Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
154.0.161.99 attackbots
2020-08-23T05:06:53.968067shield sshd\[23479\]: Invalid user sonar from 154.0.161.99 port 40176
2020-08-23T05:06:53.974794shield sshd\[23479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za
2020-08-23T05:06:56.320714shield sshd\[23479\]: Failed password for invalid user sonar from 154.0.161.99 port 40176 ssh2
2020-08-23T05:12:21.981373shield sshd\[24869\]: Invalid user ralf from 154.0.161.99 port 49512
2020-08-23T05:12:22.020383shield sshd\[24869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za
2020-08-23 14:19:19
154.0.161.99 attackspam
Aug 19 17:32:07 db sshd[14408]: Invalid user sales from 154.0.161.99 port 37440
...
2020-08-20 02:04:49
154.0.161.99 attackbots
2020-08-16T12:35:46.067859shield sshd\[20770\]: Invalid user money from 154.0.161.99 port 41120
2020-08-16T12:35:46.077812shield sshd\[20770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za
2020-08-16T12:35:47.683797shield sshd\[20770\]: Failed password for invalid user money from 154.0.161.99 port 41120 ssh2
2020-08-16T12:40:46.916053shield sshd\[21630\]: Invalid user ed from 154.0.161.99 port 50550
2020-08-16T12:40:46.924820shield sshd\[21630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za
2020-08-16 21:13:21
154.0.161.99 attackbots
fail2ban
2020-08-13 22:56:58
154.0.161.99 attackbots
Aug  8 22:54:41 pkdns2 sshd\[17934\]: Failed password for root from 154.0.161.99 port 60670 ssh2Aug  8 22:56:53 pkdns2 sshd\[18051\]: Address 154.0.161.99 maps to peardev.dedicated.co.za, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug  8 22:56:55 pkdns2 sshd\[18051\]: Failed password for root from 154.0.161.99 port 32926 ssh2Aug  8 22:59:09 pkdns2 sshd\[18139\]: Address 154.0.161.99 maps to peardev.dedicated.co.za, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug  8 22:59:12 pkdns2 sshd\[18139\]: Failed password for root from 154.0.161.99 port 33414 ssh2Aug  8 23:01:31 pkdns2 sshd\[18255\]: Failed password for root from 154.0.161.99 port 33902 ssh2
...
2020-08-09 04:23:52
154.0.161.99 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-19 20:48:00
154.0.161.131 attackspambots
Wordpress_xmlrpc_attack
2020-05-25 22:26:10
154.0.161.239 attackbots
xmlrpc
2020-04-02 07:28:25
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.0.161.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11057
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;154.0.161.112.			IN	A

