Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: Xpress Wireless (Pty) Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
DATE:2020-06-10 13:00:30, IP:154.70.134.71, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-06-10 22:32:34
attackspambots
[portscan] tcp/23 [TELNET]
*(RWIN=28464)(06070941)
2020-06-07 15:53:00
attackspambots
Unauthorized connection attempt detected from IP address 154.70.134.71
2020-04-11 00:58:14
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.70.134.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59251
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.70.134.71.			IN	A

;; AUTHORITY SECTION:
.			386	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040800 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 09 00:28:58 CST 2020
;; MSG SIZE  rcvd: 117
Host info
71.134.70.154.in-addr.arpa domain name pointer 154-70-134.static.xpressgt.co.za.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
71.134.70.154.in-addr.arpa	name = 154-70-134.static.xpressgt.co.za.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
159.203.201.16 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-12-20 20:25:32
157.245.217.100 attack
Dec 19 06:44:58 vps34202 sshd[7845]: Invalid user buford from 157.245.217.100
Dec 19 06:44:58 vps34202 sshd[7845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.217.100 
Dec 19 06:45:00 vps34202 sshd[7845]: Failed password for invalid user buford from 157.245.217.100 port 40892 ssh2
Dec 19 06:45:00 vps34202 sshd[7845]: Received disconnect from 157.245.217.100: 11: Bye Bye [preauth]
Dec 19 06:55:53 vps34202 sshd[8155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.217.100  user=r.r
Dec 19 06:55:55 vps34202 sshd[8155]: Failed password for r.r from 157.245.217.100 port 38276 ssh2
Dec 19 06:55:55 vps34202 sshd[8155]: Received disconnect from 157.245.217.100: 11: Bye Bye [preauth]
Dec 19 07:00:49 vps34202 sshd[8384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.217.100  user=r.r
Dec 19 07:00:51 vps34202 sshd[8384]: Failed pass........
-------------------------------
2019-12-20 20:21:00
40.124.4.131 attackspambots
Dec 20 12:21:07 herz-der-gamer sshd[12186]: Invalid user ubuntu from 40.124.4.131 port 52976
Dec 20 12:21:07 herz-der-gamer sshd[12186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.124.4.131
Dec 20 12:21:07 herz-der-gamer sshd[12186]: Invalid user ubuntu from 40.124.4.131 port 52976
Dec 20 12:21:09 herz-der-gamer sshd[12186]: Failed password for invalid user ubuntu from 40.124.4.131 port 52976 ssh2
...
2019-12-20 20:28:46
62.28.34.125 attackspambots
Dec 20 13:14:02 legacy sshd[6561]: Failed password for sshd from 62.28.34.125 port 5665 ssh2
Dec 20 13:21:51 legacy sshd[6806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125
Dec 20 13:21:53 legacy sshd[6806]: Failed password for invalid user admin1 from 62.28.34.125 port 5815 ssh2
...
2019-12-20 20:23:44
77.235.60.5 attack
TCP Port Scanning
2019-12-20 20:44:58
186.67.130.162 attackspambots
Dec 20 07:24:22  exim[12553]: [1\31] 1iiBhh-0003GT-M0 H=(tmscpa.com) [186.67.130.162] F= rejected after DATA: This message scored 103.5 spam points.
2019-12-20 20:21:42
40.92.18.18 attack
Dec 20 09:25:00 debian-2gb-vpn-nbg1-1 kernel: [1201460.629909] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.18.18 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=100 ID=16533 DF PROTO=TCP SPT=5692 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0
2019-12-20 20:24:35
51.75.126.115 attackspambots
SSH brutforce
2019-12-20 20:32:00
31.202.20.65 attackspam
Unauthorized connection attempt detected from IP address 31.202.20.65 to port 22
2019-12-20 20:40:44
34.217.174.60 attack
20.12.2019 07:24:50 - Bad Robot 
Ignore Robots.txt
2019-12-20 20:35:27
118.70.146.206 attackbotsspam
Host Scan
2019-12-20 20:54:45
63.81.87.105 attack
Dec 20 08:26:49 grey postfix/smtpd\[4540\]: NOQUEUE: reject: RCPT from unite.vidyad.com\[63.81.87.105\]: 554 5.7.1 Service unavailable\; Client host \[63.81.87.105\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.81.87.105\]\; from=\ to=\ proto=ESMTP helo=\
...
2019-12-20 20:15:14
54.72.54.237 attackbots
Alex Thomas Taylor
New London, CT
2019-12-20 20:53:14
51.254.38.106 attackspam
ssh failed login
2019-12-20 20:33:58
177.66.79.201 attackspambots
Dec 20 07:24:55  exim[12572]: [1\32] 1iiBiF-0003Gm-4v H=(toftefarmshoa.com) [177.66.79.201] F= rejected after DATA: This message scored 104.8 spam points.
2019-12-20 20:19:11

Recently Reported IPs

183.192.80.108 251.138.12.85 208.30.101.220 224.207.143.177
149.187.219.1 142.236.102.52 77.43.177.76 192.72.110.231
177.231.132.22 251.120.9.12 148.136.40.127 17.48.179.194
250.172.103.121 102.253.64.194 1.156.39.129 38.217.113.16
162.243.128.185 225.226.108.35 114.246.130.99 106.12.131.161