140.213.54.131

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
140.213.54.192	attackspam	xmlrpc attack	2020-08-02 18:23:09
140.213.54.29	attack	1594987994 - 07/17/2020 14:13:14 Host: 140.213.54.29/140.213.54.29 Port: 445 TCP Blocked	2020-07-17 22:31:46
140.213.54.234	attackbotsspam	1591502250 - 06/07/2020 05:57:30 Host: 140.213.54.234/140.213.54.234 Port: 445 TCP Blocked	2020-06-07 13:24:41
140.213.54.232	attack	Unauthorized connection attempt from IP address 140.213.54.232 on Port 445(SMB)	2020-02-16 10:11:12

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.213.54.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36660
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;140.213.54.131.			IN	A

;; AUTHORITY SECTION:
.			26	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:02:11 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 131.54.213.140.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.54.213.140.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.56.90.32	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/106.56.90.32/ CN - 1H : (669) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 106.56.90.32 CIDR : 106.56.0.0/15 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 17 3H - 36 6H - 63 12H - 133 24H - 273 DateTime : 2019-11-02 04:54:40 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-11-02 12:46:06
46.38.144.17	attackspambots	Nov 2 05:21:29 webserver postfix/smtpd\[1279\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 2 05:22:41 webserver postfix/smtpd\[614\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 2 05:23:53 webserver postfix/smtpd\[1279\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 2 05:25:07 webserver postfix/smtpd\[1805\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 2 05:26:17 webserver postfix/smtpd\[1279\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-11-02 12:36:08
49.64.144.12	attackbots	Lines containing failures of 49.64.144.12 Nov 1 02:46:06 * sshd[92766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.144.12 user=r.r Nov 1 02:46:09 * sshd[92766]: Failed password for r.r from 49.64.144.12 port 56369 ssh2 Nov 1 02:46:09 * sshd[92766]: Received disconnect from 49.64.144.12 port 56369:11: Bye Bye [preauth] Nov 1 02:46:09 * sshd[92766]: Disconnected from authenticating user r.r 49.64.144.12 port 56369 [preauth] Nov 1 03:01:56 * sshd[93699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.144.12 user=r.r Nov 1 03:01:58 * sshd[93699]: Failed password for r.r from 49.64.144.12 port 44806 ssh2 Nov 1 03:01:58 * sshd[93699]: Received disconnect from 49.64.144.12 port 44806:11: Bye Bye [preauth] Nov 1 03:01:58 * sshd[93699]: Disconnected from authenticating user r.r 49.64.144.12 port 44806 [preauth] Nov 1 03:06:41 *** sshd[94035]: Invalid user g........ ------------------------------	2019-11-02 12:28:42
51.75.19.175	attackspam	Nov 1 18:40:32 auw2 sshd\[27066\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.ip-51-75-19.eu user=root Nov 1 18:40:34 auw2 sshd\[27066\]: Failed password for root from 51.75.19.175 port 50220 ssh2 Nov 1 18:44:21 auw2 sshd\[27391\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.ip-51-75-19.eu user=root Nov 1 18:44:23 auw2 sshd\[27391\]: Failed password for root from 51.75.19.175 port 59928 ssh2 Nov 1 18:48:14 auw2 sshd\[27704\]: Invalid user nagios from 51.75.19.175	2019-11-02 12:56:16
218.63.74.72	attackspambots	2019-11-02T04:27:19.534485abusebot-8.cloudsearch.cf sshd\[5703\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.63.74.72 user=root	2019-11-02 12:52:35
