City: Washington
Region: District of Columbia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 149.52.0.0 - 149.52.255.255
CIDR: 149.52.0.0/16
NetName: COGENT-149-52-16
NetHandle: NET-149-52-0-0-1
Parent: NET149 (NET-149-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1992-01-28
Updated: 2025-09-23
Ref: https://rdap.arin.net/registry/ip/149.52.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
# end
# start
NetRange: 149.52.64.0 - 149.52.95.255
CIDR: 149.52.64.0/19
NetName: WISDOM-CLOUD-CGNT-NET-6
NetHandle: NET-149-52-64-0-1
Parent: COGENT-149-52-16 (NET-149-52-0-0-1)
NetType: Reallocated
OriginAS:
Organization: WISDOM CLOUD INTERNET TECHNOLOGY PTE. LTD (WCITPL)
RegDate: 2024-06-20
Updated: 2024-06-20
Comment: Geofeed https://adsl.cat/rfc8805.csv
Ref: https://rdap.arin.net/registry/ip/149.52.64.0
OrgName: WISDOM CLOUD INTERNET TECHNOLOGY PTE. LTD
OrgId: WCITPL
Address: 260B Ang Mo Kio Street 21 #18-153
City: SINGAPORE
StateProv:
PostalCode: 562260
Country: SG
RegDate: 2023-09-20
Updated: 2025-11-14
Ref: https://rdap.arin.net/registry/entity/WCITPL
OrgNOCHandle: LEEJA109-ARIN
OrgNOCName: Lee, Jack
OrgNOCPhone: +65 94800603
OrgNOCEmail: noc@wisdomisp.com
OrgNOCRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgRoutingHandle: LEEJA109-ARIN
OrgRoutingName: Lee, Jack
OrgRoutingPhone: +65 94800603
OrgRoutingEmail: noc@wisdomisp.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgAbuseHandle: LEEJA109-ARIN
OrgAbuseName: Lee, Jack
OrgAbusePhone: +65 94800603
OrgAbuseEmail: noc@wisdomisp.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgTechHandle: LEEJA109-ARIN
OrgTechName: Lee, Jack
OrgTechPhone: +65 94800603
OrgTechEmail: noc@wisdomisp.com
OrgTechRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgDNSHandle: LEEJA109-ARIN
OrgDNSName: Lee, Jack
OrgDNSPhone: +65 94800603
OrgDNSEmail: noc@wisdomisp.com
OrgDNSRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
# end
# start
NetRange: 149.52.64.0 - 149.52.79.255
CIDR: 149.52.64.0/20
NetName: NET-149-52-64-0
NetHandle: NET-149-52-64-0-2
Parent: WISDOM-CLOUD-CGNT-NET-6 (NET-149-52-64-0-1)
NetType: Reallocated
OriginAS:
Organization: SkyQuantum Internet Service (SISL-43)
RegDate: 2024-06-24
Updated: 2024-06-24
Comment: Geofeed https://adsl.cat/rfc8805.csv
Ref: https://rdap.arin.net/registry/ip/149.52.64.0
OrgName: SkyQuantum Internet Service
OrgId: SISL-43
Address: 30 N Gould St Ste N
City: Sheridan
StateProv: WY
PostalCode: 82801
Country: US
RegDate: 2023-09-25
Updated: 2023-10-06
Ref: https://rdap.arin.net/registry/entity/SISL-43
OrgAbuseHandle: NOC33703-ARIN
OrgAbuseName: NOC
OrgAbusePhone: +1-971-333-0066
OrgAbuseEmail: noc@adsl.cat
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgTechHandle: NOC33703-ARIN
OrgTechName: NOC
OrgTechPhone: +1-971-333-0066
OrgTechEmail: noc@adsl.cat
OrgTechRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgRoutingHandle: NOC33703-ARIN
OrgRoutingName: NOC
OrgRoutingPhone: +1-971-333-0066
OrgRoutingEmail: noc@adsl.cat
OrgRoutingRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgNOCHandle: NOC33703-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-971-333-0066
OrgNOCEmail: noc@adsl.cat
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgDNSHandle: NOC33703-ARIN
OrgDNSName: NOC
OrgDNSPhone: +1-971-333-0066
OrgDNSEmail: noc@adsl.cat
OrgDNSRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-9534400013
network:Network-Name:NET4-9534400013
network:IP-Network:149.52.64.0/19
network:Org-Name:WISDOM CLOUD INTERNET TECHNOLOGY PTE. LTD
network:Street-Address:20 MASTMAKER COURT
network:City:LONDON
network:Country:GB
network:Postal-Code:E14 9UB
network:Tech-Contact:ZC108-ARIN
network:Updated:2025-11-07 10:24:48
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.52.75.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59832
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.52.75.129. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026031002 1800 900 604800 86400
