Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: Web Hosting Services in Johannesburg

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Automatic report BANNED IP
2020-09-05 22:32:26
attackspambots
Sep  5 00:01:35 haigwepa sshd[32486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66 
Sep  5 00:01:37 haigwepa sshd[32486]: Failed password for invalid user dp from 154.70.208.66 port 49078 ssh2
...
2020-09-05 14:09:25
attack
Sep  5 00:01:35 haigwepa sshd[32486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66 
Sep  5 00:01:37 haigwepa sshd[32486]: Failed password for invalid user dp from 154.70.208.66 port 49078 ssh2
...
2020-09-05 06:52:39
attackspambots
Sep  1 01:45:13 ns381471 sshd[9257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66
Sep  1 01:45:15 ns381471 sshd[9257]: Failed password for invalid user legacy from 154.70.208.66 port 39672 ssh2
2020-09-01 09:19:39
attackbots
Aug 17 14:01:03 sshgateway sshd\[25220\]: Invalid user uday from 154.70.208.66
Aug 17 14:01:03 sshgateway sshd\[25220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=proxmox1-tc2.macrolan.co.za
Aug 17 14:01:05 sshgateway sshd\[25220\]: Failed password for invalid user uday from 154.70.208.66 port 50586 ssh2
2020-08-18 03:10:55
attackbotsspam
Aug 15 03:49:49 jumpserver sshd[158311]: Failed password for root from 154.70.208.66 port 40156 ssh2
Aug 15 03:52:40 jumpserver sshd[158721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66  user=root
Aug 15 03:52:42 jumpserver sshd[158721]: Failed password for root from 154.70.208.66 port 33666 ssh2
...
2020-08-15 16:51:05
attackbots
Aug 12 08:01:10 journals sshd\[34671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66  user=root
Aug 12 08:01:13 journals sshd\[34671\]: Failed password for root from 154.70.208.66 port 37244 ssh2
Aug 12 08:05:27 journals sshd\[35001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66  user=root
Aug 12 08:05:29 journals sshd\[35001\]: Failed password for root from 154.70.208.66 port 40980 ssh2
Aug 12 08:09:52 journals sshd\[35390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66  user=root
...
2020-08-12 17:12:48
attack
Aug 10 14:03:19 vps sshd[30127]: Failed password for root from 154.70.208.66 port 42448 ssh2
Aug 10 14:05:02 vps sshd[30215]: Failed password for root from 154.70.208.66 port 52292 ssh2
...
2020-08-10 23:38:23
attack
2020-06-30T19:49:13.615587vps773228.ovh.net sshd[12660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=proxmox1-tc2.macrolan.co.za
2020-06-30T19:49:13.599426vps773228.ovh.net sshd[12660]: Invalid user contact from 154.70.208.66 port 58546
2020-06-30T19:49:15.310183vps773228.ovh.net sshd[12660]: Failed password for invalid user contact from 154.70.208.66 port 58546 ssh2
2020-06-30T19:50:49.821499vps773228.ovh.net sshd[12674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=proxmox1-tc2.macrolan.co.za  user=root
2020-06-30T19:50:52.027716vps773228.ovh.net sshd[12674]: Failed password for root from 154.70.208.66 port 42046 ssh2
...
2020-07-02 01:02:12
attackspambots
Jun 22 22:36:54 game-panel sshd[774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66
Jun 22 22:36:56 game-panel sshd[774]: Failed password for invalid user lukasz from 154.70.208.66 port 46880 ssh2
Jun 22 22:40:15 game-panel sshd[1100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66  user=ftpuser
2020-06-23 07:34:37
attackspambots
Failed password for invalid user jboss from 154.70.208.66 port 39148 ssh2
2020-05-29 12:46:03
attackspam
2020-05-24T23:52:32.198149mail.thespaminator.com sshd[28665]: Invalid user daniel from 154.70.208.66 port 55262
2020-05-24T23:52:35.029536mail.thespaminator.com sshd[28665]: Failed password for invalid user daniel from 154.70.208.66 port 55262 ssh2
...
2020-05-25 15:01:43
attackspambots
SSH / Telnet Brute Force Attempts on Honeypot
2020-04-02 09:12:37
attack
fail2ban
2020-03-29 06:44:37
attackbots
Feb  9 01:53:52 firewall sshd[28975]: Invalid user gat from 154.70.208.66
Feb  9 01:53:53 firewall sshd[28975]: Failed password for invalid user gat from 154.70.208.66 port 50948 ssh2
Feb  9 01:57:52 firewall sshd[29264]: Invalid user cno from 154.70.208.66
...
