城市(city): Ada
省份(region): Oklahoma
国家(country): United States
运营商(isp): Aire Networks del Mediterráneo, S.L.U.
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 149.18.0.0 - 149.18.255.255
CIDR: 149.18.0.0/16
NetName: COGENT-149-18-16
NetHandle: NET-149-18-0-0-1
Parent: NET149 (NET-149-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1992-01-28
Updated: 2025-09-23
Ref: https://rdap.arin.net/registry/ip/149.18.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
# end
# start
NetRange: 149.18.0.0 - 149.18.255.255
CIDR: 149.18.0.0/16
NetName: LOGICWEB
NetHandle: NET-149-18-0-0-2
Parent: COGENT-149-18-16 (NET-149-18-0-0-1)
NetType: Reallocated
OriginAS:
Organization: LogicWeb Inc. (LOGIC-25)
RegDate: 2021-06-01
Updated: 2024-07-15
Ref: https://rdap.arin.net/registry/ip/149.18.0.0
OrgName: LogicWeb Inc.
OrgId: LOGIC-25
Address: 55 Broadway
Address: #686
City: Greenlawn
StateProv: NY
PostalCode: 11740
Country: US
RegDate: 2007-12-10
Updated: 2024-11-25
Comment: ABUSE / SUBPOENAS
Comment: ------------------------
Comment: Send to: abuse@logicweb.com (no other email is valid for abuse complaints).
Ref: https://rdap.arin.net/registry/entity/LOGIC-25
OrgAbuseHandle: ABUSE1808-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-347-212-5047
OrgAbuseEmail: abuse@logicweb.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1808-ARIN
OrgTechHandle: TECH277-ARIN
OrgTechName: Tech
OrgTechPhone: +1-347-212-5047
OrgTechEmail: chad@logicweb.com
OrgTechRef: https://rdap.arin.net/registry/entity/TECH277-ARIN
# end
# start
NetRange: 149.18.46.0 - 149.18.47.255
CIDR: 149.18.46.0/23
NetName: BLS-BROADBAND-LLC
NetHandle: NET-149-18-46-0-1
Parent: LOGICWEB (NET-149-18-0-0-2)
NetType: Reassigned
OriginAS:
Customer: BLS Broadband LLC (C10651810)
RegDate: 2024-01-19
Updated: 2024-01-19
Ref: https://rdap.arin.net/registry/ip/149.18.46.0
CustName: BLS Broadband LLC
Address: 11720 CR 3570
City: Ada
StateProv: OK
PostalCode: 74820
Country: US
RegDate: 2024-01-19
Updated: 2024-01-19
Ref: https://rdap.arin.net/registry/entity/C10651810
OrgAbuseHandle: ABUSE1808-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-347-212-5047
OrgAbuseEmail: abuse@logicweb.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1808-ARIN
OrgTechHandle: TECH277-ARIN
OrgTechName: Tech
OrgTechPhone: +1-347-212-5047
OrgTechEmail: chad@logicweb.com
OrgTechRef: https://rdap.arin.net/registry/entity/TECH277-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-9512000010
network:Network-Name:NET4-9512000010
network:IP-Network:149.18.0.0/16
network:Org-Name:LogicWeb Inc.
network:Street-Address:3003 WOODBRIDGE AVENUE
network:City:EDISON
network:State:NJ
network:Country:US
network:Postal-Code:08837
network:Tech-Contact:ZC108-ARIN
network:Updated:2025-09-05 13:19:21
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.18.47.24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59874
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.18.47.24. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026052101 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 21 23:23:04 CST 2026
;; MSG SIZE rcvd: 105Host 24.47.18.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 24.47.18.149.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 165.232.39.224 | attackbots | 20 attempts against mh-ssh on rock |
2020-09-30 04:07:07 |
| 222.186.30.112 | attackbots | Sep 29 19:48:32 marvibiene sshd[40044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root Sep 29 19:48:34 marvibiene sshd[40044]: Failed password for root from 222.186.30.112 port 19411 ssh2 Sep 29 19:48:37 marvibiene sshd[40044]: Failed password for root from 222.186.30.112 port 19411 ssh2 Sep 29 19:48:32 marvibiene sshd[40044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root Sep 29 19:48:34 marvibiene sshd[40044]: Failed password for root from 222.186.30.112 port 19411 ssh2 Sep 29 19:48:37 marvibiene sshd[40044]: Failed password for root from 222.186.30.112 port 19411 ssh2 |
