162.142.125.67

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Censys Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	TCP (SYN) 162.142.125.67:56373 -> port 12580, len 44	2020-10-13 21:46:43
attackspambots	[Tue Oct 13 06:54:37 2020] IN=enp34s0 OUT= MAC=SERVERMAC SRC=162.142.125.67 DST=MYSERVERIP LEN=44 TOS=0x00 PREC=0x00 TTL=42 ID=44979 PROTO=TCP SPT=11729 DPT=8425 WINDOW=1024 RES=0x00 SYN URGP=0 Ports: 8425	2020-10-13 13:12:15
attackspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-13 05:58:30

类型

评论内容

时间

attackbots

 TCP (SYN) 162.142.125.67:56373 -> port 12580, len 44

2020-10-13 21:46:43

attackspambots

[Tue Oct 13 06:54:37 2020] IN=enp34s0 OUT= MAC=SERVERMAC SRC=162.142.125.67 DST=MYSERVERIP LEN=44 TOS=0x00 PREC=0x00 TTL=42 ID=44979 PROTO=TCP SPT=11729 DPT=8425 WINDOW=1024 RES=0x00 SYN URGP=0 Ports: 8425

2020-10-13 13:12:15

attackspam

[N10.H2.VM2] Port Scanner Detected Blocked by UFW

2020-10-13 05:58:30

相同子网IP讨论:

IP	类型	评论内容	时间
162.142.125.86	botsattack	Bad IP	2025-03-06 19:09:23
162.142.125.197	attackproxy	Fraud connect	2024-09-05 12:48:39
162.142.125.12	proxy	Scan	2023-06-05 16:37:12
162.142.125.11	proxy	VPN fraud	2023-06-05 12:59:49
162.142.125.223	proxy	VPN fraud	2023-05-31 21:46:50
162.142.125.225	proxy	VPN fraud	2023-05-29 12:47:59
162.142.125.84	proxy	VPN scan	2023-05-22 12:51:31
162.142.125.224	proxy	VPN fraud	2023-05-18 12:47:47
162.142.125.89	proxy	VPN f	2023-05-13 12:57:08
162.142.125.217	proxy	VPN fraud	2023-05-13 12:54:50
162.142.125.14	proxy	VPN fraud	2023-05-12 14:21:18
162.142.125.214	proxy	VPN fraud	2023-03-31 12:54:37
162.142.125.87	proxy	VPN fraud	2023-03-29 12:58:45
162.142.125.13	proxy	VPN fraud	2023-03-29 12:56:42
162.142.125.10	attack	DANGER DUDE ATTACK	2022-02-18 10:02:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.142.125.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41996
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.142.125.67.			IN	A

;; AUTHORITY SECTION:
.			258	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101202 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 13 05:58:26 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