2020-02-09 13:59:57
attack
Unauthorized connection attempt detected from IP address 154.70.208.66 to port 2220 [J]
2020-02-03 21:55:57
attackspambots
Oct 30 15:02:19 ms-srv sshd[12865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66
Oct 30 15:02:22 ms-srv sshd[12865]: Failed password for invalid user wnn from 154.70.208.66 port 58632 ssh2
2020-02-02 23:02:00
attackspam
Unauthorized connection attempt detected from IP address 154.70.208.66 to port 2220 [J]
2020-01-29 04:22:21
attackbots
Jan 20 14:08:59 ourumov-web sshd\[7173\]: Invalid user testuser01 from 154.70.208.66 port 57278
Jan 20 14:08:59 ourumov-web sshd\[7173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66
Jan 20 14:09:01 ourumov-web sshd\[7173\]: Failed password for invalid user testuser01 from 154.70.208.66 port 57278 ssh2
...
2020-01-20 21:34:17
attackbots
Invalid user zope from 154.70.208.66 port 57228
2020-01-15 15:49:30
attackspambots
Invalid user es from 154.70.208.66 port 53538
2020-01-15 04:37:36
attack
Unauthorized connection attempt detected from IP address 154.70.208.66 to port 2220 [J]
2020-01-08 06:03:35
attackbotsspam
Dec 23 01:11:36 OPSO sshd\[5093\]: Invalid user bonatti from 154.70.208.66 port 54274
Dec 23 01:11:36 OPSO sshd\[5093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66
Dec 23 01:11:37 OPSO sshd\[5093\]: Failed password for invalid user bonatti from 154.70.208.66 port 54274 ssh2
Dec 23 01:18:58 OPSO sshd\[6440\]: Invalid user elsener from 154.70.208.66 port 59154
Dec 23 01:18:58 OPSO sshd\[6440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66
2019-12-23 08:26:20
attackbotsspam
2019-12-14T15:09:38.304661abusebot-4.cloudsearch.cf sshd\[14319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=proxmox1-tc2.macrolan.co.za  user=root
2019-12-14T15:09:40.689264abusebot-4.cloudsearch.cf sshd\[14319\]: Failed password for root from 154.70.208.66 port 46574 ssh2
2019-12-14T15:17:49.429084abusebot-4.cloudsearch.cf sshd\[14352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=proxmox1-tc2.macrolan.co.za  user=root
2019-12-14T15:17:51.218893abusebot-4.cloudsearch.cf sshd\[14352\]: Failed password for root from 154.70.208.66 port 53880 ssh2
2019-12-15 02:01:59
attackspambots
SSH login attempts.
2019-12-14 19:36:27
attack
$f2bV_matches
2019-12-11 07:17:14
attackspam
Nov 19 14:23:30 game-panel sshd[18227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66
Nov 19 14:23:31 game-panel sshd[18227]: Failed password for invalid user sherrard from 154.70.208.66 port 46504 ssh2
Nov 19 14:28:15 game-panel sshd[18355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66
2019-11-19 22:33:57
attackbotsspam
Nov 14 08:00:18 sso sshd[21615]: Failed password for root from 154.70.208.66 port 49424 ssh2
...
2019-11-14 15:29:40
attackbotsspam
Oct 30 03:47:30 wbs sshd\[8730\]: Invalid user abhinav from 154.70.208.66
Oct 30 03:47:30 wbs sshd\[8730\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=proxmox1-tc2.macrolan.co.za
Oct 30 03:47:32 wbs sshd\[8730\]: Failed password for invalid user abhinav from 154.70.208.66 port 46514 ssh2
Oct 30 03:52:47 wbs sshd\[9130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=proxmox1-tc2.macrolan.co.za  user=root
Oct 30 03:52:49 wbs sshd\[9130\]: Failed password for root from 154.70.208.66 port 56762 ssh2
2019-10-30 21:59:35
attackbotsspam
Automatic report - Banned IP Access
2019-10-23 19:36:09
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.70.208.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35764
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.70.208.66.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019093000 1800 900 604800 86400

;; Query time: 357 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 30 18:54:59 CST 2019
;; MSG SIZE  rcvd: 117
Host info
66.208.70.154.in-addr.arpa domain name pointer proxmox1-tc2.macrolan.co.za.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
66.208.70.154.in-addr.arpa	name = proxmox1-tc2.macrolan.co.za.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
50.70.229.239 attackspam
Invalid user adrick from 50.70.229.239 port 58434
2019-12-27 19:29:24
124.156.115.227 attackspambots
2019-12-27T07:16:06.694397abusebot-2.cloudsearch.cf sshd[25400]: Invalid user enuffgra from 124.156.115.227 port 48522
2019-12-27T07:16:06.699976abusebot-2.cloudsearch.cf sshd[25400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.115.227
2019-12-27T07:16:06.694397abusebot-2.cloudsearch.cf sshd[25400]: Invalid user enuffgra from 124.156.115.227 port 48522
2019-12-27T07:16:08.070255abusebot-2.cloudsearch.cf sshd[25400]: Failed password for invalid user enuffgra from 124.156.115.227 port 48522 ssh2
2019-12-27T07:19:54.783084abusebot-2.cloudsearch.cf sshd[25511]: Invalid user mcserv from 124.156.115.227 port 55312
2019-12-27T07:19:54.789396abusebot-2.cloudsearch.cf sshd[25511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.115.227
2019-12-27T07:19:54.783084abusebot-2.cloudsearch.cf sshd[25511]: Invalid user mcserv from 124.156.115.227 port 55312
2019-12-27T07:19:56.124897abusebot-2.cloudsear
...