;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 11 11:57:22 CST 2026
;; MSG SIZE rcvd: 106Host 129.75.52.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 129.75.52.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.232.29.120 | attackbots | Aug 18 08:22:01 lanister sshd[20166]: Failed password for root from 49.232.29.120 port 36468 ssh2 Aug 18 08:27:41 lanister sshd[20227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.29.120 user=root Aug 18 08:27:44 lanister sshd[20227]: Failed password for root from 49.232.29.120 port 34370 ssh2 Aug 18 08:33:10 lanister sshd[20307]: Invalid user abhishek from 49.232.29.120 |
2020-08-18 23:25:59 |
| 216.243.58.144 | attack | Aug 18 14:32:55 * sshd[27816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.243.58.144 |
2020-08-18 23:37:58 |
| 84.216.178.116 | attackspam | SSH login attempts. |
2020-08-18 23:38:22 |
| 79.125.183.146 | attackbotsspam | 79.125.183.146 - - [18/Aug/2020:14:42:41 +0200] "POST /wp-login.php HTTP/1.1" 200 5374 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 79.125.183.146 - - [18/Aug/2020:14:42:45 +0200] "POST /wp-login.php HTTP/1.1" 200 5370 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 79.125.183.146 - - [18/Aug/2020:14:42:49 +0200] "POST /wp-login.php HTTP/1.1" 200 5344 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 79.125.183.146 - - [18/Aug/2020:15:04:51 +0200] "POST /wp-login.php HTTP/1.1" 200 5293 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 79.125.183.146 - - [18/Aug/2020:15:04:53 +0200] "POST /wp-login.php HTTP/1.1" 200 5294 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-18 23:19:33 |
| 104.248.40.177 | attack | 104.248.40.177 - - [18/Aug/2020:15:11:43 +0200] "POST /xmlrpc.php HTTP/1.1" 403 9492 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.40.177 - - [18/Aug/2020:15:12:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-18 23:23:33 |
| 49.234.99.246 | attackspambots | Bruteforce detected by fail2ban |
2020-08-18 23:08:33 |
| 167.172.166.160 | attack | 167.172.166.160 - - [18/Aug/2020:14:25:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.172.166.160 - - [18/Aug/2020:14:33:29 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-18 23:03:17 |
| 176.31.102.37 | attackspambots | Aug 18 14:54:56 game-panel sshd[494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.102.37 Aug 18 14:54:58 game-panel sshd[494]: Failed password for invalid user buntu from 176.31.102.37 port 49627 ssh2 Aug 18 14:58:56 game-panel sshd[675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.102.37 |
2020-08-18 23:04:31 |
| 167.99.224.160 | attack | scans once in preceeding hours on the ports (in chronological order) 13509 resulting in total of 9 scans from 167.99.0.0/16 block. |
2020-08-18 23:11:22 |
| 91.132.138.56 | attackspam | viewstate hacking |
2020-08-18 23:26:27 |
| 197.51.170.43 | attackbotsspam | Unauthorized connection attempt from IP address 197.51.170.43 on Port 445(SMB) |
2020-08-18 23:28:41 |
| 84.214.36.120 | attackbotsspam | SSH login attempts. |
2020-08-18 23:29:38 |
| 37.255.233.80 | attackbotsspam | IP attempted unauthorised action |
2020-08-18 23:05:05 |
| 112.65.210.203 | attackspambots | Aug 18 15:30:22 lukav-desktop sshd\[9559\]: Invalid user wayne from 112.65.210.203 Aug 18 15:30:22 lukav-desktop sshd\[9559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.65.210.203 Aug 18 15:30:25 lukav-desktop sshd\[9559\]: Failed password for invalid user wayne from 112.65.210.203 port 57898 ssh2 Aug 18 15:32:37 lukav-desktop sshd\[10662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.65.210.203 user=root Aug 18 15:32:39 lukav-desktop sshd\[10662\]: Failed password for root from 112.65.210.203 port 59968 ssh2 |
2020-08-18 23:52:44 |
| 84.214.176.227 | attackspambots | SSH login attempts. |
2020-08-18 23:22:01 |