119.18.54.131 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.18.54.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22898
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.18.54.131.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 06:33:03 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 131.54.18.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.54.18.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.97.2.32	attackbotsspam	Oct 8 21:58:03 our-server-hostname postfix/smtpd[30836]: connect from unknown[138.97.2.32] Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.97.2.32	2019-10-09 02:27:45
211.64.67.48	attackbots	Oct 8 20:03:36 meumeu sshd[11480]: Failed password for root from 211.64.67.48 port 40254 ssh2 Oct 8 20:07:40 meumeu sshd[12012]: Failed password for root from 211.64.67.48 port 47234 ssh2 ...	2019-10-09 02:15:37
27.254.159.157	attackbots	fail2ban honeypot	2019-10-09 01:52:04
58.210.96.156	attack	Aug 20 17:17:04 dallas01 sshd[5961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.96.156 Aug 20 17:17:06 dallas01 sshd[5961]: Failed password for invalid user fs from 58.210.96.156 port 50949 ssh2 Aug 20 17:21:30 dallas01 sshd[6887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.96.156 Aug 20 17:21:33 dallas01 sshd[6887]: Failed password for invalid user video from 58.210.96.156 port 44452 ssh2	2019-10-09 02:22:03
219.234.147.218	attackbots	Sep 24 16:25:31 dallas01 sshd[17130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.234.147.218 Sep 24 16:25:33 dallas01 sshd[17130]: Failed password for invalid user j0k3r from 219.234.147.218 port 44555 ssh2 Sep 24 16:29:23 dallas01 sshd[17763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.234.147.218	2019-10-09 02:01:07
114.67.236.85	attackbotsspam	Oct 8 17:49:40 mail sshd[21296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.236.85 user=root Oct 8 17:49:42 mail sshd[21296]: Failed password for root from 114.67.236.85 port 9354 ssh2 Oct 8 18:25:04 mail sshd[25746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.236.85 user=root Oct 8 18:25:06 mail sshd[25746]: Failed password for root from 114.67.236.85 port 29979 ssh2 Oct 8 18:29:24 mail sshd[26301]: Invalid user 123 from 114.67.236.85 ...	2019-10-09 01:51:04
66.249.69.216	attack	Automatic report - Banned IP Access	2019-10-09 02:27:26
134.209.155.167	attack	Oct 8 20:44:21 tuotantolaitos sshd[12335]: Failed password for root from 134.209.155.167 port 51560 ssh2 ...	2019-10-09 01:51:32
128.171.166.20	attackbots	/var/log/messages:Oct 8 06:40:18 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1570516818.636:137635): pid=32701 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=32702 suid=74 rport=34748 laddr=104.167.106.93 lport=23 exe="/usr/sbin/sshd" hostname=? addr=128.171.166.20 terminal=? res=success' /var/log/messages:Oct 8 06:40:18 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1570516818.640:137636): pid=32701 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=32702 suid=74 rport=34748 laddr=104.167.106.93 lport=23 exe="/usr/sbin/sshd" hostname=? addr=128.171.166.20 terminal=? res=success' /var/log/messages:Oct 8 06:40:22 sanyalnet-cloud-vps fail2ban.filter[1378]: WARNING Deter........ -------------------------------	2019-10-09 01:56:39
219.157.132.185	attackspambots	Aug 18 13:09:33 dallas01 sshd[5642]: Failed password for root from 219.157.132.185 port 60478 ssh2 Aug 18 13:09:40 dallas01 sshd[5642]: Failed password for root from 219.157.132.185 port 60478 ssh2 Aug 18 13:09:42 dallas01 sshd[5642]: Failed password for root from 219.157.132.185 port 60478 ssh2 Aug 18 13:09:45 dallas01 sshd[5642]: Failed password for root from 219.157.132.185 port 60478 ssh2 Aug 18 13:09:45 dallas01 sshd[5642]: error: maximum authentication attempts exceeded for root from 219.157.132.185 port 60478 ssh2 [preauth]	2019-10-09 02:18:58
95.57.0.164	attack	scan r	2019-10-09 02:11:52
139.199.248.153	attackspambots	Oct 8 20:06:17 vps691689 sshd[7427]: Failed password for root from 139.199.248.153 port 35168 ssh2 Oct 8 20:10:39 vps691689 sshd[7490]: Failed password for root from 139.199.248.153 port 42362 ssh2 ...	2019-10-09 02:21:19
77.247.110.203	attackspam	\[2019-10-08 13:45:52\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '77.247.110.203:53825' - Wrong password \[2019-10-08 13:45:52\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T13:45:52.992-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7549",SessionID="0x7fc3acc3d768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.203/53825",Challenge="1535613c",ReceivedChallenge="1535613c",ReceivedHash="0dcc36c67e3d87672405a997238ac120" \[2019-10-08 13:45:52\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '77.247.110.203:53824' - Wrong password \[2019-10-08 13:45:52\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T13:45:52.992-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7549",SessionID="0x7fc3ac2ed548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.203/53824",Chal	2019-10-09 01:53:53
121.225.84.124	attack	Oct 8 13:51:39 archiv sshd[18398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.84.124 user=r.r Oct 8 13:51:41 archiv sshd[18398]: Failed password for r.r from 121.225.84.124 port 11373 ssh2 Oct 8 13:51:41 archiv sshd[18398]: Received disconnect from 121.225.84.124 port 11373:11: Bye Bye [preauth] Oct 8 13:51:41 archiv sshd[18398]: Disconnected from 121.225.84.124 port 11373 [preauth] Oct 8 14:03:43 archiv sshd[18560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.84.124 user=r.r Oct 8 14:03:45 archiv sshd[18560]: Failed password for r.r from 121.225.84.124 port 34314 ssh2 Oct 8 14:03:46 archiv sshd[18560]: Received disconnect from 121.225.84.124 port 34314:11: Bye Bye [preauth] Oct 8 14:03:46 archiv sshd[18560]: Disconnected from 121.225.84.124 port 34314 [preauth] Oct 8 14:07:30 archiv sshd[18638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ........ -------------------------------	2019-10-09 02:14:30
1.65.175.207	attackspam	Multiple failed RDP login attempts	2019-10-09 02:02:50

Recently Reported IPs

119.18.54.135	119.18.54.140	119.18.54.141	119.18.54.145
119.18.54.146	119.18.54.151	119.18.54.155	119.18.54.160
119.18.54.165	119.18.54.166	119.18.54.180	119.18.54.19
119.18.54.195	119.18.54.27	119.18.54.20	119.18.54.28
119.18.54.36	119.18.54.39	119.18.54.40	119.18.54.44