City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 149.104.0.0 - 149.104.255.255
CIDR: 149.104.0.0/16
NetName: COGENT-149-104-16
NetHandle: NET-149-104-0-0-1
Parent: NET149 (NET-149-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1992-02-03
Updated: 2025-09-23
Ref: https://rdap.arin.net/registry/ip/149.104.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
# end
# start
NetRange: 149.104.0.0 - 149.104.63.255
CIDR: 149.104.0.0/18
NetName: STARCLOUD-GLOBAL-CGNT-NET-7
NetHandle: NET-149-104-0-0-2
Parent: COGENT-149-104-16 (NET-149-104-0-0-1)
NetType: Reallocated
OriginAS:
Organization: STARCLOUD GLOBAL PTE. LTD. (SGPL-10)
RegDate: 2023-08-31
Updated: 2023-09-01
Ref: https://rdap.arin.net/registry/ip/149.104.0.0
OrgName: STARCLOUD GLOBAL PTE. LTD.
OrgId: SGPL-10
Address: 111 NORTH BRIDGE ROAD #21-01
Address: PENINSULA PLAZA
City: SINGAPORE
StateProv: SINGAPORE
PostalCode: 179098
Country: SG
RegDate: 2023-08-15
Updated: 2024-08-15
Ref: https://rdap.arin.net/registry/entity/SGPL-10
OrgAbuseHandle: ABUSE8814-ARIN
OrgAbuseName: ABUSE-SCG
OrgAbusePhone: +1-970-516-9999
OrgAbuseEmail: abuse@nebulaglobal.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE8814-ARIN
OrgTechHandle: TECHS236-ARIN
OrgTechName: TECH-SCG
OrgTechPhone: +1-970-516-9999
OrgTechEmail: noc@nebulaglobal.net
OrgTechRef: https://rdap.arin.net/registry/entity/TECHS236-ARIN
OrgNOCHandle: TECHS236-ARIN
OrgNOCName: TECH-SCG
OrgNOCPhone: +1-970-516-9999
OrgNOCEmail: noc@nebulaglobal.net
OrgNOCRef: https://rdap.arin.net/registry/entity/TECHS236-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-9568000012
network:Network-Name:NET4-9568000012
network:IP-Network:149.104.0.0/18
network:Org-Name:Nebula Global LLC
network:Street-Address:399 CHAI WAN ROAD
network:City:CHAI WAN
network:Country:HK
network:Postal-Code:00000
network:Tech-Contact:ZC108-ARIN
network:Updated:2026-06-17 13:24:35
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.104.25.115
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35603
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.104.25.115. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102500 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 25 16:32:22 CST 2026
;; MSG SIZE rcvd: 107Host 115.25.104.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 115.25.104.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.25.47.130 | attackbots | SSH login attempts. |
2020-04-19 19:12:13 |
| 162.243.128.21 | attackspam | srv03 Mass scanning activity detected Target: 9042 .. |
2020-04-19 19:30:12 |
| 49.232.152.36 | attack | Total attacks: 2 |
2020-04-19 18:59:00 |
| 139.59.190.55 | attackspam | 2020-04-19T13:05:16.135648vps773228.ovh.net sshd[4872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.190.55 user=root 2020-04-19T13:05:18.008334vps773228.ovh.net sshd[4872]: Failed password for root from 139.59.190.55 port 36822 ssh2 2020-04-19T13:10:10.151189vps773228.ovh.net sshd[4962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.190.55 user=postfix 2020-04-19T13:10:12.049422vps773228.ovh.net sshd[4962]: Failed password for postfix from 139.59.190.55 port 56248 ssh2 2020-04-19T13:15:04.069440vps773228.ovh.net sshd[4996]: Invalid user ubuntu from 139.59.190.55 port 47442 ... |
2020-04-19 19:23:31 |
| 1.32.238.18 | attack | 1855/tcp 15589/tcp 24102/tcp... [2020-03-29/04-18]72pkt,24pt.(tcp) |
2020-04-19 19:10:06 |
| 206.189.98.225 | attackspam | SSH login attempts. |
2020-04-19 18:50:41 |
| 122.70.153.228 | attackspambots | SSH Brute Force |
2020-04-19 19:31:28 |
| 119.81.196.36 | attackbotsspam | xmlrpc attack |
2020-04-19 18:59:48 |
| 94.191.24.214 | attack | odoo8 ... |
2020-04-19 19:21:00 |
| 210.245.92.228 | attackspam | Apr 19 12:08:14 server sshd[16878]: Failed password for root from 210.245.92.228 port 37738 ssh2 Apr 19 12:12:28 server sshd[17693]: Failed password for invalid user github from 210.245.92.228 port 40801 ssh2 Apr 19 12:16:06 server sshd[18416]: Failed password for invalid user oracle from 210.245.92.228 port 41505 ssh2 |
2020-04-19 19:18:23 |
| 139.59.36.23 | attack | Apr 19 13:02:08 host sshd[25878]: Invalid user wr from 139.59.36.23 port 52012 ... |
2020-04-19 19:22:26 |
| 144.217.47.174 | attack | Port 31947 scan denied |
2020-04-19 19:04:18 |
| 205.185.115.111 | attack | 19/udp 11211/udp 389/udp... [2020-04-17/19]14pkt,3pt.(udp) |
2020-04-19 18:59:21 |
| 175.126.73.16 | attack | $f2bV_matches |
2020-04-19 19:07:47 |
| 60.199.131.62 | attack | Apr 19 12:07:16 srv01 sshd[8619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.199.131.62 user=root Apr 19 12:07:18 srv01 sshd[8619]: Failed password for root from 60.199.131.62 port 54614 ssh2 Apr 19 12:12:28 srv01 sshd[9177]: Invalid user rp from 60.199.131.62 port 45580 Apr 19 12:12:28 srv01 sshd[9177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.199.131.62 Apr 19 12:12:28 srv01 sshd[9177]: Invalid user rp from 60.199.131.62 port 45580 Apr 19 12:12:30 srv01 sshd[9177]: Failed password for invalid user rp from 60.199.131.62 port 45580 ssh2 ... |
2020-04-19 19:05:55 |