City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: Afrihost (Pty) Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | 2020-08-23T05:06:53.968067shield sshd\[23479\]: Invalid user sonar from 154.0.161.99 port 40176 2020-08-23T05:06:53.974794shield sshd\[23479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za 2020-08-23T05:06:56.320714shield sshd\[23479\]: Failed password for invalid user sonar from 154.0.161.99 port 40176 ssh2 2020-08-23T05:12:21.981373shield sshd\[24869\]: Invalid user ralf from 154.0.161.99 port 49512 2020-08-23T05:12:22.020383shield sshd\[24869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za |
2020-08-23 14:19:19 |
| attackspam | Aug 19 17:32:07 db sshd[14408]: Invalid user sales from 154.0.161.99 port 37440 ... |
2020-08-20 02:04:49 |
| attackbots | 2020-08-16T12:35:46.067859shield sshd\[20770\]: Invalid user money from 154.0.161.99 port 41120 2020-08-16T12:35:46.077812shield sshd\[20770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za 2020-08-16T12:35:47.683797shield sshd\[20770\]: Failed password for invalid user money from 154.0.161.99 port 41120 ssh2 2020-08-16T12:40:46.916053shield sshd\[21630\]: Invalid user ed from 154.0.161.99 port 50550 2020-08-16T12:40:46.924820shield sshd\[21630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za |
2020-08-16 21:13:21 |
| attackbots | fail2ban |
2020-08-13 22:56:58 |
| attackbots | Aug 8 22:54:41 pkdns2 sshd\[17934\]: Failed password for root from 154.0.161.99 port 60670 ssh2Aug 8 22:56:53 pkdns2 sshd\[18051\]: Address 154.0.161.99 maps to peardev.dedicated.co.za, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 8 22:56:55 pkdns2 sshd\[18051\]: Failed password for root from 154.0.161.99 port 32926 ssh2Aug 8 22:59:09 pkdns2 sshd\[18139\]: Address 154.0.161.99 maps to peardev.dedicated.co.za, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 8 22:59:12 pkdns2 sshd\[18139\]: Failed password for root from 154.0.161.99 port 33414 ssh2Aug 8 23:01:31 pkdns2 sshd\[18255\]: Failed password for root from 154.0.161.99 port 33902 ssh2 ... |
2020-08-09 04:23:52 |
| attackbotsspam | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-07-19 20:48:00 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 154.0.161.131 | attackspambots | Wordpress_xmlrpc_attack |
2020-05-25 22:26:10 |
| 154.0.161.239 | attackbots | xmlrpc |
2020-04-02 07:28:25 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.0.161.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29741
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.0.161.99. IN A
;; AUTHORITY SECTION:
. 467 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020071900 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 19 20:47:55 CST 2020
;; MSG SIZE rcvd: 11699.161.0.154.in-addr.arpa domain name pointer baymonitoring.dedicated.co.za.
99.161.0.154.in-addr.arpa domain name pointer gridfive01.dedicated.co.za.
99.161.0.154.in-addr.arpa domain name pointer peardev.dedicated.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
99.161.0.154.in-addr.arpa name = gridfive01.dedicated.co.za.
99.161.0.154.in-addr.arpa name = peardev.dedicated.co.za.
