City: Los Angeles
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 140.188.0.0 - 140.188.255.255
CIDR: 140.188.0.0/16
NetName: COGENT-140-188-16
NetHandle: NET-140-188-0-0-1
Parent: NET140 (NET-140-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1990-05-23
Updated: 2025-09-23
Ref: https://rdap.arin.net/registry/ip/140.188.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-8CBC800011
network:Network-Name:NET4-8CBC800011
network:IP-Network:140.188.128.0/17
network:Org-Name:PEG Tech Inc.
network:Street-Address:624 SOUTH GRAND AVENUE
network:City:LOS ANGELES
network:State:CA
network:Country:US
network:Postal-Code:90017
network:Tech-Contact:ZC108-ARIN
network:Updated:2026-03-01 14:06:21
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.188.197.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55448
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.188.197.252. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102700 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 27 17:49:02 CST 2026
;; MSG SIZE rcvd: 108b'Host 252.197.188.140.in-addr.arpa. not found: 3(NXDOMAIN)
'server can't find 140.188.197.252.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.170.13.225 | attack | Nov 26 09:25:03 microserver sshd[46931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.170.13.225 user=daemon Nov 26 09:25:06 microserver sshd[46931]: Failed password for daemon from 188.170.13.225 port 45020 ssh2 Nov 26 09:29:54 microserver sshd[47405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.170.13.225 user=root Nov 26 09:29:56 microserver sshd[47405]: Failed password for root from 188.170.13.225 port 59194 ssh2 Nov 26 09:33:26 microserver sshd[47974]: Invalid user smmsp from 188.170.13.225 port 37530 Nov 26 09:44:09 microserver sshd[49323]: Invalid user chmylowskyj from 188.170.13.225 port 57222 Nov 26 09:44:09 microserver sshd[49323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.170.13.225 Nov 26 09:44:11 microserver sshd[49323]: Failed password for invalid user chmylowskyj from 188.170.13.225 port 57222 ssh2 Nov 26 09:47:43 microserver sshd[49899]: pam_unix(ss |
2019-11-26 14:52:04 |
| 193.32.163.9 | attack | 2019-11-26T07:31:06.340703+01:00 lumpi kernel: [39834.038127] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=193.32.163.9 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=2355 PROTO=TCP SPT=52414 DPT=33893 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-26 14:51:40 |
| 14.225.5.229 | attack | firewall-block, port(s): 3389/tcp |
2019-11-26 15:07:27 |
| 124.156.185.149 | attackspam | Nov 26 08:23:02 server sshd\[17807\]: User root from 124.156.185.149 not allowed because listed in DenyUsers Nov 26 08:23:02 server sshd\[17807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.185.149 user=root Nov 26 08:23:04 server sshd\[17807\]: Failed password for invalid user root from 124.156.185.149 port 10882 ssh2 Nov 26 08:29:59 server sshd\[25912\]: Invalid user bochnowicz from 124.156.185.149 port 23078 Nov 26 08:29:59 server sshd\[25912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.185.149 |
2019-11-26 15:09:32 |
| 122.51.86.120 | attackbots | Nov 26 07:22:23 vps647732 sshd[4460]: Failed password for root from 122.51.86.120 port 57618 ssh2 ... |
2019-11-26 14:54:44 |
| 14.102.55.90 | attackbotsspam | firewall-block, port(s): 9001/tcp |
2019-11-26 15:08:11 |
| 222.186.173.183 | attackbotsspam | 2019-11-26T06:46:27.804918hub.schaetter.us sshd\[21501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root 2019-11-26T06:46:29.608823hub.schaetter.us sshd\[21501\]: Failed password for root from 222.186.173.183 port 16920 ssh2 2019-11-26T06:46:32.729925hub.schaetter.us sshd\[21501\]: Failed password for root from 222.186.173.183 port 16920 ssh2 2019-11-26T06:46:36.258210hub.schaetter.us sshd\[21501\]: Failed password for root from 222.186.173.183 port 16920 ssh2 2019-11-26T06:46:39.335209hub.schaetter.us sshd\[21501\]: Failed password for root from 222.186.173.183 port 16920 ssh2 ... |
2019-11-26 14:48:16 |
| 104.42.29.236 | attackbots | Nov 26 07:30:08 * sshd[18067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.29.236 Nov 26 07:30:10 * sshd[18067]: Failed password for invalid user cetp from 104.42.29.236 port 17344 ssh2 |
2019-11-26 14:59:23 |
| 221.214.240.21 | attackbots | Nov 25 21:12:16 kapalua sshd\[10676\]: Invalid user nastari from 221.214.240.21 Nov 25 21:12:16 kapalua sshd\[10676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.214.240.21 Nov 25 21:12:19 kapalua sshd\[10676\]: Failed password for invalid user nastari from 221.214.240.21 port 53954 ssh2 Nov 25 21:16:34 kapalua sshd\[11021\]: Invalid user guest from 221.214.240.21 Nov 25 21:16:34 kapalua sshd\[11021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.214.240.21 |
2019-11-26 15:22:09 |
| 41.80.142.77 | attack | TCP Port Scanning |
2019-11-26 15:20:19 |
| 218.92.0.186 | attack | SSH bruteforce |
2019-11-26 15:20:46 |
| 80.53.7.213 | attackbots | Nov 26 07:23:58 srv01 sshd[26514]: Invalid user xila from 80.53.7.213 port 54699 Nov 26 07:23:58 srv01 sshd[26514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.53.7.213 Nov 26 07:23:58 srv01 sshd[26514]: Invalid user xila from 80.53.7.213 port 54699 Nov 26 07:23:59 srv01 sshd[26514]: Failed password for invalid user xila from 80.53.7.213 port 54699 ssh2 Nov 26 07:30:34 srv01 sshd[26998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.53.7.213 user=root Nov 26 07:30:36 srv01 sshd[26998]: Failed password for root from 80.53.7.213 port 44645 ssh2 ... |
2019-11-26 14:44:55 |
| 60.250.149.19 | attackbotsspam | 2019-11-26T07:44:01.119816scmdmz1 sshd\[25329\]: Invalid user koseki from 60.250.149.19 port 59396 2019-11-26T07:44:01.122526scmdmz1 sshd\[25329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60-250-149-19.hinet-ip.hinet.net 2019-11-26T07:44:02.550960scmdmz1 sshd\[25329\]: Failed password for invalid user koseki from 60.250.149.19 port 59396 ssh2 ... |
2019-11-26 15:02:23 |
| 107.189.10.174 | attack | port scan and connect, tcp 22 (ssh) |
2019-11-26 15:17:30 |
| 222.186.190.92 | attackspambots | "Fail2Ban detected SSH brute force attempt" |
2019-11-26 14:46:03 |