City: Los Angeles
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b'#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 38.0.0.0 - 38.255.255.255
CIDR: 38.0.0.0/8
NetName: COGENT-A
NetHandle: NET-38-0-0-0-1
Parent: ()
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1991-04-16
Updated: 2025-09-23
Ref: https://rdap.arin.net/registry/ip/38.0.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-2663F80018
network:Network-Name:NET4-2663F80018
network:IP-Network:38.99.248.0/24
network:Org-Name:BACK WAVES LIMITED
network:Street-Address:624 SOUTH GRAND AVENUE
network:City:LOS ANGELES
network:State:CA
network:Country:US
network:Postal-Code:90017
network:Tech-Contact:ZC108-ARIN
network:Updated:2025-01-14 17:40:26
%ok'; <<>> DiG 9.10.3-P4-Ubuntu <<>> 38.99.248.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32138
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;38.99.248.244. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101300 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 13 18:48:38 CST 2026
;; MSG SIZE rcvd: 106b'Host 244.248.99.38.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 38.99.248.244.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.47.187.125 | attack | 52.47.187.125 - - [20/Aug/2020:14:03:41 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.47.187.125 - - [20/Aug/2020:14:03:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.47.187.125 - - [20/Aug/2020:14:03:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-21 00:31:11 |
| 132.232.59.78 | attack | Aug 20 14:36:59 vps1 sshd[10733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.59.78 Aug 20 14:37:02 vps1 sshd[10733]: Failed password for invalid user steam from 132.232.59.78 port 39164 ssh2 Aug 20 14:39:55 vps1 sshd[10848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.59.78 Aug 20 14:39:57 vps1 sshd[10848]: Failed password for invalid user amministratore from 132.232.59.78 port 43150 ssh2 Aug 20 14:42:52 vps1 sshd[10914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.59.78 Aug 20 14:42:54 vps1 sshd[10914]: Failed password for invalid user mrq from 132.232.59.78 port 47140 ssh2 ... |
2020-08-20 23:51:57 |
| 106.13.210.188 | attackbots | Aug 20 16:20:57 abendstille sshd\[31094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.210.188 user=root Aug 20 16:20:59 abendstille sshd\[31094\]: Failed password for root from 106.13.210.188 port 45492 ssh2 Aug 20 16:26:40 abendstille sshd\[5141\]: Invalid user fluffy from 106.13.210.188 Aug 20 16:26:40 abendstille sshd\[5141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.210.188 Aug 20 16:26:43 abendstille sshd\[5141\]: Failed password for invalid user fluffy from 106.13.210.188 port 47278 ssh2 ... |
2020-08-20 23:59:04 |
| 120.35.26.129 | attackbots | 2020-08-20T14:50:50.739788vps-d63064a2 sshd[5230]: User root from 120.35.26.129 not allowed because not listed in AllowUsers 2020-08-20T14:50:52.747897vps-d63064a2 sshd[5230]: Failed password for invalid user root from 120.35.26.129 port 17807 ssh2 2020-08-20T14:55:55.135134vps-d63064a2 sshd[5262]: Invalid user ts3bot from 120.35.26.129 port 17810 2020-08-20T14:55:55.144330vps-d63064a2 sshd[5262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.35.26.129 2020-08-20T14:55:55.135134vps-d63064a2 sshd[5262]: Invalid user ts3bot from 120.35.26.129 port 17810 2020-08-20T14:55:57.339518vps-d63064a2 sshd[5262]: Failed password for invalid user ts3bot from 120.35.26.129 port 17810 ssh2 ... |
2020-08-21 00:17:53 |
| 67.143.176.171 | attackbots | Brute forcing email accounts |
2020-08-21 00:34:05 |
| 54.171.167.220 | attackspambots | RDP Bruteforce |
2020-08-21 00:21:54 |
| 111.72.194.134 | attackbotsspam | Aug 20 14:27:36 srv01 postfix/smtpd\[26088\]: warning: unknown\[111.72.194.134\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 20 14:27:47 srv01 postfix/smtpd\[26088\]: warning: unknown\[111.72.194.134\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 20 14:28:04 srv01 postfix/smtpd\[26088\]: warning: unknown\[111.72.194.134\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 20 14:28:23 srv01 postfix/smtpd\[26088\]: warning: unknown\[111.72.194.134\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 20 14:28:35 srv01 postfix/smtpd\[26088\]: warning: unknown\[111.72.194.134\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-08-20 23:50:49 |
| 198.12.108.5 | attackbotsspam | Automatic report - Banned IP Access |
2020-08-21 00:07:46 |
| 49.234.158.131 | attackspam | Aug 20 15:43:43 rush sshd[28429]: Failed password for root from 49.234.158.131 port 53438 ssh2 Aug 20 15:48:05 rush sshd[28605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.158.131 Aug 20 15:48:08 rush sshd[28605]: Failed password for invalid user ghost from 49.234.158.131 port 43086 ssh2 ... |
2020-08-20 23:56:13 |
| 46.105.148.212 | attackbots | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-21 00:09:34 |
| 112.165.92.131 | attackbotsspam | " " |
2020-08-21 00:25:37 |
| 74.82.47.33 | attackspambots | " " |
2020-08-21 00:26:18 |
| 200.114.236.19 | attackspam | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-08-21 00:04:08 |
| 82.210.186.173 | attackspambots | Automatic report - Banned IP Access |
2020-08-21 00:03:17 |
| 58.171.243.146 | attackspambots | RDP Brute-Force (honeypot 7) |
2020-08-21 00:19:48 |