City: Fredonia
Region: New York
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 204.249.69.209 | attack | port 23 |
2020-04-11 18:32:39 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 204.248.0.0 - 204.251.255.255
CIDR: 204.248.0.0/14
NetName: COGENT-204-248-0
NetHandle: NET-204-248-0-0-1
Parent: NET204 (NET-204-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cogent Communications, LLC (COGC)
RegDate: 1995-02-01
Updated: 2025-12-23
Ref: https://rdap.arin.net/registry/ip/204.248.0.0
OrgName: Cogent Communications, LLC
OrgId: COGC
Address: 2450 N Street NW
City: Washington
StateProv: DC
PostalCode: 20037
Country: US
RegDate: 2000-05-30
Updated: 2025-09-23
Comment: Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/COGC
ReferralServer: rwhois://rwhois.cogentco.com:4321
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: +1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPALL-ARIN
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: +1-877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ZC108-ARIN
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: +1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/COGEN-ARIN
# end
# start
NetRange: 204.249.64.0 - 204.249.71.255
CIDR: 204.249.64.0/21
NetName: FON-34388869121466
NetHandle: NET-204-249-64-0-1
Parent: COGENT-204-248-0 (NET-204-248-0-0-1)
NetType: Reassigned
OriginAS:
Organization: Dunkirk & Fredonia Telephone Company (DFT)
RegDate: 2002-07-26
Updated: 2013-05-16
Ref: https://rdap.arin.net/registry/ip/204.249.64.0
OrgName: Dunkirk & Fredonia Telephone Company
OrgId: DFT
Address: 40 Temple Street
City: Fredonia
StateProv: NY
PostalCode: 14063
Country: US
RegDate: 1997-10-02
Updated: 2024-11-25
Ref: https://rdap.arin.net/registry/entity/DFT
OrgTechHandle: RJS140-ARIN
OrgTechName: Sciarrino, Robert J
OrgTechPhone: +1-716-673-3031
OrgTechEmail: robs@dftel.com
OrgTechRef: https://rdap.arin.net/registry/entity/RJS140-ARIN
OrgAbuseHandle: KWM-ARIN
OrgAbuseName: Maytum, Kristopher W
OrgAbusePhone: +1-716-673-3011
OrgAbuseEmail: krism@netsync.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/KWM-ARIN
OrgTechHandle: KWM-ARIN
OrgTechName: Maytum, Kristopher W
OrgTechPhone: +1-716-673-3011
OrgTechEmail: krism@netsync.net
OrgTechRef: https://rdap.arin.net/registry/entity/KWM-ARIN
OrgAbuseHandle: RJS140-ARIN
OrgAbuseName: Sciarrino, Robert J
OrgAbusePhone: +1-716-673-3031
OrgAbuseEmail: robs@dftel.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/RJS140-ARIN
RAbuseHandle: WLE40-ARIN
RAbuseName: Levan, Wade
RAbusePhone: +1-716-673-3011
RAbuseEmail: wadel@dftel.com
RAbuseRef: https://rdap.arin.net/registry/entity/WLE40-ARIN
RAbuseHandle: KWM-ARIN
RAbuseName: Maytum, Kristopher W
RAbusePhone: +1-716-673-3011
RAbuseEmail: krism@netsync.net
RAbuseRef: https://rdap.arin.net/registry/entity/KWM-ARIN
RNOCHandle: KWM-ARIN
RNOCName: Maytum, Kristopher W
RNOCPhone: +1-716-673-3011
RNOCEmail: krism@netsync.net
RNOCRef: https://rdap.arin.net/registry/entity/KWM-ARIN
RNOCHandle: WLE40-ARIN
RNOCName: Levan, Wade
RNOCPhone: +1-716-673-3011
RNOCEmail: wadel@dftel.com
RNOCRef: https://rdap.arin.net/registry/entity/WLE40-ARIN
RTechHandle: KWM-ARIN
RTechName: Maytum, Kristopher W
RTechPhone: +1-716-673-3011
RTechEmail: krism@netsync.net
RTechRef: https://rdap.arin.net/registry/entity/KWM-ARIN
RTechHandle: WLE40-ARIN
RTechName: Levan, Wade
RTechPhone: +1-716-673-3011
RTechEmail: wadel@dftel.com
RTechRef: https://rdap.arin.net/registry/entity/WLE40-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.cogentco.com:4321.
