City: Phillipsburg
Region: Kansas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 64.250.48.0 - 64.250.63.255
CIDR: 64.250.48.0/20
NetName: KFN-001
NetHandle: NET-64-250-48-0-1
Parent: NET64 (NET-64-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Kansas Fiber Network, LLC (KFNL)
RegDate: 2010-11-17
Updated: 2020-06-17
Ref: https://rdap.arin.net/registry/ip/64.250.48.0
OrgName: Kansas Fiber Network, LLC
OrgId: KFNL
Address: 8304 E 34th Street Circle North
Address: Bldg 1400
City: Wichita
StateProv: KS
PostalCode: 67226
Country: US
RegDate: 2010-06-18
Updated: 2025-08-05
Ref: https://rdap.arin.net/registry/entity/KFNL
OrgTechHandle: HAGEM13-ARIN
OrgTechName: Hageman, John
OrgTechPhone: +1-316-712-6017
OrgTechEmail: jhageman@ksfiber.net
OrgTechRef: https://rdap.arin.net/registry/entity/HAGEM13-ARIN
OrgAbuseHandle: NOC32517-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-785-735-6107
OrgAbuseEmail: kfnnoc@ksfiber.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC32517-ARIN
OrgNOCHandle: NOC32517-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-785-735-6107
OrgNOCEmail: kfnnoc@ksfiber.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32517-ARIN
OrgTechHandle: MAGNE9-ARIN
OrgTechName: Magnett, Thomas
OrgTechPhone: +1-316-633-0639
OrgTechEmail: tmagnett@ksfiber.net
OrgTechRef: https://rdap.arin.net/registry/entity/MAGNE9-ARIN
OrgTechHandle: AUSHE-ARIN
OrgTechName: Ausherman, Chace
OrgTechPhone: +1-316-712-6014
OrgTechEmail: causherman@ksfiber.net
OrgTechRef: https://rdap.arin.net/registry/entity/AUSHE-ARIN
OrgTechHandle: PULSZ1-ARIN
OrgTechName: Puls, Zachary
OrgTechPhone: +1-316-221-2094
OrgTechEmail: zpuls@ksfiber.net
OrgTechRef: https://rdap.arin.net/registry/entity/PULSZ1-ARIN
RAbuseHandle: HAGEM13-ARIN
RAbuseName: Hageman, John
RAbusePhone: +1-316-712-6017
RAbuseEmail: jhageman@ksfiber.net
RAbuseRef: https://rdap.arin.net/registry/entity/HAGEM13-ARIN
RAbuseHandle: NOC32517-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-785-735-6107
RAbuseEmail: kfnnoc@ksfiber.net
RAbuseRef: https://rdap.arin.net/registry/entity/NOC32517-ARIN
RNOCHandle: NOC32517-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-785-735-6107
RNOCEmail: kfnnoc@ksfiber.net
RNOCRef: https://rdap.arin.net/registry/entity/NOC32517-ARIN
RTechHandle: DRW64-ARIN
RTechName: Wright, David Robert
RTechPhone: +1-316-712-6021
RTechEmail: dwright@ksfiber.net
RTechRef: https://rdap.arin.net/registry/entity/DRW64-ARIN
RTechHandle: HAGEM13-ARIN
RTechName: Hageman, John
RTechPhone: +1-316-712-6017
RTechEmail: jhageman@ksfiber.net
RTechRef: https://rdap.arin.net/registry/entity/HAGEM13-ARIN
# end
# start
NetRange: 64.250.52.0 - 64.250.55.255
CIDR: 64.250.52.0/22
NetName: KFN-RURALTELEPHONE
NetHandle: NET-64-250-52-0-1
Parent: KFN-001 (NET-64-250-48-0-1)
NetType: Reassigned
OriginAS:
Organization: NEX-TECH (NEXTEC-1)
RegDate: 2011-05-18
Updated: 2011-05-18
Ref: https://rdap.arin.net/registry/ip/64.250.52.0
OrgName: NEX-TECH
OrgId: NEXTEC-1
Address: 2418 Vine
City: Hays
StateProv: KS
PostalCode: 67601
Country: US
RegDate: 2000-03-03
Updated: 2026-04-07
Ref: https://rdap.arin.net/registry/entity/NEXTEC-1
OrgTechHandle: JECHA2-ARIN
OrgTechName: Jecha, Josh
OrgTechPhone: +1-785-355-1988
OrgTechEmail: jjecha@nex-tech.com
OrgTechRef: https://rdap.arin.net/registry/entity/JECHA2-ARIN
OrgNOCHandle: AJR38-ARIN
OrgNOCName: reiter, allan
OrgNOCPhone: +1-785-735-6101
OrgNOCEmail: areiter@areiter.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AJR38-ARIN
OrgNOCHandle: JECHA2-ARIN
OrgNOCName: Jecha, Josh
OrgNOCPhone: +1-785-355-1988
OrgNOCEmail: jjecha@nex-tech.com
OrgNOCRef: https://rdap.arin.net/registry/entity/JECHA2-ARIN
