130.167]: 450 4.1.8 <882@machineryinc.xyz>: Sender address rejected: Domain not found; from=<882@machiner	2020-04-03 12:39:57
159.89.97.23	attackspambots	Apr 3 00:53:54 firewall sshd[14511]: Failed password for invalid user tian from 159.89.97.23 port 43266 ssh2 Apr 3 00:56:23 firewall sshd[14592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.23 user=root Apr 3 00:56:25 firewall sshd[14592]: Failed password for root from 159.89.97.23 port 34246 ssh2 ...	2020-04-03 12:36:42
43.242.247.74	attackspam	Apr 3 02:19:20 *** sshd[13809]: User root from 43.242.247.74 not allowed because not listed in AllowUsers	2020-04-03 11:02:35
123.18.206.15	attack	Apr 3 04:40:25 markkoudstaal sshd[22768]: Failed password for root from 123.18.206.15 port 40296 ssh2 Apr 3 04:44:26 markkoudstaal sshd[23301]: Failed password for root from 123.18.206.15 port 43465 ssh2	2020-04-03 11:01:29
101.91.242.119	attackbotsspam	Apr 3 06:08:13 markkoudstaal sshd[2710]: Failed password for root from 101.91.242.119 port 58376 ssh2 Apr 3 06:12:35 markkoudstaal sshd[3316]: Failed password for root from 101.91.242.119 port 52084 ssh2	2020-04-03 12:17:34
125.124.70.22	attack	Apr 2 23:48:14 NPSTNNYC01T sshd[30284]: Failed password for root from 125.124.70.22 port 33252 ssh2 Apr 2 23:52:33 NPSTNNYC01T sshd[30605]: Failed password for root from 125.124.70.22 port 33346 ssh2 ...	2020-04-03 12:11:56
94.102.63.27	attackbots	Apr 3 05:55:22 web01.agentur-b-2.de dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.63.27, lip=185.118.198.210, session=<1Abf4lqiTK1eZj8b> Apr 3 05:55:26 web01.agentur-b-2.de dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.63.27, lip=185.118.198.210, session= Apr 3 05:55:26 web01.agentur-b-2.de dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.63.27, lip=185.118.198.210, session= Apr 3 05:55:26 web01.agentur-b-2.de dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.63.27, lip=185.118.198.210, session= Apr 3 05:55:26 web01.agentur-b-2.de dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=	2020-04-03 12:40:35
192.241.238.70	attack	Unauthorized connection attempt detected from IP address 192.241.238.70 to port 8889	2020-04-03 12:06:25
118.71.206.119	attackspambots	Unauthorised access (Apr 3) SRC=118.71.206.119 LEN=52 TTL=107 ID=28460 DF TCP DPT=1433 WINDOW=8192 SYN	2020-04-03 12:12:32
89.219.10.74	attackbots	RDP Brute-Force (Grieskirchen RZ2)	2020-04-03 12:05:03
118.100.116.155	attackspam	Apr 3 05:53:52 vserver sshd\[4773\]: Failed password for root from 118.100.116.155 port 34204 ssh2Apr 3 05:58:33 vserver sshd\[4814\]: Invalid user ra from 118.100.116.155Apr 3 05:58:35 vserver sshd\[4814\]: Failed password for invalid user ra from 118.100.116.155 port 45750 ssh2Apr 3 06:03:05 vserver sshd\[4876\]: Failed password for root from 118.100.116.155 port 57288 ssh2 ...	2020-04-03 12:08:27
185.234.217.48	attack	Apr 3 05:31:21 web01.agentur-b-2.de postfix/smtpd[482886]: warning: unknown[185.234.217.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 05:31:21 web01.agentur-b-2.de postfix/smtpd[482886]: lost connection after AUTH from unknown[185.234.217.48] Apr 3 05:34:34 web01.agentur-b-2.de postfix/smtpd[480876]: warning: unknown[185.234.217.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 05:34:34 web01.agentur-b-2.de postfix/smtpd[480876]: lost connection after AUTH from unknown[185.234.217.48] Apr 3 05:36:56 web01.agentur-b-2.de postfix/smtpd[480876]: warning: unknown[185.234.217.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-04-03 12:38:51
81.208.42.145	attack	CMS (WordPress or Joomla) login attempt.	2020-04-03 11:01:53
106.13.215.207	attack	Apr 3 04:47:08 [host] sshd[20704]: pam_unix(sshd: Apr 3 04:47:11 [host] sshd[20704]: Failed passwor Apr 3 04:56:59 [host] sshd[20890]: pam_unix(sshd:	2020-04-03 10:58:21

Recently Reported IPs

188.19.189.82	3.20.227.121	180.249.166.125	178.128.58.81
68.148.244.65	219.139.131.21	138.197.215.177	54.215.27.43
124.104.28.99	226.77.138.113	211.128.50.18	63.21.75.236
42.200.228.80	35.223.16.210	98.200.230.221	95.220.19.179
187.163.39.6	41.236.94.90	162.142.125.12	1.34.62.47