City: Meppel
Region: Drenthe
Country: The Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 38.0.0.0 - 38.255.255.255
CIDR: 38.0.0.0/8
NetName: COGENT-A
NetHandle: NET-38-0-0-0-1
Parent: ()
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1991-04-16
Updated: 2025-09-23
Ref: https://rdap.arin.net/registry/ip/38.0.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
# end
# start
NetRange: 38.180.0.0 - 38.180.255.255
CIDR: 38.180.0.0/16
NetName: 3NT-CGNT-NET-1
NetHandle: NET-38-180-0-0-1
Parent: COGENT-A (NET-38-0-0-0-1)
NetType: Reallocated
OriginAS:
Organization: 3NT SOLUTIONS LLP (NSL-384)
RegDate: 2023-01-11
Updated: 2024-12-02
Comment: Geofeed https://noc.3nt.com/geofeed.csv
Ref: https://rdap.arin.net/registry/ip/38.180.0.0
OrgName: 3NT SOLUTIONS LLP
OrgId: NSL-384
Address: 22 Brondesbury Park, Willesden
City: LONDON
StateProv:
PostalCode: NW6 7DL
Country: GB
RegDate: 2023-01-06
Updated: 2023-01-12
Ref: https://rdap.arin.net/registry/entity/NSL-384
OrgRoutingHandle: RERE1-ARIN
OrgRoutingName: Emmerich, Raul Eduardo Ribeiro
OrgRoutingPhone: +442081333030
OrgRoutingEmail: noc@3nt.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
OrgDNSHandle: RERE1-ARIN
OrgDNSName: Emmerich, Raul Eduardo Ribeiro
OrgDNSPhone: +442081333030
OrgDNSEmail: noc@3nt.com
OrgDNSRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
OrgTechHandle: RERE1-ARIN
OrgTechName: Emmerich, Raul Eduardo Ribeiro
OrgTechPhone: +442081333030
OrgTechEmail: noc@3nt.com
OrgTechRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
OrgAbuseHandle: ABUSE8637-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +442081333030
OrgAbuseEmail: abuse@3nt.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE8637-ARIN
OrgNOCHandle: RERE1-ARIN
OrgNOCName: Emmerich, Raul Eduardo Ribeiro
OrgNOCPhone: +442081333030
OrgNOCEmail: noc@3nt.com
OrgNOCRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
RAbuseHandle: ABUSE8637-ARIN
RAbuseName: Abuse Department
RAbusePhone: +442081333030
RAbuseEmail: abuse@3nt.com
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE8637-ARIN
RTechHandle: RERE1-ARIN
RTechName: Emmerich, Raul Eduardo Ribeiro
RTechPhone: +442081333030
RTechEmail: noc@3nt.com
RTechRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
RNOCHandle: RERE1-ARIN
RNOCName: Emmerich, Raul Eduardo Ribeiro
RNOCPhone: +442081333030
RNOCEmail: noc@3nt.com
RNOCRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
# end
# start
NetRange: 38.180.150.0 - 38.180.150.255
CIDR: 38.180.150.0/24
NetName: CLOUD-NETWORK-HK
NetHandle: NET-38-180-150-0-1
Parent: 3NT-CGNT-NET-1 (NET-38-180-0-0-1)
NetType: Reassigned
OriginAS:
Organization: 3NT SOLUTIONS LLP (NSL-384)
RegDate: 2024-04-15
Updated: 2024-04-15
Comment: Geofeed https://noc.3nt.com/geofeed.csv
Comment: As an internet service provider (ISP), we offer IP transit and bandwidth services that are self-managed by our customers. As a result, we do not utilize this IP space ourselves. If you encounter any issues related to spam, fraud, phishing, DDoS, port scans, or other similar problems, please do not hesitate to reach out to us with the relevant information. Our abuse email is abuse@3nt.com
Ref: https://rdap.arin.net/registry/ip/38.180.150.0
OrgName: 3NT SOLUTIONS LLP
OrgId: NSL-384
Address: 22 Brondesbury Park, Willesden
City: LONDON
StateProv:
PostalCode: NW6 7DL
Country: GB
RegDate: 2023-01-06
Updated: 2023-01-12
Ref: https://rdap.arin.net/registry/entity/NSL-384
OrgRoutingHandle: RERE1-ARIN
OrgRoutingName: Emmerich, Raul Eduardo Ribeiro
OrgRoutingPhone: +442081333030
OrgRoutingEmail: noc@3nt.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
OrgDNSHandle: RERE1-ARIN
OrgDNSName: Emmerich, Raul Eduardo Ribeiro
OrgDNSPhone: +442081333030
OrgDNSEmail: noc@3nt.com
OrgDNSRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
OrgTechHandle: RERE1-ARIN
OrgTechName: Emmerich, Raul Eduardo Ribeiro
OrgTechPhone: +442081333030
OrgTechEmail: noc@3nt.com
OrgTechRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
OrgAbuseHandle: ABUSE8637-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +442081333030
OrgAbuseEmail: abuse@3nt.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE8637-ARIN
OrgNOCHandle: RERE1-ARIN
OrgNOCName: Emmerich, Raul Eduardo Ribeiro
OrgNOCPhone: +442081333030
OrgNOCEmail: noc@3nt.com
OrgNOCRef: https://rdap.arin.net/registry/entity/RERE1-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-26B4000010
network:Network-Name:NET4-26B4000010
network:IP-Network:38.180.0.0/16
network:Org-Name:3NT SOLUTIONS LLP
network:Street-Address:KETELSKAMP 10
network:City:MEPPEL
network:Country:NL
network:Postal-Code:00000
network:Tech-Contact:ZC108-ARIN
network:Updated:2025-05-05 21:57:07
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 38.180.150.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7736
