167.248.133.125

Classification: Whitelisted

167.248.133.125 is a whitelisted (trusted) IP address. Reported by 6 threat sources, last seen 2026-07-16. Network: AS398324 Censys, Inc..

Current activity

  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Matched whitelist source: Censys_registrant Maltiverse 2026-07-16 13:38:23 2026-07-16 13:38:23 benign
Mail Spammer Blocklist.de 2023-03-29 05:16:43 2024-05-31 03:17:51 malicious-activity
SSH Attacker Blocklist.de 2023-03-10 06:07:21 2024-05-29 04:22:44 malicious-activity
Malicious Host CIArmy 2023-06-17 09:13:25 2024-05-23 11:46:05 malicious-activity
Malicious Host HoneyDB 2023-03-12 00:00:00 2024-03-28 00:00:00 malicious-activity
Brute force attack on the SMTP service of the server Relay Blocklist.net.ua 2023-04-01 07:45:28 2023-10-01 06:17:48 malicious-activity
IMAP Attacker Blocklist.de 2023-03-29 05:13:25 2023-08-27 02:52:35 malicious-activity
HTTP Spammer StopForumSpam.com 2023-03-20 12:36:50 2023-05-18 01:38:07 malicious-activity

Tags

ssh bruteforce bot abuse mail spam attacker imap pop3 sasl

Whois information

AS name
AS398324 Censys, Inc.
AS registry
arin
AS date
2020-08-21 00:00:00
AS CIDR
167.248.133.0/24
CIDR
167.248.133.0/24
Registrant
Censys, Inc.
Address
116 1/2 S Main Street
City
Ann Arbor
State
MI
Postal code
48104
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
First indexed
2023-03-10 06:07:21
Last updated
2026-07-16 13:38:23