99.161.0.154.in-addr.arpa name = baymonitoring.dedicated.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.128.42.36 | attackspam | Sep 30 11:13:02 vmd17057 sshd\[6648\]: Invalid user clerk from 178.128.42.36 port 33010 Sep 30 11:13:02 vmd17057 sshd\[6648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.42.36 Sep 30 11:13:04 vmd17057 sshd\[6648\]: Failed password for invalid user clerk from 178.128.42.36 port 33010 ssh2 ... |
2019-09-30 17:42:44 |
| 45.89.175.106 | attackspambots | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2019-09-30 17:51:56 |
| 193.70.86.97 | attackspambots | Sep 30 09:54:22 fr01 sshd[1483]: Invalid user Eemil from 193.70.86.97 ... |
2019-09-30 17:49:14 |
| 62.234.152.218 | attackbots | *Port Scan* detected from 62.234.152.218 (CN/China/-). 4 hits in the last 280 seconds |
2019-09-30 17:51:13 |
| 152.0.226.251 | attackbotsspam | Port Scan: TCP/2323 |
2019-09-30 17:43:03 |
| 106.51.26.164 | attackbotsspam | PHI,WP GET /wp-login.php |
2019-09-30 17:50:00 |
| 121.66.24.67 | attackspam | Invalid user admin from 121.66.24.67 port 54700 |
2019-09-30 18:03:05 |
| 23.129.64.163 | attackspam | Sep 30 11:25:52 rotator sshd\[21554\]: Failed password for root from 23.129.64.163 port 54265 ssh2Sep 30 11:25:56 rotator sshd\[21554\]: Failed password for root from 23.129.64.163 port 54265 ssh2Sep 30 11:25:58 rotator sshd\[21554\]: Failed password for root from 23.129.64.163 port 54265 ssh2Sep 30 11:26:01 rotator sshd\[21554\]: Failed password for root from 23.129.64.163 port 54265 ssh2Sep 30 11:26:04 rotator sshd\[21554\]: Failed password for root from 23.129.64.163 port 54265 ssh2Sep 30 11:26:08 rotator sshd\[21554\]: Failed password for root from 23.129.64.163 port 54265 ssh2 ... |
2019-09-30 17:59:33 |
| 152.249.253.98 | attackspam | Sep 30 11:41:55 MK-Soft-Root1 sshd[21449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.249.253.98 Sep 30 11:41:57 MK-Soft-Root1 sshd[21449]: Failed password for invalid user mongodb from 152.249.253.98 port 58096 ssh2 ... |
2019-09-30 18:10:06 |
| 167.179.76.246 | attackbots | 30.09.2019 09:39:14 Recursive DNS scan |
2019-09-30 17:41:20 |
| 49.88.112.80 | attackbots | Sep 30 11:28:36 srv206 sshd[27020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.80 user=root Sep 30 11:28:38 srv206 sshd[27020]: Failed password for root from 49.88.112.80 port 52023 ssh2 ... |
2019-09-30 17:38:12 |
| 113.221.27.175 | attack | Fail2Ban - FTP Abuse Attempt |
2019-09-30 18:12:30 |
| 51.77.147.51 | attackbots | Lines containing failures of 51.77.147.51 Sep 30 00:04:15 mx-in-01 sshd[20204]: Invalid user lturpin from 51.77.147.51 port 47684 Sep 30 00:04:15 mx-in-01 sshd[20204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.147.51 Sep 30 00:04:17 mx-in-01 sshd[20204]: Failed password for invalid user lturpin from 51.77.147.51 port 47684 ssh2 Sep 30 00:04:18 mx-in-01 sshd[20204]: Received disconnect from 51.77.147.51 port 47684:11: Bye Bye [preauth] Sep 30 00:04:18 mx-in-01 sshd[20204]: Disconnected from invalid user lturpin 51.77.147.51 port 47684 [preauth] Sep 30 00:20:09 mx-in-01 sshd[21656]: Invalid user rtkhostname from 51.77.147.51 port 45426 Sep 30 00:20:09 mx-in-01 sshd[21656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.147.51 Sep 30 00:20:11 mx-in-01 sshd[21656]: Failed password for invalid user rtkhostname from 51.77.147.51 port 45426 ssh2 Sep 30 00:20:11 mx-in-01 sshd[216........ ------------------------------ |
2019-09-30 18:19:17 |
| 45.136.109.34 | attackspam | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2019-09-30 18:12:07 |
| 185.245.85.78 | attackbots | Referrer spammer |
2019-09-30 17:46:24 |