City: San Francisco
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 149.52.0.0 - 149.52.255.255
CIDR: 149.52.0.0/16
NetName: COGENT-149-52-16
NetHandle: NET-149-52-0-0-1
Parent: NET149 (NET-149-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1992-01-28
Updated: 2025-09-23
Ref: https://rdap.arin.net/registry/ip/149.52.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
# end
# start
NetRange: 149.52.64.0 - 149.52.95.255
CIDR: 149.52.64.0/19
NetName: WISDOM-CLOUD-CGNT-NET-6
NetHandle: NET-149-52-64-0-1
Parent: COGENT-149-52-16 (NET-149-52-0-0-1)
NetType: Reallocated
OriginAS:
Organization: WISDOM CLOUD INTERNET TECHNOLOGY PTE. LTD (WCITPL)
RegDate: 2024-06-20
Updated: 2024-06-20
Comment: Geofeed https://adsl.cat/rfc8805.csv
Ref: https://rdap.arin.net/registry/ip/149.52.64.0
OrgName: WISDOM CLOUD INTERNET TECHNOLOGY PTE. LTD
OrgId: WCITPL
Address: 260B Ang Mo Kio Street 21 #18-153
City: SINGAPORE
StateProv:
PostalCode: 562260
Country: SG
RegDate: 2023-09-20
Updated: 2025-11-14
Ref: https://rdap.arin.net/registry/entity/WCITPL
OrgAbuseHandle: LEEJA109-ARIN
OrgAbuseName: Lee, Jack
OrgAbusePhone: +65 94800603
OrgAbuseEmail: noc@wisdomisp.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgDNSHandle: LEEJA109-ARIN
OrgDNSName: Lee, Jack
OrgDNSPhone: +65 94800603
OrgDNSEmail: noc@wisdomisp.com
OrgDNSRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgTechHandle: LEEJA109-ARIN
OrgTechName: Lee, Jack
OrgTechPhone: +65 94800603
OrgTechEmail: noc@wisdomisp.com
OrgTechRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgRoutingHandle: LEEJA109-ARIN
OrgRoutingName: Lee, Jack
OrgRoutingPhone: +65 94800603
OrgRoutingEmail: noc@wisdomisp.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
OrgNOCHandle: LEEJA109-ARIN
OrgNOCName: Lee, Jack
OrgNOCPhone: +65 94800603
OrgNOCEmail: noc@wisdomisp.com
OrgNOCRef: https://rdap.arin.net/registry/entity/LEEJA109-ARIN
# end
# start
NetRange: 149.52.64.0 - 149.52.79.255
CIDR: 149.52.64.0/20
NetName: NET-149-52-64-0
NetHandle: NET-149-52-64-0-2
Parent: WISDOM-CLOUD-CGNT-NET-6 (NET-149-52-64-0-1)
NetType: Reallocated
OriginAS:
Organization: SkyQuantum Internet Service (SISL-43)
RegDate: 2024-06-24
Updated: 2024-06-24
Comment: Geofeed https://adsl.cat/rfc8805.csv
Ref: https://rdap.arin.net/registry/ip/149.52.64.0
OrgName: SkyQuantum Internet Service
OrgId: SISL-43
Address: 30 N Gould St Ste N
City: Sheridan
StateProv: WY
PostalCode: 82801
Country: US
RegDate: 2023-09-25
Updated: 2023-10-06
Ref: https://rdap.arin.net/registry/entity/SISL-43
OrgTechHandle: NOC33703-ARIN
OrgTechName: NOC
OrgTechPhone: +1-971-333-0066
OrgTechEmail: noc@adsl.cat
OrgTechRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgAbuseHandle: NOC33703-ARIN
OrgAbuseName: NOC
OrgAbusePhone: +1-971-333-0066
OrgAbuseEmail: noc@adsl.cat
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgNOCHandle: NOC33703-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-971-333-0066
OrgNOCEmail: noc@adsl.cat
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgRoutingHandle: NOC33703-ARIN
OrgRoutingName: NOC
OrgRoutingPhone: +1-971-333-0066
OrgRoutingEmail: noc@adsl.cat
OrgRoutingRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
OrgDNSHandle: NOC33703-ARIN
OrgDNSName: NOC
OrgDNSPhone: +1-971-333-0066
OrgDNSEmail: noc@adsl.cat
OrgDNSRef: https://rdap.arin.net/registry/entity/NOC33703-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-9534400013
network:Network-Name:NET4-9534400013
network:IP-Network:149.52.64.0/19
network:Org-Name:WISDOM CLOUD INTERNET TECHNOLOGY PTE. LTD
network:Street-Address:20 MASTMAKER COURT
network:City:LONDON
network:Country:GB
network:Postal-Code:E14 9UB
network:Tech-Contact:ZC108-ARIN
network:Updated:2025-11-07 10:24:48
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.52.77.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35380
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.52.77.101. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081501 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 16 04:15:19 CST 2026
