城市(city): Chicago
省份(region): Illinois
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 38.0.0.0 - 38.255.255.255
CIDR: 38.0.0.0/8
NetName: COGENT-A
NetHandle: NET-38-0-0-0-1
Parent: ()
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1991-04-16
Updated: 2025-09-23
Ref: https://rdap.arin.net/registry/ip/38.0.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
# end
# start
NetRange: 38.30.192.0 - 38.30.207.255
CIDR: 38.30.192.0/20
NetName: WISDOM-CGNT-NET-1
NetHandle: NET-38-30-192-0-1
Parent: COGENT-A (NET-38-0-0-0-1)
NetType: Reallocated
OriginAS:
Organization: WISDOM CLOUD INTERNET TECHNOLOGY PTE. LTD (WCITPL)
RegDate: 2024-11-22
Updated: 2024-11-25
Comment: Geofeed https://adsl.cat/rfc8805.csv
Ref: https://rdap.arin.net/registry/ip/38.30.192.0
OrgName: WISDOM CLOUD INTERNET TECHNOLOGY PTE. LTD
OrgId: WCITPL
Address: 260B Ang Mo Kio Street 21 #18-153
City: SINGAPORE
StateProv:
PostalCode: 562260
Country: SG
RegDate: 2023-09-20
Updated: 2025-11-14
Ref: https://rdap.arin.net/registry/entity/WCITPL
OrgAbuseHandle: LEEJA109-ARIN
OrgAbuseName: Lee, Jack
OrgAbusePhone: +65 94800603
OrgAbuseEmail: noc@wisdomisp.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgDNSHandle: LEEJA109-ARIN
OrgDNSName: Lee, Jack
OrgDNSPhone: +65 94800603
OrgDNSEmail: noc@wisdomisp.com
OrgDNSRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgTechHandle: LEEJA109-ARIN
OrgTechName: Lee, Jack
OrgTechPhone: +65 94800603
OrgTechEmail: noc@wisdomisp.com
OrgTechRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgRoutingHandle: LEEJA109-ARIN
OrgRoutingName: Lee, Jack
OrgRoutingPhone: +65 94800603
OrgRoutingEmail: noc@wisdomisp.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgNOCHandle: LEEJA109-ARIN
OrgNOCName: Lee, Jack
OrgNOCPhone: +65 94800603
OrgNOCEmail: noc@wisdomisp.com
OrgNOCRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
# end
# start
NetRange: 38.30.206.0 - 38.30.207.255
CIDR: 38.30.206.0/23
NetName: NET-38-30-206-0
NetHandle: NET-38-30-206-0-1
Parent: WISDOM-CGNT-NET-1 (NET-38-30-192-0-1)
NetType: Reassigned
OriginAS:
Organization: SkyQuantum Internet Service (SISL-43)
RegDate: 2024-11-25
Updated: 2024-11-25
Comment: Geofeed https://adsl.cat/rfc8805.csv
Ref: https://rdap.arin.net/registry/ip/38.30.206.0
OrgName: SkyQuantum Internet Service
OrgId: SISL-43
Address: 30 N Gould St Ste N
City: Sheridan
StateProv: WY
PostalCode: 82801
Country: US
RegDate: 2023-09-25
Updated: 2023-10-06
Ref: https://rdap.arin.net/registry/entity/SISL-43
OrgTechHandle: NOC33703-ARIN
OrgTechName: NOC
OrgTechPhone: +1-971-333-0066
OrgTechEmail: noc@adsl.cat
OrgTechRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgAbuseHandle: NOC33703-ARIN
OrgAbuseName: NOC
OrgAbusePhone: +1-971-333-0066
OrgAbuseEmail: noc@adsl.cat
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgNOCHandle: NOC33703-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-971-333-0066
OrgNOCEmail: noc@adsl.cat
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgRoutingHandle: NOC33703-ARIN
OrgRoutingName: NOC
OrgRoutingPhone: +1-971-333-0066
OrgRoutingEmail: noc@adsl.cat
OrgRoutingRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgDNSHandle: NOC33703-ARIN
OrgDNSName: NOC
OrgDNSPhone: +1-971-333-0066
OrgDNSEmail: noc@adsl.cat
OrgDNSRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-261EC00014
network:Network-Name:NET4-261EC00014
network:IP-Network:38.30.192.0/20
network:Org-Name:WISDOM CLOUD INTERNET TECHNOLOGY PTE. LTD
network:Street-Address:20 MASTMAKER COURT
network:City:LONDON
network:Country:GB
network:Postal-Code:E14 9UB
network:Tech-Contact:ZC108-ARIN
network:Updated:2026-01-26 15:29:56
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 38.30.207.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27435
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;38.30.207.238. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081000 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 10 18:09:47 CST 2026
;; MSG SIZE rcvd: 106Host 238.207.30.38.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 238.207.30.38.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 109.238.40.202 | attackspam | scan z |
2020-02-21 19:01:19 |