67.125.142.162.in-addr.arpa domain name pointer scanner-10.ch1.censys-scanner.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
67.125.142.162.in-addr.arpa	name = scanner-10.ch1.censys-scanner.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
37.59.119.181	attackbotsspam	Lines containing failures of 37.59.119.181 Nov 5 21:14:29 shared04 sshd[16905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.119.181 user=r.r Nov 5 21:14:31 shared04 sshd[16905]: Failed password for r.r from 37.59.119.181 port 49936 ssh2 Nov 5 21:14:31 shared04 sshd[16905]: Received disconnect from 37.59.119.181 port 49936:11: Bye Bye [preauth] Nov 5 21:14:31 shared04 sshd[16905]: Disconnected from authenticating user r.r 37.59.119.181 port 49936 [preauth] Nov 5 21:43:32 shared04 sshd[24392]: Invalid user deployer from 37.59.119.181 port 34324 Nov 5 21:43:32 shared04 sshd[24392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.119.181 Nov 5 21:43:33 shared04 sshd[24392]: Failed password for invalid user deployer from 37.59.119.181 port 34324 ssh2 Nov 5 21:43:33 shared04 sshd[24392]: Received disconnect from 37.59.119.181 port 34324:11: Bye Bye [preauth] Nov 5 21:43:33........ ------------------------------	2019-11-06 20:06:53
66.69.237.75	attack	DATE:2019-11-06 07:23:17, IP:66.69.237.75, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-11-06 20:02:13
68.251.142.26	attack	"Fail2Ban detected SSH brute force attempt"	2019-11-06 20:03:41
222.186.175.155	attackspambots	Nov 6 12:43:54 legacy sshd[28318]: Failed password for root from 222.186.175.155 port 28694 ssh2 Nov 6 12:44:12 legacy sshd[28318]: error: maximum authentication attempts exceeded for root from 222.186.175.155 port 28694 ssh2 [preauth] Nov 6 12:44:22 legacy sshd[28328]: Failed password for root from 222.186.175.155 port 34234 ssh2 ...	2019-11-06 19:46:12
222.186.175.216	attackspambots	pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Failed password for root from 222.186.175.216 port 29806 ssh2 Failed password for root from 222.186.175.216 port 29806 ssh2 Failed password for root from 222.186.175.216 port 29806 ssh2 Failed password for root from 222.186.175.216 port 29806 ssh2	2019-11-06 20:09:08
110.139.126.130	attackspambots	Nov 5 06:46:02 olgosrv01 sshd[1101]: reveeclipse mapping checking getaddrinfo for 130.subnet110-139-126.speedy.telkom.net.id [110.139.126.130] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 5 06:46:02 olgosrv01 sshd[1101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.139.126.130 user=r.r Nov 5 06:46:04 olgosrv01 sshd[1101]: Failed password for r.r from 110.139.126.130 port 16278 ssh2 Nov 5 06:46:05 olgosrv01 sshd[1101]: Received disconnect from 110.139.126.130: 11: Bye Bye [preauth] Nov 5 06:51:03 olgosrv01 sshd[1462]: reveeclipse mapping checking getaddrinfo for 130.subnet110-139-126.speedy.telkom.net.id [110.139.126.130] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 5 06:51:03 olgosrv01 sshd[1462]: Invalid user apache from 110.139.126.130 Nov 5 06:51:03 olgosrv01 sshd[1462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.139.126.130 Nov 5 06:51:06 olgosrv01 sshd[1462]: Failed pass........ -------------------------------	2019-11-06 19:45:44
51.89.41.85	attackspam	CloudCIX Reconnaissance Scan Detected, PTR: ns3152050.ip-51-89-41.eu.	2019-11-06 20:08:38
193.112.123.100	attackspam	[Aegis] @ 2019-11-06 10:01:50 0000 -> SSH insecure connection attempt (scan).	2019-11-06 20:13:59
159.65.121.65	attackspambots	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2019-11-06 19:46:47
141.138.142.172	attack	/wp-login.php	2019-11-06 20:24:31
118.26.23.225	attack	2019-11-06T08:39:05.992910abusebot-2.cloudsearch.cf sshd\[29373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.26.23.225 user=root	2019-11-06 20:12:50
183.230.93.59	attackbots	Nov 6 08:30:58 v22018086721571380 sshd[11165]: Failed password for invalid user icinga from 183.230.93.59 port 40606 ssh2 Nov 6 09:34:21 v22018086721571380 sshd[12714]: Failed password for invalid user 123qwe15 from 183.230.93.59 port 40402 ssh2	2019-11-06 20:22:42
81.28.100.136	attack	2019-11-06T07:23:23.707360stark.klein-stark.info postfix/smtpd\[9168\]: NOQUEUE: reject: RCPT from shallow.shrewdmhealth.com\[81.28.100.136\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ ...	2019-11-06 19:56:21
207.154.206.212	attackbotsspam	Nov 6 08:45:52 v22018076622670303 sshd\[18930\]: Invalid user com\#2010\?01 from 207.154.206.212 port 33906 Nov 6 08:45:52 v22018076622670303 sshd\[18930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.206.212 Nov 6 08:45:54 v22018076622670303 sshd\[18930\]: Failed password for invalid user com\#2010\?01 from 207.154.206.212 port 33906 ssh2 ...	2019-11-06 20:04:25
146.66.244.246	attack	5x Failed Password	2019-11-06 20:16:39

最近上报的IP列表

51.77.63.162	49.229.69.4	150.147.190.82	103.223.8.95
177.92.21.2	102.114.15.254	62.221.113.81	189.190.40.87
141.101.25.191	176.123.8.128	106.75.77.230	103.83.247.126
64.225.126.22	112.35.92.119	34.64.79.191	158.69.88.77
61.2.14.242	79.137.50.77	112.85.23.87	36.66.40.13