149.56.30.153 - IPInfo

Basic Info

City: Montreal

Region: Quebec

Country: Canada

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
149.56.30.149	attack	wp-login.php	2019-09-22 04:13:49
149.56.30.149	attack	149.56.30.149 - - [17/Sep/2019:18:00:29 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.30.149 - - [17/Sep/2019:18:00:30 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.30.149 - - [17/Sep/2019:18:00:30 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.30.149 - - [17/Sep/2019:18:00:31 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.30.149 - - [17/Sep/2019:18:00:31 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.30.149 - - [17/Sep/2019:18:00:31 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-09-18 00:03:06

Type

Details

Datetime

149.56.30.149

attack

wp-login.php

2019-09-22 04:13:49

149.56.30.149

attack

149.56.30.149 - - [17/Sep/2019:18:00:29 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.30.149 - - [17/Sep/2019:18:00:30 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.30.149 - - [17/Sep/2019:18:00:30 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.30.149 - - [17/Sep/2019:18:00:31 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.30.149 - - [17/Sep/2019:18:00:31 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.30.149 - - [17/Sep/2019:18:00:31 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...

2019-09-18 00:03:06

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.56.30.153
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49357
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.56.30.153.			IN	A

;; AUTHORITY SECTION:
.			376	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022071300 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 13 21:45:45 CST 2022
;; MSG SIZE  rcvd: 106

Host info

153.30.56.149.in-addr.arpa domain name pointer ns533175.ip-149-56-30.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
153.30.56.149.in-addr.arpa	name = ns533175.ip-149-56-30.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
71.6.199.23	attack	13.09.2019 07:39:00 Connection to port 4949 blocked by firewall	2019-09-13 15:49:42
112.229.18.168	attackbots	$f2bV_matches_ltvn	2019-09-13 15:48:12
104.237.253.195	attackbotsspam	$f2bV_matches_ltvn	2019-09-13 15:38:55
95.105.233.209	attackspambots	Sep 13 03:05:38 ns37 sshd[4579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.105.233.209	2019-09-13 16:21:25
81.145.158.178	attackbots	Sep 13 03:29:27 vps200512 sshd\[32621\]: Invalid user ClepSi from 81.145.158.178 Sep 13 03:29:27 vps200512 sshd\[32621\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.145.158.178 Sep 13 03:29:29 vps200512 sshd\[32621\]: Failed password for invalid user ClepSi from 81.145.158.178 port 40352 ssh2 Sep 13 03:34:50 vps200512 sshd\[32689\]: Invalid user 123456 from 81.145.158.178 Sep 13 03:34:50 vps200512 sshd\[32689\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.145.158.178	2019-09-13 15:44:11
128.201.232.89	attackspam	Sep 12 21:48:56 aat-srv002 sshd[27741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.201.232.89 Sep 12 21:48:57 aat-srv002 sshd[27741]: Failed password for invalid user P@ssw0rd from 128.201.232.89 port 40428 ssh2 Sep 12 21:55:41 aat-srv002 sshd[27871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.201.232.89 Sep 12 21:55:43 aat-srv002 sshd[27871]: Failed password for invalid user P@ssw0rd from 128.201.232.89 port 42566 ssh2 ...	2019-09-13 16:15:32
70.125.42.101	attackbots	2019-08-21 00:28:32,089 fail2ban.actions [878]: NOTICE [sshd] Ban 70.125.42.101 2019-08-21 03:48:59,939 fail2ban.actions [878]: NOTICE [sshd] Ban 70.125.42.101 2019-08-21 07:00:27,477 fail2ban.actions [878]: NOTICE [sshd] Ban 70.125.42.101 ...	2019-09-13 15:32:22
45.229.54.35	attackbots	Autoban 45.229.54.35 AUTH/CONNECT	2019-09-13 16:14:58
3.216.8.185	attack	Message ID Created at: Thu, Sep 12, 2019 at 2:44 PM (Delivered after 6337 seconds) From: Flat Belly Diet To: Subject: The 1 ancient & Only spice burns 1lb a day SPF: PASS with IP 3.216.8.185	2019-09-13 15:38:06
217.112.128.137	attackspambots	Postfix RBL failed	2019-09-13 15:42:32
186.151.170.222	attack	detected by Fail2Ban	2019-09-13 16:10:56
159.65.131.134	attackspam	Sep 13 03:18:48 TORMINT sshd\[24366\]: Invalid user tomcat from 159.65.131.134 Sep 13 03:18:48 TORMINT sshd\[24366\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.131.134 Sep 13 03:18:51 TORMINT sshd\[24366\]: Failed password for invalid user tomcat from 159.65.131.134 port 49302 ssh2 ...	2019-09-13 15:27:19
118.238.4.201	attack	WordPress XMLRPC scan :: 118.238.4.201 0.056 BYPASS [13/Sep/2019:15:37:49 1000] [censored_4] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-09-13 15:43:06
146.88.240.4	attack	Scanning random ports - tries to find possible vulnerable services	2019-09-13 15:51:31
193.112.74.137	attack	Sep 12 17:32:54 php1 sshd\[25211\]: Invalid user svnuser from 193.112.74.137 Sep 12 17:32:54 php1 sshd\[25211\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.74.137 Sep 12 17:32:56 php1 sshd\[25211\]: Failed password for invalid user svnuser from 193.112.74.137 port 39001 ssh2 Sep 12 17:38:10 php1 sshd\[25811\]: Invalid user steam from 193.112.74.137 Sep 12 17:38:10 php1 sshd\[25811\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.74.137	2019-09-13 15:47:10

Recently Reported IPs

171.110.247.137	23.3.120.25	27.147.200.198	10.177.222.6
11.59.170.54	165.68.127.171	10.12.51.120	27.255.200.248
51.159.135.253	65.18.124.184	136.228.172.192	180.235.117.20
165.22.220.164	143.110.188.150	61.4.74.227	107.174.79.98
103.109.56.107	201.125.197.156	78.21.168.146	201.97.49.19