OrgAbuseHandle: SCHNE66-ARIN
OrgAbuseName: Schneider, Joel
OrgAbusePhone: +1-785-625-7070
OrgAbuseEmail: jschneider@nex-tech.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/SCHNE66-ARIN
OrgNOCHandle: SCHNE66-ARIN
OrgNOCName: Schneider, Joel
OrgNOCPhone: +1-785-625-7070
OrgNOCEmail: jschneider@nex-tech.com
OrgNOCRef: https://rdap.arin.net/registry/entity/SCHNE66-ARIN
OrgAbuseHandle: AJR38-ARIN
OrgAbuseName: reiter, allan
OrgAbusePhone: +1-785-735-6101
OrgAbuseEmail: areiter@areiter.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AJR38-ARIN
OrgAbuseHandle: JECHA2-ARIN
OrgAbuseName: Jecha, Josh
OrgAbusePhone: +1-785-355-1988
OrgAbuseEmail: jjecha@nex-tech.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/JECHA2-ARIN
OrgTechHandle: AJR38-ARIN
OrgTechName: reiter, allan
OrgTechPhone: +1-785-735-6101
OrgTechEmail: areiter@areiter.com
OrgTechRef: https://rdap.arin.net/registry/entity/AJR38-ARIN
OrgTechHandle: SCHNE66-ARIN
OrgTechName: Schneider, Joel
OrgTechPhone: +1-785-625-7070
OrgTechEmail: jschneider@nex-tech.com
OrgTechRef: https://rdap.arin.net/registry/entity/SCHNE66-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.250.52.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4123
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.250.52.124. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081701 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 18 12:31:02 CST 2026
;; MSG SIZE rcvd: 106124.52.250.64.in-addr.arpa domain name pointer 124.52.250.64.nex-tech.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
124.52.250.64.in-addr.arpa name = 124.52.250.64.nex-tech.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.101.190.145 | attackbots | RUSSIAN SCAMMERS ! |
2020-05-16 00:39:25 |
| 121.46.244.194 | attack | May 15 14:20:35 inter-technics sshd[5342]: Invalid user test from 121.46.244.194 port 15972 May 15 14:20:35 inter-technics sshd[5342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.46.244.194 May 15 14:20:35 inter-technics sshd[5342]: Invalid user test from 121.46.244.194 port 15972 May 15 14:20:37 inter-technics sshd[5342]: Failed password for invalid user test from 121.46.244.194 port 15972 ssh2 May 15 14:23:18 inter-technics sshd[5538]: Invalid user db2inst1 from 121.46.244.194 port 29453 ... |
2020-05-16 01:12:42 |
| 67.205.135.65 | attackspambots | May 15 17:23:40 gw1 sshd[7686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.135.65 May 15 17:23:42 gw1 sshd[7686]: Failed password for invalid user psg from 67.205.135.65 port 33876 ssh2 ... |
2020-05-16 00:53:31 |
| 187.188.193.211 | attackspambots | May 15 15:24:08 root sshd[15851]: Invalid user seymour from 187.188.193.211 ... |
2020-05-16 00:35:48 |
| 104.131.29.92 | attack | May 15 15:16:29 ift sshd\[26275\]: Invalid user rachel from 104.131.29.92May 15 15:16:31 ift sshd\[26275\]: Failed password for invalid user rachel from 104.131.29.92 port 38249 ssh2May 15 15:20:22 ift sshd\[26687\]: Invalid user gerrit from 104.131.29.92May 15 15:20:24 ift sshd\[26687\]: Failed password for invalid user gerrit from 104.131.29.92 port 42570 ssh2May 15 15:24:18 ift sshd\[27303\]: Invalid user xr from 104.131.29.92 ... |
2020-05-16 00:30:00 |
| 213.202.168.102 | attackbots | 5x Failed Password |
2020-05-16 00:28:07 |
| 51.68.109.87 | attackspam | May 15 13:48:50 vps46666688 sshd[28321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.109.87 May 15 13:48:52 vps46666688 sshd[28321]: Failed password for invalid user tsdev from 51.68.109.87 port 34506 ssh2 ... |
2020-05-16 00:54:02 |
| 139.186.73.65 | attackspambots | Invalid user elastic from 139.186.73.65 port 57472 |
2020-05-16 01:11:23 |