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.2)
network:ID:NET4-CCF9400015
network:Network-Name:NET4-CCF9400015
network:IP-Network:204.249.64.0/21
network:Org-Name:NETSYNC
network:Street-Address:PO BOX 209
network:City:FREDONIA
network:State:NY
network:Country:US
network:Postal-Code:14063-0209
network:Tech-Contact:ZC108-ARIN
network:Updated:2024-05-13 17:52:06
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 204.249.69.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20027
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;204.249.69.19. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101001 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 11 07:32:11 CST 2026
;; MSG SIZE rcvd: 10619.69.249.204.in-addr.arpa domain name pointer 204-249-69-19.netsync.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
19.69.249.204.in-addr.arpa name = 204-249-69-19.netsync.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.175.68.129 | attack | SASL PLAIN auth failed: ruser=... |
2020-03-07 09:11:10 |
| 54.36.135.150 | attack | Mar 7 06:06:16 gw1 sshd[27879]: Failed password for root from 54.36.135.150 port 37730 ssh2 ... |
2020-03-07 09:19:33 |
| 93.194.120.62 | attack | Lines containing failures of 93.194.120.62 Mar 6 16:40:55 neweola sshd[21489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.194.120.62 user=r.r Mar 6 16:40:57 neweola sshd[21489]: Failed password for r.r from 93.194.120.62 port 45456 ssh2 Mar 6 16:40:57 neweola sshd[21489]: Received disconnect from 93.194.120.62 port 45456:11: Bye Bye [preauth] Mar 6 16:40:57 neweola sshd[21489]: Disconnected from authenticating user r.r 93.194.120.62 port 45456 [preauth] Mar 6 16:49:30 neweola sshd[21704]: Invalid user qw from 93.194.120.62 port 38762 Mar 6 16:49:30 neweola sshd[21704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.194.120.62 Mar 6 16:49:32 neweola sshd[21704]: Failed password for invalid user qw from 93.194.120.62 port 38762 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=93.194.120.62 |
2020-03-07 09:30:48 |
| 92.63.194.11 | attack | Mar 7 01:56:19 vps sshd[2921]: Failed password for root from 92.63.194.11 port 44815 ssh2 Mar 7 01:57:52 vps sshd[3009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.11 Mar 7 01:57:53 vps sshd[3009]: Failed password for invalid user guest from 92.63.194.11 port 36933 ssh2 ... |
2020-03-07 09:05:09 |
| 182.109.77.189 | attackbots | Unauthorized connection attempt from IP address 182.109.77.189 on Port 445(SMB) |
2020-03-07 09:10:30 |
| 176.210.171.244 | attackspam | Unauthorized connection attempt from IP address 176.210.171.244 on Port 445(SMB) |
2020-03-07 09:27:59 |
| 177.135.26.154 | attackbots | Unauthorized connection attempt from IP address 177.135.26.154 on Port 445(SMB) |
2020-03-07 09:08:03 |
| 159.89.194.160 | attack | Mar 6 18:45:28 lanister sshd[30288]: Invalid user vmail from 159.89.194.160 Mar 6 18:45:29 lanister sshd[30288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.160 Mar 6 18:45:28 lanister sshd[30288]: Invalid user vmail from 159.89.194.160 Mar 6 18:45:30 lanister sshd[30288]: Failed password for invalid user vmail from 159.89.194.160 port 37518 ssh2 |
2020-03-07 09:13:19 |
| 58.56.5.232 | attackbotsspam | Unauthorized connection attempt from IP address 58.56.5.232 on Port 445(SMB) |
2020-03-07 09:27:09 |
| 37.105.99.215 | attackbotsspam | Email rejected due to spam filtering |
2020-03-07 09:08:54 |
| 111.230.157.95 | attackbotsspam | 20 attempts against mh-misbehave-ban on milky |
2020-03-07 09:18:40 |
| 45.161.12.22 | attackspam | Unauthorized connection attempt from IP address 45.161.12.22 on Port 445(SMB) |
2020-03-07 08:56:14 |
| 104.248.87.160 | attackspambots | SSH brute force |
2020-03-07 09:31:35 |
| 5.126.176.252 | attackbots | Email rejected due to spam filtering |
2020-03-07 09:24:54 |
| 177.55.59.185 | attack | Unauthorized connection attempt from IP address 177.55.59.185 on Port 445(SMB) |
2020-03-07 09:27:29 |