城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 149.104.0.0 - 149.104.255.255
CIDR: 149.104.0.0/16
NetName: COGENT-149-104-16
NetHandle: NET-149-104-0-0-1
Parent: NET149 (NET-149-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1992-02-03
Updated: 2025-09-23
Ref: https://rdap.arin.net/registry/ip/149.104.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
# end
# start
NetRange: 149.104.0.0 - 149.104.63.255
CIDR: 149.104.0.0/18
NetName: STARCLOUD-GLOBAL-CGNT-NET-7
NetHandle: NET-149-104-0-0-2
Parent: COGENT-149-104-16 (NET-149-104-0-0-1)
NetType: Reallocated
OriginAS:
Organization: STARCLOUD GLOBAL PTE. LTD. (SGPL-10)
RegDate: 2023-08-31
Updated: 2023-09-01
Ref: https://rdap.arin.net/registry/ip/149.104.0.0
OrgName: STARCLOUD GLOBAL PTE. LTD.
OrgId: SGPL-10
Address: 111 NORTH BRIDGE ROAD #21-01
Address: PENINSULA PLAZA
City: SINGAPORE
StateProv: SINGAPORE
PostalCode: 179098
Country: SG
RegDate: 2023-08-15
Updated: 2024-08-15
Ref: https://rdap.arin.net/registry/entity/SGPL-10
OrgAbuseHandle: ABUSE8814-ARIN
OrgAbuseName: ABUSE-SCG
OrgAbusePhone: +1-970-516-9999
OrgAbuseEmail: abuse@nebulaglobal.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE8814-ARIN
OrgTechHandle: TECHS236-ARIN
OrgTechName: TECH-SCG
OrgTechPhone: +1-970-516-9999
OrgTechEmail: noc@nebulaglobal.net
OrgTechRef: https://rdap.arin.net/registry/entity/TECHS236-ARIN
OrgNOCHandle: TECHS236-ARIN
OrgNOCName: TECH-SCG
OrgNOCPhone: +1-970-516-9999
OrgNOCEmail: noc@nebulaglobal.net
OrgNOCRef: https://rdap.arin.net/registry/entity/TECHS236-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-9568000012
network:Network-Name:NET4-9568000012
network:IP-Network:149.104.0.0/18
network:Org-Name:Nebula Global LLC
network:Street-Address:399 CHAI WAN ROAD
network:City:CHAI WAN
network:Country:HK
network:Postal-Code:00000
network:Tech-Contact:ZC108-ARIN
network:Updated:2026-06-17 13:24:35
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.104.25.115
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35603
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.104.25.115. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102500 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 25 16:32:22 CST 2026
;; MSG SIZE rcvd: 107Host 115.25.104.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 115.25.104.149.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.198.189.36 | attackspambots | Feb 9 10:58:20 MK-Soft-VM3 sshd[4644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36 Feb 9 10:58:21 MK-Soft-VM3 sshd[4644]: Failed password for invalid user vuw from 139.198.189.36 port 43024 ssh2 ... |
2020-02-09 20:19:19 |
| 221.210.237.3 | attackspam | unauthorized connection attempt |
2020-02-09 20:52:36 |
| 203.63.75.248 | attack | Automatic report - SSH Brute-Force Attack |
2020-02-09 20:44:30 |
| 211.72.117.101 | attackspam | Feb 9 10:11:35 ns381471 sshd[23534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.72.117.101 Feb 9 10:11:36 ns381471 sshd[23534]: Failed password for invalid user rum from 211.72.117.101 port 58754 ssh2 |
2020-02-09 20:36:32 |
| 51.75.66.89 | attackspambots | Feb 8 19:17:35 hpm sshd\[20065\]: Invalid user qoa from 51.75.66.89 Feb 8 19:17:35 hpm sshd\[20065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.ip-51-75-66.eu Feb 8 19:17:37 hpm sshd\[20065\]: Failed password for invalid user qoa from 51.75.66.89 port 60730 ssh2 Feb 8 19:20:46 hpm sshd\[20430\]: Invalid user jmq from 51.75.66.89 Feb 8 19:20:46 hpm sshd\[20430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.ip-51-75-66.eu |
2020-02-09 20:25:59 |
| 51.15.43.15 | attackbotsspam | Automatic report - SSH Brute-Force Attack |
2020-02-09 20:30:24 |
| 185.209.0.91 | attackspam | Feb 9 12:11:05 h2177944 kernel: \[4444698.608486\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.209.0.91 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=24585 PROTO=TCP SPT=42093 DPT=5002 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 9 12:11:05 h2177944 kernel: \[4444698.608499\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.209.0.91 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=24585 PROTO=TCP SPT=42093 DPT=5002 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 9 12:37:04 h2177944 kernel: \[4446257.827533\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.209.0.91 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=26152 PROTO=TCP SPT=42093 DPT=5906 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 9 12:37:04 h2177944 kernel: \[4446257.827548\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.209.0.91 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=26152 PROTO=TCP SPT=42093 DPT=5906 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 9 13:07:00 h2177944 kernel: \[4448053.125436\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.209.0.91 DST=85.214.117.9 LEN= |
2020-02-09 20:42:55 |
| 218.250.16.98 | attackbotsspam | [portscan] tcp/23 [TELNET] *(RWIN=14696)(02091251) |
2020-02-09 20:20:00 |
| 212.64.40.86 | attackbotsspam | Feb 9 07:13:54 Ubuntu-1404-trusty-64-minimal sshd\[20553\]: Invalid user yta from 212.64.40.86 Feb 9 07:13:54 Ubuntu-1404-trusty-64-minimal sshd\[20553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.40.86 Feb 9 07:13:56 Ubuntu-1404-trusty-64-minimal sshd\[20553\]: Failed password for invalid user yta from 212.64.40.86 port 36060 ssh2 Feb 9 07:24:55 Ubuntu-1404-trusty-64-minimal sshd\[25437\]: Invalid user bj from 212.64.40.86 Feb 9 07:24:55 Ubuntu-1404-trusty-64-minimal sshd\[25437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.40.86 |
2020-02-09 20:40:38 |
| 99.29.90.25 | attack | Feb 8 19:17:42 hpm sshd\[20073\]: Invalid user xsk from 99.29.90.25 Feb 8 19:17:42 hpm sshd\[20073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.29.90.25 Feb 8 19:17:44 hpm sshd\[20073\]: Failed password for invalid user xsk from 99.29.90.25 port 50935 ssh2 Feb 8 19:20:52 hpm sshd\[20456\]: Invalid user luh from 99.29.90.25 Feb 8 19:20:52 hpm sshd\[20456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.29.90.25 |
2020-02-09 20:35:30 |
| 222.186.42.155 | attack | 2020-02-09T07:47:07.321610vostok sshd\[22429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root | Triggered by Fail2Ban at Vostok web server |
2020-02-09 20:52:01 |
| 180.76.60.144 | attackspambots | Feb 9 09:34:37 |
2020-02-09 20:58:40 |
| 114.38.36.101 | attackbots | Telnet/23 MH Probe, BF, Hack - |
2020-02-09 20:29:10 |
| 88.202.190.151 | attackspam | 02/09/2020-05:48:06.176907 88.202.190.151 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-02-09 20:59:21 |
| 217.170.205.107 | attackspambots | Unauthorized access detected from black listed ip! |
2020-02-09 20:46:11 |