City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: Afrihost (Pty) Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | 2020-08-23T05:06:53.968067shield sshd\[23479\]: Invalid user sonar from 154.0.161.99 port 40176 2020-08-23T05:06:53.974794shield sshd\[23479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za 2020-08-23T05:06:56.320714shield sshd\[23479\]: Failed password for invalid user sonar from 154.0.161.99 port 40176 ssh2 2020-08-23T05:12:21.981373shield sshd\[24869\]: Invalid user ralf from 154.0.161.99 port 49512 2020-08-23T05:12:22.020383shield sshd\[24869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za |
2020-08-23 14:19:19 |
| attackspam | Aug 19 17:32:07 db sshd[14408]: Invalid user sales from 154.0.161.99 port 37440 ... |
2020-08-20 02:04:49 |
| attackbots | 2020-08-16T12:35:46.067859shield sshd\[20770\]: Invalid user money from 154.0.161.99 port 41120 2020-08-16T12:35:46.077812shield sshd\[20770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za 2020-08-16T12:35:47.683797shield sshd\[20770\]: Failed password for invalid user money from 154.0.161.99 port 41120 ssh2 2020-08-16T12:40:46.916053shield sshd\[21630\]: Invalid user ed from 154.0.161.99 port 50550 2020-08-16T12:40:46.924820shield sshd\[21630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za |
2020-08-16 21:13:21 |
| attackbots | fail2ban |
2020-08-13 22:56:58 |
| attackbots | Aug 8 22:54:41 pkdns2 sshd\[17934\]: Failed password for root from 154.0.161.99 port 60670 ssh2Aug 8 22:56:53 pkdns2 sshd\[18051\]: Address 154.0.161.99 maps to peardev.dedicated.co.za, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 8 22:56:55 pkdns2 sshd\[18051\]: Failed password for root from 154.0.161.99 port 32926 ssh2Aug 8 22:59:09 pkdns2 sshd\[18139\]: Address 154.0.161.99 maps to peardev.dedicated.co.za, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 8 22:59:12 pkdns2 sshd\[18139\]: Failed password for root from 154.0.161.99 port 33414 ssh2Aug 8 23:01:31 pkdns2 sshd\[18255\]: Failed password for root from 154.0.161.99 port 33902 ssh2 ... |
2020-08-09 04:23:52 |
| attackbotsspam | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-07-19 20:48:00 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 154.0.161.131 | attackspambots | Wordpress_xmlrpc_attack |
2020-05-25 22:26:10 |
| 154.0.161.239 | attackbots | xmlrpc |
2020-04-02 07:28:25 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.0.161.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29741
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.0.161.99. IN A
;; AUTHORITY SECTION:
. 467 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020071900 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 19 20:47:55 CST 2020
;; MSG SIZE rcvd: 11699.161.0.154.in-addr.arpa domain name pointer baymonitoring.dedicated.co.za.
99.161.0.154.in-addr.arpa domain name pointer gridfive01.dedicated.co.za.
99.161.0.154.in-addr.arpa domain name pointer peardev.dedicated.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
99.161.0.154.in-addr.arpa name = gridfive01.dedicated.co.za.
99.161.0.154.in-addr.arpa name = peardev.dedicated.co.za.
99.161.0.154.in-addr.arpa name = baymonitoring.dedicated.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.36.81.233 | attackbots | Dec 25 09:57:33 web1 postfix/smtpd[22282]: warning: unknown[185.36.81.233]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-25 22:57:41 |
| 111.231.79.44 | attackbots | SSH/22 MH Probe, BF, Hack - |
2019-12-25 23:17:09 |
| 222.186.175.155 | attack | Dec 25 05:04:26 php1 sshd\[24416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Dec 25 05:04:27 php1 sshd\[24416\]: Failed password for root from 222.186.175.155 port 14824 ssh2 Dec 25 05:04:55 php1 sshd\[24443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Dec 25 05:04:57 php1 sshd\[24443\]: Failed password for root from 222.186.175.155 port 2770 ssh2 Dec 25 05:05:00 php1 sshd\[24443\]: Failed password for root from 222.186.175.155 port 2770 ssh2 |
2019-12-25 23:05:31 |
| 2.179.216.109 | attack | 1577254647 - 12/25/2019 07:17:27 Host: 2.179.216.109/2.179.216.109 Port: 445 TCP Blocked |
2019-12-25 22:49:16 |
| 112.78.134.11 | attack | SSH/22 MH Probe, BF, Hack - |
2019-12-25 22:58:00 |
| 111.231.103.192 | attackbotsspam | SSH Brute Force, server-1 sshd[9746]: Failed password for invalid user tatsu from 111.231.103.192 port 49652 ssh2 |
2019-12-25 23:23:57 |
| 218.76.171.129 | attackspam | Dec 25 01:19:20 ws24vmsma01 sshd[171378]: Failed password for root from 218.76.171.129 port 37203 ssh2 ... |
2019-12-25 22:52:37 |
| 45.55.145.31 | attack | Dec 25 15:11:06 lnxweb61 sshd[21110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.145.31 |
2019-12-25 22:42:24 |
| 113.53.232.245 | attackspam | Dec 25 15:53:18 silence02 sshd[31242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.53.232.245 Dec 25 15:53:19 silence02 sshd[31242]: Failed password for invalid user rigoni from 113.53.232.245 port 53846 ssh2 Dec 25 15:57:23 silence02 sshd[31339]: Failed password for root from 113.53.232.245 port 41368 ssh2 |
2019-12-25 23:03:35 |
| 112.170.118.171 | attackbotsspam | SSH/22 MH Probe, BF, Hack - |
2019-12-25 23:04:06 |
| 190.187.104.146 | attack | Dec 25 15:25:27 sd-53420 sshd\[12941\]: Invalid user webb from 190.187.104.146 Dec 25 15:25:27 sd-53420 sshd\[12941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.187.104.146 Dec 25 15:25:28 sd-53420 sshd\[12941\]: Failed password for invalid user webb from 190.187.104.146 port 51786 ssh2 Dec 25 15:29:08 sd-53420 sshd\[14183\]: Invalid user steenbergen from 190.187.104.146 Dec 25 15:29:08 sd-53420 sshd\[14183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.187.104.146 ... |
2019-12-25 22:47:42 |
| 51.38.126.92 | attackbots | ssh failed login |
2019-12-25 23:23:28 |
| 180.158.10.2 | attackbots | Scanning |
2019-12-25 22:48:29 |
| 185.176.27.98 | attack | 12/25/2019-14:55:35.827912 185.176.27.98 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-25 22:56:40 |
| 106.13.72.95 | attackbots | Dec 25 14:51:09 areeb-Workstation sshd[13612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.72.95 Dec 25 14:51:11 areeb-Workstation sshd[13612]: Failed password for invalid user jonassen from 106.13.72.95 port 34832 ssh2 ... |
2019-12-25 22:53:54 |