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;38.180.150.124. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026092700 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 28 01:29:00 CST 2026
;; MSG SIZE rcvd: 107b'Host 124.150.180.38.in-addr.arpa. not found: 3(NXDOMAIN)
'Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 124.150.180.38.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.4.14.247 | attackspambots | 142.4.14.247 - - [07/Aug/2020:21:27:26 +0100] "POST /wp-login.php HTTP/1.1" 200 1973 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [07/Aug/2020:21:27:30 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [07/Aug/2020:21:27:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-08 05:18:34 |
| 115.124.65.2 | attack | Aug 7 23:07:00 cp sshd[29689]: Failed password for root from 115.124.65.2 port 39798 ssh2 Aug 7 23:07:00 cp sshd[29689]: Failed password for root from 115.124.65.2 port 39798 ssh2 |
2020-08-08 05:26:31 |
| 112.85.42.188 | attackspambots | 08/07/2020-17:09:42.618529 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan |
2020-08-08 05:10:48 |
| 51.15.214.21 | attackbots | Aug 7 13:21:49 pixelmemory sshd[1361046]: Failed password for root from 51.15.214.21 port 42404 ssh2 Aug 7 13:25:07 pixelmemory sshd[1383250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.214.21 user=root Aug 7 13:25:09 pixelmemory sshd[1383250]: Failed password for root from 51.15.214.21 port 38474 ssh2 Aug 7 13:28:26 pixelmemory sshd[1390233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.214.21 user=root Aug 7 13:28:28 pixelmemory sshd[1390233]: Failed password for root from 51.15.214.21 port 34540 ssh2 ... |
2020-08-08 04:57:08 |
| 51.158.111.191 | attackspambots | Aug 7 22:28:31 b-vps wordpress(rreb.cz)[14461]: Authentication attempt for unknown user martin from 51.158.111.191 ... |
2020-08-08 04:55:46 |
| 118.89.27.72 | attackbotsspam | 2020-08-07T22:40:56.056210mail.broermann.family sshd[18985]: Failed password for root from 118.89.27.72 port 42302 ssh2 2020-08-07T22:46:48.489272mail.broermann.family sshd[19261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.27.72 user=root 2020-08-07T22:46:51.095156mail.broermann.family sshd[19261]: Failed password for root from 118.89.27.72 port 49200 ssh2 2020-08-07T22:52:36.614006mail.broermann.family sshd[19470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.27.72 user=root 2020-08-07T22:52:38.661754mail.broermann.family sshd[19470]: Failed password for root from 118.89.27.72 port 56094 ssh2 ... |
2020-08-08 05:01:03 |
| 218.92.0.223 | attack | Aug 7 22:06:26 ajax sshd[6968]: Failed password for root from 218.92.0.223 port 10678 ssh2 Aug 7 22:06:31 ajax sshd[6968]: Failed password for root from 218.92.0.223 port 10678 ssh2 |
2020-08-08 05:07:57 |
| 185.143.221.217 | attackspambots | Hit honeypot r. |
2020-08-08 04:54:24 |
| 113.57.109.73 | attackbots | detected by Fail2Ban |
2020-08-08 05:05:17 |
| 61.93.240.65 | attackbots | 2020-08-07T20:41:56.006945shield sshd\[29545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=061093240065.static.ctinets.com user=root 2020-08-07T20:41:57.733210shield sshd\[29545\]: Failed password for root from 61.93.240.65 port 58016 ssh2 2020-08-07T20:46:23.724386shield sshd\[30058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=061093240065.static.ctinets.com user=root 2020-08-07T20:46:25.907790shield sshd\[30058\]: Failed password for root from 61.93.240.65 port 35215 ssh2 2020-08-07T20:50:44.560818shield sshd\[30773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=061093240065.static.ctinets.com user=root |
2020-08-08 05:01:28 |
| 145.239.239.83 | attack | Aug 7 23:01:08 piServer sshd[31459]: Failed password for root from 145.239.239.83 port 60208 ssh2 Aug 7 23:06:01 piServer sshd[32071]: Failed password for root from 145.239.239.83 port 52068 ssh2 ... |
2020-08-08 05:14:53 |
| 194.26.25.10 | attackspam | Aug 7 23:11:26 debian-2gb-nbg1-2 kernel: \[19093135.391635\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.25.10 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=14174 PROTO=TCP SPT=40181 DPT=5953 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-08 05:20:25 |
| 114.215.145.108 | attack | Aug 7 22:20:15 havingfunrightnow sshd[31283]: Failed password for root from 114.215.145.108 port 44382 ssh2 Aug 7 22:26:32 havingfunrightnow sshd[31377]: Failed password for root from 114.215.145.108 port 33602 ssh2 ... |
2020-08-08 04:53:13 |
| 165.22.251.121 | attackspambots | 165.22.251.121 - - [07/Aug/2020:22:27:38 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.251.121 - - [07/Aug/2020:22:27:39 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.251.121 - - [07/Aug/2020:22:27:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-08 05:25:49 |
| 45.129.33.11 | attack | Attempted to establish connection to non opened port 5965 |
2020-08-08 05:29:04 |