Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: Afrihost (Pty) Ltd

Hostname: unknown

Organization: Afrihost

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Jul 10 21:06:19 tux-35-217 sshd\[24105\]: Invalid user ircd from 154.0.164.73 port 56422
Jul 10 21:06:19 tux-35-217 sshd\[24105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.0.164.73
Jul 10 21:06:21 tux-35-217 sshd\[24105\]: Failed password for invalid user ircd from 154.0.164.73 port 56422 ssh2
Jul 10 21:09:52 tux-35-217 sshd\[24118\]: Invalid user ftpu from 154.0.164.73 port 54772
Jul 10 21:09:52 tux-35-217 sshd\[24118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.0.164.73
...
2019-07-11 03:25:53
attackbotsspam
SSH brute force
2019-06-28 22:28:59
Comments on same subnet:
IP Type Details Datetime
154.0.164.181 attackspam
xmlrpc attack
2019-08-09 21:04:57
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.0.164.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21523
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.0.164.73.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019060100 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 01 19:27:11 CST 2019
;; MSG SIZE  rcvd: 116

Host info
73.164.0.154.in-addr.arpa domain name pointer antonand.dedicated.co.za.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
73.164.0.154.in-addr.arpa	name = antonand.dedicated.co.za.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
180.127.93.84 attack
Email rejected due to spam filtering
2020-09-08 06:38:03
5.29.140.73 attackspam
2020-09-07 18:53:01 1kFKO3-0000Qf-FL SMTP connection from \(\[5.29.140.73\]\) \[5.29.140.73\]:44462 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-07 18:53:07 1kFKO9-0000Qn-Sc SMTP connection from \(\[5.29.140.73\]\) \[5.29.140.73\]:44520 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-07 18:53:12 1kFKOD-0000Qw-Vu SMTP connection from \(\[5.29.140.73\]\) \[5.29.140.73\]:44552 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-09-08 06:35:31
190.153.228.250 attackspambots
Unauthorised access (Sep  7) SRC=190.153.228.250 LEN=44 TOS=0x10 PREC=0x40 TTL=51 ID=18441 TCP DPT=23 WINDOW=19606 SYN
2020-09-08 06:28:04
201.22.95.52 attackbots
Sep  7 16:52:47 scw-6657dc sshd[6585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.22.95.52  user=root
Sep  7 16:52:47 scw-6657dc sshd[6585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.22.95.52  user=root
Sep  7 16:52:49 scw-6657dc sshd[6585]: Failed password for root from 201.22.95.52 port 52406 ssh2
...
2020-09-08 06:51:49
222.186.42.213 attackbots
Sep  8 00:31:05 abendstille sshd\[18198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213  user=root
Sep  8 00:31:07 abendstille sshd\[18198\]: Failed password for root from 222.186.42.213 port 45648 ssh2
Sep  8 00:31:09 abendstille sshd\[18198\]: Failed password for root from 222.186.42.213 port 45648 ssh2
Sep  8 00:31:11 abendstille sshd\[18198\]: Failed password for root from 222.186.42.213 port 45648 ssh2
Sep  8 00:31:13 abendstille sshd\[18253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213  user=root
...
2020-09-08 06:36:24
111.125.126.234 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-08 06:56:45
185.137.233.213 attackbotsspam
Fail2Ban Ban Triggered
2020-09-08 06:32:29
68.183.92.52 attack
Sep  7 19:53:21 jane sshd[16481]: Failed password for root from 68.183.92.52 port 36538 ssh2
...
2020-09-08 06:47:15
91.204.199.73 attack
 TCP (SYN) 91.204.199.73:44700 -> port 188, len 44
2020-09-08 06:22:30
61.64.54.207 attackspambots
Unauthorized connection attempt
2020-09-08 06:42:59
51.89.18.77 attack
Sep  7 20:23:38 OPSO sshd\[4684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.18.77  user=root
Sep  7 20:23:40 OPSO sshd\[4684\]: Failed password for root from 51.89.18.77 port 45962 ssh2
Sep  7 20:28:00 OPSO sshd\[5355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.18.77  user=root
Sep  7 20:28:02 OPSO sshd\[5355\]: Failed password for root from 51.89.18.77 port 54484 ssh2
Sep  7 20:32:30 OPSO sshd\[6200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.18.77  user=root
2020-09-08 06:48:55
5.188.108.158 attackspam
Email rejected due to spam filtering
2020-09-08 06:43:20
80.114.130.156 attack
DATE:2020-09-07 18:51:32, IP:80.114.130.156, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-09-08 06:55:56
120.132.6.27 attackspambots
Sep  7 19:22:39 eventyay sshd[32280]: Failed password for root from 120.132.6.27 port 58407 ssh2
Sep  7 19:26:14 eventyay sshd[32351]: Failed password for root from 120.132.6.27 port 52514 ssh2
...
2020-09-08 06:47:34
98.146.212.146 attackbotsspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-07T16:43:59Z and 2020-09-07T16:53:29Z
2020-09-08 06:27:33

Recently Reported IPs

98.42.227.223 197.232.14.186 8.42.160.113 122.249.20.49
5.125.155.153 183.90.196.234 112.20.98.130 165.227.41.91
55.31.83.22 40.65.76.90 135.103.147.127 71.213.66.229
3.14.254.187 175.134.211.102 62.47.210.143 52.241.142.153
75.125.105.213 93.92.182.184 88.242.86.164 121.210.171.78