;; AUTHORITY SECTION:
.			463	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 18:42:18 CST 2022
;; MSG SIZE  rcvd: 106
Host info
112.161.0.154.in-addr.arpa domain name pointer striga.aserv.co.za.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
112.161.0.154.in-addr.arpa	name = striga.aserv.co.za.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
3.6.120.122 attack
3.6.120.122 - - [05/Sep/2020:10:11:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2208 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
3.6.120.122 - - [05/Sep/2020:10:11:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2205 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
3.6.120.122 - - [05/Sep/2020:10:11:42 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-05 17:30:35
115.77.187.194 attackspam
Invalid user tsm from 115.77.187.194 port 40626
2020-09-05 17:59:47
121.169.170.47 attackbotsspam
121.169.170.47 - - [04/Sep/2020:18:46:53 +0200] "GET /awstats.pl?lang=en&output=main HTTP/1.0" 404 280 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:59.0) Gecko/20100101 Firefox/59.0"
2020-09-05 17:52:14
78.129.221.11 attack
Searching for known java vulnerabilities
2020-09-05 18:00:44
151.62.6.225 attackspam
Sep  4 18:46:48 mellenthin postfix/smtpd[32352]: NOQUEUE: reject: RCPT from unknown[151.62.6.225]: 554 5.7.1 Service unavailable; Client host [151.62.6.225] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/151.62.6.225; from= to= proto=ESMTP helo=<[151.62.6.225]>
2020-09-05 17:53:59
37.152.181.151 attackbots
2020-09-05T09:19:03.975203randservbullet-proofcloud-66.localdomain sshd[14967]: Invalid user gzd from 37.152.181.151 port 43550
2020-09-05T09:19:03.979457randservbullet-proofcloud-66.localdomain sshd[14967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.152.181.151
2020-09-05T09:19:03.975203randservbullet-proofcloud-66.localdomain sshd[14967]: Invalid user gzd from 37.152.181.151 port 43550
2020-09-05T09:19:05.861476randservbullet-proofcloud-66.localdomain sshd[14967]: Failed password for invalid user gzd from 37.152.181.151 port 43550 ssh2
...
2020-09-05 17:25:45
170.130.187.6 attack
Unauthorized connection attempt from IP address 170.130.187.6 on Port 3389(RDP)
2020-09-05 17:36:20
49.205.243.128 attackbots
1599238002 - 09/04/2020 18:46:42 Host: 49.205.243.128/49.205.243.128 Port: 445 TCP Blocked
2020-09-05 18:01:46
176.120.122.178 attackspambots
Sep  4 18:47:09 mellenthin postfix/smtpd[32377]: NOQUEUE: reject: RCPT from 176.120.122.178.telemedia.pl[176.120.122.178]: 554 5.7.1 Service unavailable; Client host [176.120.122.178] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/176.120.122.178; from= to= proto=ESMTP helo=<176.120.122.178.telemedia.pl>
2020-09-05 17:40:50
47.111.19.40 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-05 17:51:35
222.186.31.83 attackbots
Sep  5 09:27:58 rush sshd[22668]: Failed password for root from 222.186.31.83 port 43938 ssh2
Sep  5 09:28:07 rush sshd[22670]: Failed password for root from 222.186.31.83 port 12648 ssh2
...
2020-09-05 17:32:55
131.147.249.143 attackbots
Unauthorised access (Sep  4) SRC=131.147.249.143 LEN=52 TTL=119 ID=28306 DF TCP DPT=445 WINDOW=8192 SYN
2020-09-05 17:50:03
191.37.130.132 attackbots
Automatic report - Port Scan Attack
2020-09-05 18:02:10
59.124.90.112 attackspambots
SSH Brute-Force. Ports scanning.
2020-09-05 17:28:34
170.231.252.72 attack
Sep  5 04:22:27 mxgate1 postfix/postscreen[12268]: CONNECT from [170.231.252.72]:14328 to [176.31.12.44]:25
Sep  5 04:22:27 mxgate1 postfix/dnsblog[12280]: addr 170.231.252.72 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Sep  5 04:22:27 mxgate1 postfix/dnsblog[12282]: addr 170.231.252.72 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  5 04:22:29 mxgate1 postfix/dnsblog[12281]: addr 170.231.252.72 listed by domain cbl.abuseat.org as 127.0.0.2
Sep  5 04:22:29 mxgate1 postfix/dnsblog[12279]: addr 170.231.252.72 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  5 04:22:33 mxgate1 postfix/postscreen[12268]: DNSBL rank 5 for [170.231.252.72]:14328
Sep x@x
Sep  5 04:22:34 mxgate1 postfix/postscreen[12268]: HANGUP after 1 from [170.231.252.72]:14328 in tests after SMTP handshake
Sep  5 04:22:34 mxgate1 postfix/postscreen[12268]: DISCONNECT [170.231.252.72]:14328


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=170.231.252.72
2020-09-05 17:43:35

Recently Reported IPs

154.0.121.62 154.0.160.166 154.0.161.191 154.0.160.60
154.0.161.71 154.0.161.224 154.0.163.69 154.0.164.114
154.0.164.145 154.0.164.152 154.0.164.169 154.0.165.25
154.0.165.94 154.0.166.107 154.0.164.178 154.0.168.177
154.0.168.120 154.0.166.169 154.0.166.171 154.0.167.225