2020-09-30 03:53:24 |
| 51.158.67.120 | attack | Invalid user ubuntu from 51.158.67.120 port 53260 |
2020-09-30 03:55:32 |
| 45.129.33.151 | attackspam | 372 packets to ports 3301 3302 3303 3304 3305 3306 3307 3308 3309 3310 3311 3312 3313 3314 3315 3316 3317 3318 3319 3320 3321 3322 3323 3324 3325 3326 3327 3328 3329 3330 3331 3332 3333 3334 3335 3336 3337 3338 3339 3340 3341 3342 3343 3344 3345 3346 3347 3348, etc. |
2020-09-30 04:12:13 |
| 72.221.196.150 | attackspambots | CMS (WordPress or Joomla) login attempt. |
2020-09-30 03:57:03 |
| 66.76.27.71 | attackbots | 1433/tcp 139/tcp 445/tcp... [2020-08-02/09-29]10pkt,3pt.(tcp) |
2020-09-30 04:11:09 |
| 182.69.177.207 | attackspam | Sep 28 22:16:47 r.ca sshd[5105]: Failed password for invalid user solaris from 182.69.177.207 port 38376 ssh2 |
2020-09-30 04:17:56 |
| 51.91.251.20 | attackspambots | Brute%20Force%20SSH |
2020-09-30 04:01:03 |
| 185.217.1.246 | attackspambots | Sep 29 16:50:42 itv-usvr-01 sshd[23400]: Invalid user 0 from 185.217.1.246 |
2020-09-30 04:03:18 |
| 64.225.11.24 | attackbotsspam | Sep 29 22:49:46 ift sshd\[57834\]: Failed password for root from 64.225.11.24 port 43232 ssh2Sep 29 22:49:50 ift sshd\[57836\]: Failed password for root from 64.225.11.24 port 52224 ssh2Sep 29 22:49:55 ift sshd\[57841\]: Failed password for root from 64.225.11.24 port 33118 ssh2Sep 29 22:49:59 ift sshd\[57851\]: Failed password for invalid user admin from 64.225.11.24 port 42292 ssh2Sep 29 22:50:03 ift sshd\[57873\]: Failed password for invalid user admin from 64.225.11.24 port 51270 ssh2 ... |
2020-09-30 03:59:36 |
| 5.154.243.131 | attack | (sshd) Failed SSH login from 5.154.243.131 (RO/Romania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 13:37:08 server4 sshd[32079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.154.243.131 user=mailman Sep 29 13:37:10 server4 sshd[32079]: Failed password for mailman from 5.154.243.131 port 60896 ssh2 Sep 29 13:43:25 server4 sshd[3209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.154.243.131 user=cpanel Sep 29 13:43:27 server4 sshd[3209]: Failed password for cpanel from 5.154.243.131 port 47617 ssh2 Sep 29 13:46:34 server4 sshd[4873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.154.243.131 user=mysql |
2020-09-30 03:51:31 |
| 218.89.222.16 | attackspambots |
|
2020-09-30 04:02:41 |
| 153.177.9.204 | attackspambots | Telnet Honeypot -> Telnet Bruteforce / Login |
2020-09-30 03:56:12 |
| 220.186.145.9 | attackspambots | Lines containing failures of 220.186.145.9 (max 1000) Sep 29 20:07:59 mxbb sshd[20433]: reveeclipse mapping checking getaddrinfo for 9.145.186.220.broad.wz.zj.dynamic.163data.com.cn [220.186.145.9] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 29 20:07:59 mxbb sshd[20433]: Invalid user info from 220.186.145.9 port 43092 Sep 29 20:07:59 mxbb sshd[20433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.145.9 Sep 29 20:08:01 mxbb sshd[20433]: Failed password for invalid user info from 220.186.145.9 port 43092 ssh2 Sep 29 20:08:01 mxbb sshd[20433]: Received disconnect from 220.186.145.9 port 43092:11: Bye Bye [preauth] Sep 29 20:08:01 mxbb sshd[20433]: Disconnected from 220.186.145.9 port 43092 [preauth] Sep 29 20:15:35 mxbb sshd[20548]: reveeclipse mapping checking getaddrinfo for 9.145.186.220.broad.wz.zj.dynamic.163data.com.cn [220.186.145.9] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 29 20:15:35 mxbb sshd[20548]: Invalid user cpanel........ ------------------------------ |
2020-09-30 04:12:37 |
| 136.255.144.2 | attackspam | Sep 29 10:48:48 mockhub sshd[176991]: Invalid user mail1 from 136.255.144.2 port 45062 Sep 29 10:48:51 mockhub sshd[176991]: Failed password for invalid user mail1 from 136.255.144.2 port 45062 ssh2 Sep 29 10:53:35 mockhub sshd[177121]: Invalid user mailman from 136.255.144.2 port 38194 ... |
2020-09-30 04:15:37 |