38.101.94.165 - IPInfo

Basic Info

City: Chicago

Region: Illinois

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       38.0.0.0 - 38.255.255.255
CIDR:           38.0.0.0/8
NetName:        COGENT-A
NetHandle:      NET-38-0-0-0-1
Parent:          ()
NetType:        Direct Allocation
OriginAS:       
Organization:   Cogent Communications, LLC (COGC)
RegDate:        1991-04-16
Updated:        2025-09-23
Ref:            https://rdap.arin.net/registry/ip/38.0.0.0



OrgName:        Cogent Communications, LLC
OrgId:          COGC
Address:        2450 N Street NW
City:           Washington
StateProv:      DC
PostalCode:     20037
Country:        US
RegDate:        2000-05-30
Updated:        2025-09-23
Comment:        Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref:            https://rdap.arin.net/registry/entity/COGC

ReferralServer:  rwhois://rwhois.cogentco.com:4321

OrgAbuseHandle: COGEN-ARIN
OrgAbuseName:   Cogent Abuse
OrgAbusePhone:  +1-877-875-4311 
OrgAbuseEmail:  abuse@cogentco.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/COGEN-ARIN

OrgTechHandle: IPALL-ARIN
OrgTechName:   IP Allocation
OrgTechPhone:  +1-877-875-4311 
OrgTechEmail:  ipalloc@cogentco.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPALL-ARIN

OrgNOCHandle: ZC108-ARIN
OrgNOCName:   Cogent Communications
OrgNOCPhone:  +1-877-875-4311 
OrgNOCEmail:  noc@cogentco.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/ZC108-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to rwhois.cogentco.com:4321.

%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-26655E0018
network:Network-Name:NET4-26655E0018
network:IP-Network:38.101.94.0/24
network:Org-Name:DHR International
network:Street-Address:151 N FRANKLIN ST
network:City:CHICAGO
network:State:IL
network:Country:US
network:Postal-Code:60606
network:Tech-Contact:ZC108-ARIN
network:Updated:2025-04-29 23:01:11
%ok

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 38.101.94.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62227
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;38.101.94.165.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026081601 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 17 08:17:41 CST 2026
;; MSG SIZE  rcvd: 106

Host info

Host 165.94.101.38.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 165.94.101.38.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.24.30.97	attackbotsspam	Oct 30 12:37:46 server sshd[2730]: Failed password for invalid user testftp from 118.24.30.97 port 46432 ssh2 Oct 30 12:42:36 server sshd[3241]: Failed password for invalid user zhouh from 118.24.30.97 port 55408 ssh2 Oct 30 12:47:33 server sshd[3714]: Failed password for uucp from 118.24.30.97 port 35730 ssh2	2019-10-31 02:16:31
185.53.88.33	attack	\[2019-10-30 13:29:11\] NOTICE\[2601\] chan_sip.c: Registration from '"650" \' failed for '185.53.88.33:5448' - Wrong password \[2019-10-30 13:29:11\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-30T13:29:11.053-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="650",SessionID="0x7fdf2cc7a718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.33/5448",Challenge="01eb400a",ReceivedChallenge="01eb400a",ReceivedHash="6b4835a65a62e10421be4c9c245240b1" \[2019-10-30 13:29:11\] NOTICE\[2601\] chan_sip.c: Registration from '"650" \' failed for '185.53.88.33:5448' - Wrong password \[2019-10-30 13:29:11\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-30T13:29:11.166-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="650",SessionID="0x7fdf2c7144f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.	2019-10-31 01:58:26
94.20.20.240	attackbotsspam	SMB Server BruteForce Attack	2019-10-31 02:17:31
197.159.190.11	attackspam	3389BruteforceFW23	2019-10-31 02:16:12
185.6.41.105	attackbots	Unauthorized connection attempt from IP address 185.6.41.105 on Port 445(SMB)	2019-10-31 02:27:02
106.251.250.130	attackspambots	2019-10-30T17:31:27.719406abusebot-5.cloudsearch.cf sshd\[19480\]: Invalid user avendoria from 106.251.250.130 port 38499	2019-10-31 02:11:22
201.134.41.35	attackbotsspam	php WP PHPmyadamin ABUSE blocked for 12h	2019-10-31 02:01:15
185.176.27.162	attackspambots	Oct 30 18:39:33 mc1 kernel: \[3743495.571204\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.162 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=38891 PROTO=TCP SPT=58087 DPT=1244 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 18:40:41 mc1 kernel: \[3743563.823726\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.162 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=33667 PROTO=TCP SPT=58087 DPT=7003 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 18:44:06 mc1 kernel: \[3743769.016077\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.162 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=35139 PROTO=TCP SPT=58087 DPT=10881 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-10-31 01:55:22
193.112.113.228	attackspambots	2019-10-30T18:08:08.307523abusebot-4.cloudsearch.cf sshd\[487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.113.228 user=root	2019-10-31 02:25:05
124.89.8.196	attackspambots	Automatic report - Banned IP Access	2019-10-31 02:12:38
85.93.20.86	attack	191030 14:12:01 \[Warning\] Access denied for user 'root'@'85.93.20.86' \(using password: YES\) 191030 18:50:30 \[Warning\] Access denied for user 'root'@'85.93.20.86' \(using password: YES\) 191030 18:58:43 \[Warning\] Access denied for user 'root'@'85.93.20.86' \(using password: YES\) ...	2019-10-31 02:06:34
104.244.78.231	attackspambots	Oct 30 17:35:10 vmanager6029 sshd\[21302\]: Invalid user 111111 from 104.244.78.231 port 59118 Oct 30 17:35:10 vmanager6029 sshd\[21302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.78.231 Oct 30 17:35:12 vmanager6029 sshd\[21302\]: Failed password for invalid user 111111 from 104.244.78.231 port 59118 ssh2	2019-10-31 02:15:24
150.109.40.31	attack	Oct 30 10:26:32 TORMINT sshd\[21888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.40.31 user=root Oct 30 10:26:34 TORMINT sshd\[21888\]: Failed password for root from 150.109.40.31 port 48644 ssh2 Oct 30 10:31:08 TORMINT sshd\[22121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.40.31 user=root ...	2019-10-31 02:34:48
42.188.234.43	attack	WordPress XMLRPC scan :: 42.188.234.43 0.212 - [30/Oct/2019:11:48:10 0000] www.[censored_1] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" "HTTP/1.1"	2019-10-31 01:56:27
182.61.166.179	attackbotsspam	Oct 30 09:51:37 plusreed sshd[22780]: Invalid user Marseille1@3 from 182.61.166.179 ...	2019-10-31 02:04:45

Recently Reported IPs

51.109.40.72	51.126.111.119	62.110.75.249	121.229.156.20
50.69.184.139	44.89.251.29	69.5.169.222	31.14.254.99
2606:4700:10::6814:5951	41.33.137.94	38.98.152.94	43.3.107.69
37.21.65.24	37.138.161.51	43.94.84.227	54.167.97.12
42.163.240.22	41.128.195.117	171.34.220.143	2606:4700:10::6814:5386