2019-12-27 19:21:22
115.159.214.247 attackspambots
Dec 27 05:27:26 vps46666688 sshd[23535]: Failed password for mail from 115.159.214.247 port 36576 ssh2
...
2019-12-27 19:56:31
114.232.189.7 attackspam
Fail2Ban Ban Triggered
2019-12-27 19:54:07
124.205.131.139 attackbotsspam
Unauthorized connection attempt detected from IP address 124.205.131.139 to port 1433
2019-12-27 19:33:14
122.165.140.147 attackspambots
Dec 27 07:19:49 h2177944 sshd\[14022\]: Invalid user dundee from 122.165.140.147 port 46368
Dec 27 07:19:49 h2177944 sshd\[14022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.165.140.147
Dec 27 07:19:51 h2177944 sshd\[14022\]: Failed password for invalid user dundee from 122.165.140.147 port 46368 ssh2
Dec 27 07:23:33 h2177944 sshd\[14259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.165.140.147  user=root
...
2019-12-27 19:58:36
113.190.140.239 attack
Dec 27 07:23:36 vpn01 sshd[9985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.190.140.239
Dec 27 07:23:38 vpn01 sshd[9985]: Failed password for invalid user admin from 113.190.140.239 port 1970 ssh2
...
2019-12-27 19:55:18
212.237.62.122 attackspambots
Invalid user jesse from 212.237.62.122 port 59510
2019-12-27 19:31:43
117.247.5.143 attackbots
Dec 27 08:05:41 master sshd[30428]: Failed password for invalid user channy from 117.247.5.143 port 49168 ssh2
2019-12-27 19:20:07
124.207.216.2 attack
Port scan on 1 port(s): 21
2019-12-27 19:20:36
114.67.69.200 attack
[Aegis] @ 2019-12-27 08:31:39  0000 -> Multiple authentication failures.
2019-12-27 20:02:45
74.82.47.16 attack
Unauthorised access (Dec 27) SRC=74.82.47.16 LEN=40 TTL=242 ID=54321 TCP DPT=445 WINDOW=65535 SYN
2019-12-27 19:46:06
212.156.136.114 attack
Dec 27 09:27:45 v22018076622670303 sshd\[16779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.136.114  user=root
Dec 27 09:27:47 v22018076622670303 sshd\[16779\]: Failed password for root from 212.156.136.114 port 4070 ssh2
Dec 27 09:33:14 v22018076622670303 sshd\[16800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.136.114  user=root
...
2019-12-27 19:45:50
92.246.142.43 attackbotsspam
Dec 27 07:23:48 vpn01 sshd[9999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.142.43
Dec 27 07:23:50 vpn01 sshd[9999]: Failed password for invalid user mgts from 92.246.142.43 port 38147 ssh2
...
2019-12-27 19:47:52
106.222.73.197 attackbots
1577427828 - 12/27/2019 07:23:48 Host: 106.222.73.197/106.222.73.197 Port: 445 TCP Blocked
2019-12-27 19:48:59

Recently Reported IPs

122.6.76.126 36.68.6.134 2.56.101.207 77.222.105.76
45.180.240.1 42.119.13.246 223.206.238.87 183.131.110.103
14.241.39.99 14.240.117.52 14.184.249.188 118.69.120.27
113.187.70.197 1.43.62.176 178.57.25.225 218.87.236.78
62.219.227.9 198.108.66.203 173.208.238.226 71.112.129.204