149.56.27.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
149.56.27.11	attackspambots	(PERMBLOCK) 149.56.27.11 (CA/Canada/ns3.godatta.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:	2020-09-30 01:50:24
149.56.27.11	attackspambots	polres 149.56.27.11 [29/Sep/2020:01:50:40 "-" "POST /wp-login.php 200 4700 149.56.27.11 [29/Sep/2020:09:56:49 "-" "GET /wp-login.php 200 3840 149.56.27.11 [29/Sep/2020:09:56:50 "-" "POST /wp-login.php 200 3943	2020-09-29 17:50:34
149.56.27.80	attack	CnC server for mining cryptocoin	2019-10-25 22:00:05

Type

Details

Datetime

149.56.27.11

attackspambots

(PERMBLOCK) 149.56.27.11 (CA/Canada/ns3.godatta.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:

2020-09-30 01:50:24

149.56.27.11

attackspambots

polres 149.56.27.11 [29/Sep/2020:01:50:40 "-" "POST /wp-login.php 200 4700
149.56.27.11 [29/Sep/2020:09:56:49 "-" "GET /wp-login.php 200 3840
149.56.27.11 [29/Sep/2020:09:56:50 "-" "POST /wp-login.php 200 3943

2020-09-29 17:50:34

149.56.27.80

attack

CnC server for mining cryptocoin

2019-10-25 22:00:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.56.27.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34673
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.56.27.142.			IN	A

;; AUTHORITY SECTION:
.			504	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:50:57 CST 2022
;; MSG SIZE  rcvd: 106

Host info

142.27.56.149.in-addr.arpa domain name pointer pender.islandhosting.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.27.56.149.in-addr.arpa	name = pender.islandhosting.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.64.111.18	attackspambots	SSH brute force	2020-04-30 08:19:10
209.208.78.127	attack	(pop3d) Failed POP3 login from 209.208.78.127 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 30 00:41:02 ir1 dovecot[264309]: pop3-login: Aborted login (auth failed, 1 attempts in 3 secs): user=, method=PLAIN, rip=209.208.78.127, lip=5.63.12.44, session=	2020-04-30 08:20:06
138.207.201.171	attack	neg seo and spam from this fool!~	2020-04-30 12:03:39
52.179.168.189	attackbots	Repeated RDP login failures. Last user: a	2020-04-30 07:58:37
147.135.197.108	attackbotsspam	2020-04-29T17:01:39.0683081495-001 sshd[48555]: Invalid user eom from 147.135.197.108 port 45758 2020-04-29T17:01:41.4766091495-001 sshd[48555]: Failed password for invalid user eom from 147.135.197.108 port 45758 ssh2 2020-04-29T17:06:38.6894951495-001 sshd[48745]: Invalid user icn from 147.135.197.108 port 60146 2020-04-29T17:06:38.6978181495-001 sshd[48745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.197.108 2020-04-29T17:06:38.6894951495-001 sshd[48745]: Invalid user icn from 147.135.197.108 port 60146 2020-04-29T17:06:40.8172081495-001 sshd[48745]: Failed password for invalid user icn from 147.135.197.108 port 60146 ssh2 ...	2020-04-30 08:07:43
85.53.160.67	attackbots	Invalid user stq from 85.53.160.67 port 51264	2020-04-30 07:57:20
222.186.31.83	attackbots	Apr 30 01:50:53 minden010 sshd[15346]: Failed password for root from 222.186.31.83 port 50647 ssh2 Apr 30 01:50:56 minden010 sshd[15346]: Failed password for root from 222.186.31.83 port 50647 ssh2 Apr 30 01:50:58 minden010 sshd[15346]: Failed password for root from 222.186.31.83 port 50647 ssh2 ...	2020-04-30 07:53:49
170.239.27.174	attack	nginx-botsearch jail	2020-04-30 07:51:52
218.92.0.211	attackbotsspam	2020-04-30T01:14:24.134427sd-86998 sshd[10593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211 user=root 2020-04-30T01:14:26.663675sd-86998 sshd[10593]: Failed password for root from 218.92.0.211 port 27052 ssh2 2020-04-30T01:14:28.767975sd-86998 sshd[10593]: Failed password for root from 218.92.0.211 port 27052 ssh2 2020-04-30T01:14:24.134427sd-86998 sshd[10593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211 user=root 2020-04-30T01:14:26.663675sd-86998 sshd[10593]: Failed password for root from 218.92.0.211 port 27052 ssh2 2020-04-30T01:14:28.767975sd-86998 sshd[10593]: Failed password for root from 218.92.0.211 port 27052 ssh2 2020-04-30T01:14:24.134427sd-86998 sshd[10593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211 user=root 2020-04-30T01:14:26.663675sd-86998 sshd[10593]: Failed password for root from 218.92.0.211 p ...	2020-04-30 08:03:13
42.200.66.164	attackspam	SSH bruteforce	2020-04-30 07:52:12
134.169.109.83	attack	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	2020-04-30 08:08:03
180.76.237.54	attack	Apr 30 00:28:30 * sshd[22774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.237.54 Apr 30 00:28:31 * sshd[22774]: Failed password for invalid user dog from 180.76.237.54 port 58920 ssh2	2020-04-30 08:16:21
125.164.105.83	attackspam	Unauthorised access (Apr 30) SRC=125.164.105.83 LEN=52 TTL=118 ID=15095 DF TCP DPT=445 WINDOW=8192 SYN	2020-04-30 12:04:25
189.196.235.194	attackspam	(imapd) Failed IMAP login from 189.196.235.194 (MX/Mexico/customer-PUE-235-194.megared.net.mx): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 30 00:41:42 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=189.196.235.194, lip=5.63.12.44, session=<7QM2jnOk7LS9xOvC>	2020-04-30 07:56:05
59.127.152.203	attackbotsspam	SSH brute force	2020-04-30 08:00:18

Recently Reported IPs

149.56.26.2	149.56.30.144	149.56.27.121	149.56.31.36
149.56.26.49	149.56.29.14	149.56.47.18	149.56.6.89
149.56.30.85	149.56.39.72	149.56.33.82	149.56.44.19
149.56.47.7	149.56.38.106	149.56.69.69	149.56.66.211
149.56.7.201	149.56.72.190	149.56.89.157	149.56.7.207