201.116.194.210	attackspambots	2019-11-02T05:15:35.886348host3.slimhost.com.ua sshd[2693258]: Failed password for root from 201.116.194.210 port 51019 ssh2 2019-11-02T05:19:28.139967host3.slimhost.com.ua sshd[2695807]: Invalid user admin from 201.116.194.210 port 6604 2019-11-02T05:19:28.145721host3.slimhost.com.ua sshd[2695807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.116.194.210 2019-11-02T05:19:28.139967host3.slimhost.com.ua sshd[2695807]: Invalid user admin from 201.116.194.210 port 6604 2019-11-02T05:19:30.425641host3.slimhost.com.ua sshd[2695807]: Failed password for invalid user admin from 201.116.194.210 port 6604 ssh2 ...	2019-11-02 12:35:43
177.66.208.235	attackbotsspam	Automatic report - Port Scan Attack	2019-11-02 13:02:57
117.50.13.170	attackspambots	2019-11-02T04:26:56.813473abusebot-6.cloudsearch.cf sshd\[7236\]: Invalid user ftpuser from 117.50.13.170 port 46200	2019-11-02 12:49:51
178.128.113.26	attackspam	Nov 2 05:29:42 meumeu sshd[31149]: Failed password for root from 178.128.113.26 port 55630 ssh2 Nov 2 05:34:10 meumeu sshd[31682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.113.26 Nov 2 05:34:12 meumeu sshd[31682]: Failed password for invalid user 123 from 178.128.113.26 port 38024 ssh2 ...	2019-11-02 12:51:14
193.32.160.147	attack	Nov 2 01:00:42 mecmail postfix/smtpd[6925]: NOQUEUE: reject: RCPT from unknown[193.32.160.147]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[193.32.160.153]> Nov 2 01:00:42 mecmail postfix/smtpd[6925]: NOQUEUE: reject: RCPT from unknown[193.32.160.147]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[193.32.160.153]> Nov 2 01:00:42 mecmail postfix/smtpd[6925]: NOQUEUE: reject: RCPT from unknown[193.32.160.147]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[193.32.160.153]> Nov 2 01:00:42 mecmail postfix/smtpd[6925]: NOQUEUE: reject: RCPT from unknown[193.32.160.147]: 554 5.7.1 : Relay access denied; from= ...	2019-11-02 13:02:10
92.118.37.99	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 96 - port: 11003 proto: TCP cat: Misc Attack	2019-11-02 12:41:18
106.13.12.76	attack	$f2bV_matches_ltvn	2019-11-02 12:52:52
34.217.67.66	attackbots	Nov 1 23:54:34 web1 postfix/smtpd[13623]: warning: ec2-34-217-67-66.us-west-2.compute.amazonaws.com[34.217.67.66]: SASL LOGIN authentication failed: authentication failure ...	2019-11-02 12:50:33
142.4.1.222	attackbotsspam	142.4.1.222 - - [02/Nov/2019:04:54:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2112 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.1.222 - - [02/Nov/2019:04:55:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2093 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-11-02 12:31:45
106.12.207.220	attack	Lines containing failures of 106.12.207.220 (max 1000) Oct 31 21:42:12 mm sshd[5448]: Invalid user osboxes from 106.12.207.220= port 60812 Oct 31 21:42:12 mm sshd[5448]: pam_unix(sshd:auth): authentication fail= ure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D106.12.207.= 220 Oct 31 21:42:14 mm sshd[5448]: Failed password for invalid user osboxes= from 106.12.207.220 port 60812 ssh2 Oct 31 21:42:14 mm sshd[5448]: Received disconnect from 106.12.207.220 = port 60812:11: Bye Bye [preauth] Oct 31 21:42:14 mm sshd[5448]: Disconnected from invalid user osboxes 1= 06.12.207.220 port 60812 [preauth] Oct 31 21:55:19 mm sshd[5627]: Invalid user info from 106.12.207.220 po= rt 51662 Oct 31 21:55:19 mm sshd[5627]: pam_unix(sshd:auth): authentication fail= ure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D106.12.207.= 220 Oct 31 21:55:21 mm sshd[5627]: Failed password for invalid user info fr= om 106.12.207.220 port 51662 ssh2 Oct 31 21:55:22 mm sshd[5627]: R........ ------------------------------	2019-11-02 12:48:02

Recently Reported IPs

140.213.54.202	118.70.67.241	118.70.68.123	118.70.68.178
118.70.68.54	118.70.68.58	118.70.68.69	118.70.72.192
118.70.72.57	140.224.64.152	140.224.64.135	140.224.64.150
140.224.64.137	140.224.64.153	140.224.64.149	140.224.64.13
140.224.64.151	140.224.64.14	140.224.64.143	140.224.64.138