City: Lock Haven
Region: Pennsylvania
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 205.174.96.0 - 205.174.111.255
CIDR: 205.174.96.0/20
NetName: KCSDNET
NetHandle: NET-205-174-96-0-1
Parent: NET205 (NET-205-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Keystone Central School District (KCSD)
RegDate: 1995-03-23
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/205.174.96.0
OrgName: Keystone Central School District
OrgId: KCSD
Address: 86 Administration Drive
City: Mill Hall
StateProv: PA
PostalCode: 17751
Country: US
RegDate: 1995-03-23
Updated: 2017-05-15
Ref: https://rdap.arin.net/registry/entity/KCSD
OrgAbuseHandle: ZK18-ARIN
OrgAbuseName: Keystone Central School District
OrgAbusePhone: +1-570-893-4923
OrgAbuseEmail: kkern@kcsd.k12.pa.us
OrgAbuseRef: https://rdap.arin.net/registry/entity/ZK18-ARIN
OrgTechHandle: NETWO5477-ARIN
OrgTechName: Network Supervisor
OrgTechPhone: +1-570-748-1825
OrgTechEmail: admin@kcsd.k12.pa.us
OrgTechRef: https://rdap.arin.net/registry/entity/NETWO5477-ARIN
RNOCHandle: NETWO5477-ARIN
RNOCName: Network Supervisor
RNOCPhone: +1-570-748-1825
RNOCEmail: admin@kcsd.k12.pa.us
RNOCRef: https://rdap.arin.net/registry/entity/NETWO5477-ARIN
RAbuseHandle: NETWO5477-ARIN
RAbuseName: Network Supervisor
RAbusePhone: +1-570-748-1825
RAbuseEmail: admin@kcsd.k12.pa.us
RAbuseRef: https://rdap.arin.net/registry/entity/NETWO5477-ARIN
RTechHandle: ZK18-ARIN
RTechName: Keystone Central School District
RTechPhone: +1-570-893-4923
RTechEmail: kkern@kcsd.k12.pa.us
RTechRef: https://rdap.arin.net/registry/entity/ZK18-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 205.174.99.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32387
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;205.174.99.185. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032400 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 24 22:15:17 CST 2026
;; MSG SIZE rcvd: 107Host 185.99.174.205.in-addr.arpa not found: 2(SERVFAIL)
server can't find 205.174.99.185.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.230.81.211 | attack | Jul 19 18:37:47 tamoto postfix/smtpd[6835]: connect from unknown[45.230.81.211] Jul 19 18:37:53 tamoto postfix/smtpd[6835]: warning: unknown[45.230.81.211]: SASL CRAM-MD5 authentication failed: authentication failure Jul 19 18:37:54 tamoto postfix/smtpd[6835]: warning: unknown[45.230.81.211]: SASL PLAIN authentication failed: authentication failure Jul 19 18:37:55 tamoto postfix/smtpd[6835]: warning: unknown[45.230.81.211]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.230.81.211 |
2019-07-20 03:54:12 |
| 144.217.7.154 | attackbots | WordPress login Brute force / Web App Attack on client site. |
2019-07-20 03:10:40 |
| 188.166.226.124 | attack | Automatic report - Banned IP Access |
2019-07-20 03:19:07 |
| 14.169.132.214 | attackbots | Jul 19 18:26:50 seraph sshd[21561]: Invalid user admin from 14.169.132.214 Jul 19 18:26:50 seraph sshd[21561]: pam_unix(sshd:auth): authentication fai= lure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D14.169.132.214 Jul 19 18:26:53 seraph sshd[21561]: Failed password for invalid user admin = from 14.169.132.214 port 56526 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.169.132.214 |
2019-07-20 03:37:44 |
| 108.62.202.220 | attackbotsspam | Scanning (more than 2 packets) random ports - tries to find possible vulnerable services |
2019-07-20 03:52:13 |
| 59.120.75.238 | attack | 23/tcp 23/tcp 23/tcp... [2019-06-03/07-19]8pkt,1pt.(tcp) |
2019-07-20 03:19:29 |
| 2.187.251.247 | attackspam | Automatic report - Port Scan Attack |
2019-07-20 03:33:15 |
| 139.59.95.244 | attackspambots | FTP Brute-Force reported by Fail2Ban |
2019-07-20 03:24:55 |
| 91.206.15.248 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-20 03:47:50 |
| 154.73.65.123 | attack | Jul 19 16:43:30 sshgateway sshd\[3152\]: Invalid user nagesh from 154.73.65.123 Jul 19 16:43:31 sshgateway sshd\[3152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.73.65.123 Jul 19 16:43:33 sshgateway sshd\[3152\]: Failed password for invalid user nagesh from 154.73.65.123 port 61476 ssh2 |
2019-07-20 03:42:18 |
| 149.202.148.185 | attackspam | Jul 19 21:20:03 SilenceServices sshd[27747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.148.185 Jul 19 21:20:05 SilenceServices sshd[27747]: Failed password for invalid user vnc from 149.202.148.185 port 57700 ssh2 Jul 19 21:24:42 SilenceServices sshd[30160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.148.185 |
2019-07-20 03:43:35 |
| 61.19.208.34 | attackbots | 445/tcp 445/tcp 445/tcp... [2019-06-10/07-19]7pkt,1pt.(tcp) |
2019-07-20 03:14:55 |
| 31.192.108.102 | attackbotsspam | Brute forcing RDP port 3389 |
2019-07-20 03:39:36 |
| 185.123.12.14 | attackbots | [portscan] Port scan |
2019-07-20 03:12:53 |
| 81.31.41.70 | attack | www.fahrschule-mihm.de 81.31.41.70 \[19/Jul/2019:18:44:05 +0200\] "POST /wp-login.php HTTP/1.1" 200 5757 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.fahrschule-mihm.de 81.31.41.70 \[19/Jul/2019:18:44:05 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4106 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-07-20 03:13:57 |