;; MSG SIZE rcvd: 106Host 101.77.52.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 101.77.52.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 68.183.142.240 | attackspam | Oct 12 12:10:04 kapalua sshd\[24297\]: Invalid user JeanPaul123 from 68.183.142.240 Oct 12 12:10:04 kapalua sshd\[24297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.240 Oct 12 12:10:06 kapalua sshd\[24297\]: Failed password for invalid user JeanPaul123 from 68.183.142.240 port 37570 ssh2 Oct 12 12:12:56 kapalua sshd\[24600\]: Invalid user Rouge-123 from 68.183.142.240 Oct 12 12:12:56 kapalua sshd\[24600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.240 |
2019-10-13 06:18:05 |
| 119.250.50.63 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/119.250.50.63/ CN - 1H : (436) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4837 IP : 119.250.50.63 CIDR : 119.248.0.0/14 PREFIX COUNT : 1262 UNIQUE IP COUNT : 56665856 WYKRYTE ATAKI Z ASN4837 : 1H - 4 3H - 20 6H - 36 12H - 77 24H - 167 DateTime : 2019-10-12 16:05:04 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-13 05:58:30 |
| 106.12.178.127 | attackbotsspam | Oct 12 22:30:14 pornomens sshd\[28667\]: Invalid user P4ssw0rd@2017 from 106.12.178.127 port 36344 Oct 12 22:30:14 pornomens sshd\[28667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.178.127 Oct 12 22:30:16 pornomens sshd\[28667\]: Failed password for invalid user P4ssw0rd@2017 from 106.12.178.127 port 36344 ssh2 ... |
2019-10-13 05:59:17 |
| 43.254.52.188 | attackbotsspam | 10/12/2019-16:04:39.913593 43.254.52.188 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 41 |
2019-10-13 06:10:49 |
| 197.221.254.172 | attackspambots | Hello! As you may have noticed, I sent you an email from your account. This means that I have full access to your device. I've been watching you for a few months now. The fact is that you were infected with malware through an adult site that you visited. If you are not familiar with this, I will explain. Trojan Virus gives me full access and control over a computer or other device. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it. I also have access to all your contacts and all your correspondence. Why your antivirus did not detect malware? Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent. I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched. With one click of the mouse, I can send this video to all your emails and contacts on social networks... |
2019-10-13 06:30:27 |
| 91.65.70.241 | attackbots | Wordpress bruteforce |
2019-10-13 06:01:31 |
| 186.96.127.220 | attackbots | Autoban 186.96.127.220 AUTH/CONNECT |
2019-10-13 06:25:19 |
| 82.147.120.41 | attackspam | Unauthorized IMAP connection attempt |
2019-10-13 06:27:15 |
| 132.232.112.25 | attack | Oct 12 14:04:35 venus sshd\[18872\]: Invalid user p@$$w0rd@2018 from 132.232.112.25 port 39020 Oct 12 14:04:35 venus sshd\[18872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.112.25 Oct 12 14:04:38 venus sshd\[18872\]: Failed password for invalid user p@$$w0rd@2018 from 132.232.112.25 port 39020 ssh2 ... |
2019-10-13 06:11:21 |
| 37.187.5.137 | attackbots | Unauthorized SSH login attempts |
2019-10-13 06:06:58 |
| 95.170.192.35 | attackspambots | From CCTV User Interface Log ...::ffff:95.170.192.35 - - [12/Oct/2019:10:05:01 +0000] "GET / HTTP/1.1" 200 960 ... |
2019-10-13 06:00:12 |
| 193.32.163.182 | attack | Oct 13 00:21:08 andromeda sshd\[8530\]: Invalid user admin from 193.32.163.182 port 50853 Oct 13 00:21:08 andromeda sshd\[8530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.32.163.182 Oct 13 00:21:08 andromeda sshd\[8531\]: Invalid user admin from 193.32.163.182 port 55176 Oct 13 00:21:08 andromeda sshd\[8531\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.32.163.182 |
2019-10-13 06:23:52 |
| 182.61.111.254 | attack | Oct 12 17:12:21 mail sshd\[46195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.111.254 user=root ... |
2019-10-13 06:09:27 |
| 180.76.246.38 | attack | 2019-10-12T22:30:01.376765abusebot-7.cloudsearch.cf sshd\[13817\]: Invalid user ABC123 from 180.76.246.38 port 45504 |
2019-10-13 06:30:52 |
| 78.189.181.92 | attackbots | Port 1433 Scan |
2019-10-13 06:15:41 |