| 40.86.94.189 | attack | Feb 21 09:09:12 markkoudstaal sshd[8818]: Failed password for gnats from 40.86.94.189 port 37136 ssh2 Feb 21 09:11:20 markkoudstaal sshd[9194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.86.94.189 Feb 21 09:11:22 markkoudstaal sshd[9194]: Failed password for invalid user apache from 40.86.94.189 port 53420 ssh2 |
2020-02-21 19:32:23 |
| 92.27.26.28 | attack | firewall-block, port(s): 23/tcp |
2020-02-21 19:06:45 |
| 49.88.112.68 | attackbotsspam | Tried sshing with brute force. |
2020-02-21 19:26:46 |
| 216.158.233.138 | attack | Fail2Ban Ban Triggered |
2020-02-21 18:54:21 |
| 14.63.169.33 | attackbotsspam | Feb 21 00:45:59 hpm sshd\[19871\]: Invalid user cloud from 14.63.169.33 Feb 21 00:45:59 hpm sshd\[19871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.169.33 Feb 21 00:46:01 hpm sshd\[19871\]: Failed password for invalid user cloud from 14.63.169.33 port 54315 ssh2 Feb 21 00:51:19 hpm sshd\[20356\]: Invalid user wp from 14.63.169.33 Feb 21 00:51:19 hpm sshd\[20356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.169.33 |
2020-02-21 19:09:10 |
| 51.91.254.143 | attackspambots | Feb 21 12:51:45 ift sshd\[36296\]: Invalid user zcx from 51.91.254.143Feb 21 12:51:47 ift sshd\[36296\]: Failed password for invalid user zcx from 51.91.254.143 port 56450 ssh2Feb 21 12:54:49 ift sshd\[36688\]: Invalid user david from 51.91.254.143Feb 21 12:54:51 ift sshd\[36688\]: Failed password for invalid user david from 51.91.254.143 port 57488 ssh2Feb 21 12:57:57 ift sshd\[37210\]: Failed password for lp from 51.91.254.143 port 58528 ssh2 ... |
2020-02-21 19:23:32 |
| 185.200.118.82 | attackspambots | [portscan] tcp/3389 [MS RDP] *(RWIN=65535)(02211218) |
2020-02-21 18:55:02 |
| 189.112.109.189 | attackspam | Invalid user jobs from 189.112.109.189 port 54791 |
2020-02-21 19:27:24 |
| 153.139.239.41 | attack | $f2bV_matches |
2020-02-21 18:58:50 |
| 103.81.115.19 | attackbotsspam | 103.81.115.19 - - \[20/Feb/2020:20:49:53 -0800\] "POST /index.php/admin HTTP/1.1" 404 20570103.81.115.19 - - \[20/Feb/2020:20:49:53 -0800\] "POST /index.php/admin/ HTTP/1.1" 404 20574103.81.115.19 - - \[20/Feb/2020:20:49:53 -0800\] "POST /index.php/admin/index/ HTTP/1.1" 404 20598 ... |
2020-02-21 19:14:02 |
| 111.229.188.72 | attackspam | "SSH brute force auth login attempt." |
2020-02-21 19:06:19 |
| 106.13.119.163 | attackbotsspam | Feb 21 05:02:10 firewall sshd[21651]: Invalid user tmpu from 106.13.119.163 Feb 21 05:02:12 firewall sshd[21651]: Failed password for invalid user tmpu from 106.13.119.163 port 48914 ssh2 Feb 21 05:05:35 firewall sshd[21739]: Invalid user zhup from 106.13.119.163 ... |
2020-02-21 19:16:47 |
| 46.214.64.84 | attackspam | Feb 21 10:15:08 lukav-desktop sshd\[16260\]: Invalid user ts3 from 46.214.64.84 Feb 21 10:15:08 lukav-desktop sshd\[16260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.214.64.84 Feb 21 10:15:10 lukav-desktop sshd\[16260\]: Failed password for invalid user ts3 from 46.214.64.84 port 64992 ssh2 Feb 21 10:20:59 lukav-desktop sshd\[18497\]: Invalid user alex from 46.214.64.84 Feb 21 10:20:59 lukav-desktop sshd\[18497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.214.64.84 |
2020-02-21 19:00:07 |
| 139.59.128.23 | attack | Feb 20 17:47:35 XXX sshd[27452]: Did not receive identification string from 139.59.128.23 Feb 20 17:47:51 XXX sshd[27589]: User r.r from 139.59.128.23 not allowed because none of user's groups are listed in AllowGroups Feb 20 17:47:51 XXX sshd[27589]: Received disconnect from 139.59.128.23: 11: Normal Shutdown, Thank you for playing [preauth] Feb 20 17:48:04 XXX sshd[27595]: Invalid user oracle from 139.59.128.23 Feb 20 17:48:04 XXX sshd[27595]: Received disconnect from 139.59.128.23: 11: Normal Shutdown, Thank you for playing [preauth] Feb 20 17:48:15 XXX sshd[27599]: User r.r from 139.59.128.23 not allowed because none of user's groups are listed in AllowGroups Feb 20 17:48:15 XXX sshd[27599]: Received disconnect from 139.59.128.23: 11: Normal Shutdown, Thank you for playing [preauth] Feb 20 17:48:27 XXX sshd[27601]: User postgres from 139.59.128.23 not allowed because none of user's groups are listed in AllowGroups Feb 20 17:48:27 XXX sshd[27601]: Received disconnect........ ------------------------------- |
2020-02-21 18:53:27 |