| 117.68.195.165 | attackspam | May 15 06:42:49 garuda postfix/smtpd[59441]: connect from unknown[117.68.195.165] May 15 06:43:01 garuda postfix/smtpd[59441]: warning: unknown[117.68.195.165]: SASL LOGIN authentication failed: generic failure May 15 06:43:01 garuda postfix/smtpd[59441]: lost connection after AUTH from unknown[117.68.195.165] May 15 06:43:01 garuda postfix/smtpd[59441]: disconnect from unknown[117.68.195.165] ehlo=1 auth=0/1 commands=1/2 May 15 06:43:01 garuda postfix/smtpd[59441]: connect from unknown[117.68.195.165] May 15 06:43:02 garuda postfix/smtpd[59441]: warning: unknown[117.68.195.165]: SASL LOGIN authentication failed: generic failure May 15 06:43:02 garuda postfix/smtpd[59441]: lost connection after AUTH from unknown[117.68.195.165] May 15 06:43:02 garuda postfix/smtpd[59441]: disconnect from unknown[117.68.195.165] ehlo=1 auth=0/1 commands=1/2 May 15 06:43:03 garuda postfix/smtpd[59441]: connect from unknown[117.68.195.165] May 15 06:43:03 garuda postfix/smtpd[59441]: warni........ ------------------------------- |
2020-05-16 00:46:28 |
| 182.43.171.208 | attackspam | May 15 12:23:46 ip-172-31-61-156 sshd[4559]: Invalid user alejandro from 182.43.171.208 May 15 12:23:47 ip-172-31-61-156 sshd[4559]: Failed password for invalid user alejandro from 182.43.171.208 port 35192 ssh2 May 15 12:23:46 ip-172-31-61-156 sshd[4559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.43.171.208 May 15 12:23:46 ip-172-31-61-156 sshd[4559]: Invalid user alejandro from 182.43.171.208 May 15 12:23:47 ip-172-31-61-156 sshd[4559]: Failed password for invalid user alejandro from 182.43.171.208 port 35192 ssh2 ... |
2020-05-16 00:48:59 |
| 123.16.138.48 | attackbotsspam | May 14 11:34:37 scivo sshd[18830]: Address 123.16.138.48 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 14 11:34:37 scivo sshd[18830]: Invalid user adriana from 123.16.138.48 May 14 11:34:37 scivo sshd[18830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.138.48 May 14 11:34:39 scivo sshd[18830]: Failed password for invalid user adriana from 123.16.138.48 port 49030 ssh2 May 14 11:34:39 scivo sshd[18830]: Received disconnect from 123.16.138.48: 11: Bye Bye [preauth] May 14 11:47:59 scivo sshd[19655]: Address 123.16.138.48 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 14 11:47:59 scivo sshd[19655]: Invalid user test from 123.16.138.48 May 14 11:47:59 scivo sshd[19655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.138.48 May 14 11:48:01 scivo sshd[19655]: Failed passwor........ ------------------------------- |
2020-05-16 00:31:57 |
| 123.207.7.130 | attackbots | May 15 21:29:57 gw1 sshd[15103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.7.130 May 15 21:30:00 gw1 sshd[15103]: Failed password for invalid user ftpuser from 123.207.7.130 port 58072 ssh2 ... |
2020-05-16 00:47:18 |
| 190.145.224.18 | attackspambots | Tried sshing with brute force. |
2020-05-16 00:33:33 |
| 183.89.216.59 | attackspambots | Dovecot Invalid User Login Attempt. |
2020-05-16 01:09:15 |
| 117.20.116.137 | attackbots | May 15 14:02:40 server770 sshd[24423]: Did not receive identification string from 117.20.116.137 port 50448 May 15 14:02:44 server770 sshd[24426]: Invalid user admin1 from 117.20.116.137 port 50449 May 15 14:02:44 server770 sshd[24426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.20.116.137 May 15 14:02:47 server770 sshd[24426]: Failed password for invalid user admin1 from 117.20.116.137 port 50449 ssh2 May 15 14:02:47 server770 sshd[24426]: Connection closed by 117.20.116.137 port 50449 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.20.116.137 |
2020-05-16 01:13:17 |