City: Coffeyville
Region: Kansas
Country: United States
Internet Service Provider: Softcom Internet Communications, Inc
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 68.96.0.0 - 68.111.255.255
CIDR: 68.96.0.0/12
NetName: COX-ATLANTA-2
NetHandle: NET-68-96-0-0-1
Parent: NET68 (NET-68-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Cox Communications Inc. (CXA)
RegDate: 2002-02-04
Updated: 2012-03-02
Comment: For legal requests/assistance please use the following contact information:
Comment:
Comment: Cox Subpoena Phone: 404-269-0100
Comment:
Comment: Cox Subpoena Info: http://www.cox.com/policy/leainformation/default.asp
Ref: https://rdap.arin.net/registry/ip/68.96.0.0
OrgName: Cox Communications Inc.
OrgId: CXA
Address: 1400 Lake Hearn Dr.
City: Atlanta
StateProv: GA
PostalCode: 30319
Country: US
RegDate:
Updated: 2025-02-06
Comment: For legal requests/assistance please use the
Comment: following contact information:
Comment: Cox Subpoena Info: https://www.cox.com/aboutus/policies/law-enforcement-and-subpoenas-information.html
Ref: https://rdap.arin.net/registry/entity/CXA
OrgRoutingHandle: GARCI1592-ARIN
OrgRoutingName: Garcia, Jacob
OrgRoutingPhone: +1-404-269-4416
OrgRoutingEmail: jacob.garcia@cox.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/GARCI1592-ARIN
OrgTechHandle: MEROL3-ARIN
OrgTechName: Merola, Cari
OrgTechPhone: +1-404-269-4416
OrgTechEmail: cari.merola@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/MEROL3-ARIN
OrgTechHandle: TECH1516-ARIN
OrgTechName: Tech
OrgTechPhone: +1-404-269-4416
OrgTechEmail: NOCEngineer@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/TECH1516-ARIN
OrgTechHandle: DMALL1-ARIN
OrgTechName: DMALLA
OrgTechPhone: +1-602-694-4429
OrgTechEmail: deependra.malla@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/DMALL1-ARIN
OrgTechHandle: BERUB3-ARIN
OrgTechName: Berube, Tori
OrgTechPhone: +1-404-269-4416
OrgTechEmail: tori.berube@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/BERUB3-ARIN
OrgTechHandle: GARCI1592-ARIN
OrgTechName: Garcia, Jacob
OrgTechPhone: +1-404-269-4416
OrgTechEmail: jacob.garcia@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/GARCI1592-ARIN
OrgAbuseHandle: IC146-ARIN
OrgAbuseName: Cox Communications Inc
OrgAbusePhone: +1-866-272-5111
OrgAbuseEmail: abuse@cox.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IC146-ARIN
RTechHandle: IC146-ARIN
RTechName: Cox Communications Inc
RTechPhone: +1-866-272-5111
RTechEmail: abuse@cox.com
RTechRef: https://rdap.arin.net/registry/entity/IC146-ARIN
# end
# start
NetRange: 68.102.0.0 - 68.103.255.255
CIDR: 68.102.0.0/15
NetName: NETBLK-WI-RDC-68-102-0-0
NetHandle: NET-68-102-0-0-1
Parent: COX-ATLANTA-2 (NET-68-96-0-0-1)
NetType: Reassigned
OriginAS:
Organization: Cox Communications Inc. (CXA)
RegDate: 2002-05-15
Updated: 2007-08-16
Comment: For legal requests/assistance please use the following contact information:
Comment:
Comment: Cox Subpoena Phone: 404-269-0100
Comment:
Comment: Cox Subpoena Info: http://www.cox.com/policy/leainformation/default.asp
Ref: https://rdap.arin.net/registry/ip/68.102.0.0
OrgName: Cox Communications Inc.
OrgId: CXA
Address: 1400 Lake Hearn Dr.
City: Atlanta
StateProv: GA
PostalCode: 30319
Country: US
RegDate:
Updated: 2025-02-06
Comment: For legal requests/assistance please use the
Comment: following contact information:
Comment: Cox Subpoena Info: https://www.cox.com/aboutus/policies/law-enforcement-and-subpoenas-information.html
Ref: https://rdap.arin.net/registry/entity/CXA
OrgRoutingHandle: GARCI1592-ARIN
OrgRoutingName: Garcia, Jacob
OrgRoutingPhone: +1-404-269-4416
OrgRoutingEmail: jacob.garcia@cox.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/GARCI1592-ARIN
OrgTechHandle: MEROL3-ARIN
OrgTechName: Merola, Cari
OrgTechPhone: +1-404-269-4416
OrgTechEmail: cari.merola@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/MEROL3-ARIN
OrgTechHandle: TECH1516-ARIN
OrgTechName: Tech
OrgTechPhone: +1-404-269-4416
OrgTechEmail: NOCEngineer@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/TECH1516-ARIN
OrgTechHandle: DMALL1-ARIN
OrgTechName: DMALLA
OrgTechPhone: +1-602-694-4429
OrgTechEmail: deependra.malla@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/DMALL1-ARIN
OrgTechHandle: BERUB3-ARIN
OrgTechName: Berube, Tori
OrgTechPhone: +1-404-269-4416
OrgTechEmail: tori.berube@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/BERUB3-ARIN
OrgTechHandle: GARCI1592-ARIN
OrgTechName: Garcia, Jacob
OrgTechPhone: +1-404-269-4416
OrgTechEmail: jacob.garcia@cox.com
OrgTechRef: https://rdap.arin.net/registry/entity/GARCI1592-ARIN
OrgAbuseHandle: IC146-ARIN
OrgAbuseName: Cox Communications Inc
OrgAbusePhone: +1-866-272-5111
OrgAbuseEmail: abuse@cox.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IC146-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.103.67.126
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2986
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;68.103.67.126. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032702 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 28 08:52:21 CST 2026
;; MSG SIZE rcvd: 106126.67.103.68.in-addr.arpa domain name pointer ip68-103-67-126.ks.ok.cox.net.
126.67.103.68.in-addr.arpa domain name pointer ip68-103-67-126.ks.ks.cox.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
126.67.103.68.in-addr.arpa name = ip68-103-67-126.ks.ok.cox.net.
126.67.103.68.in-addr.arpa name = ip68-103-67-126.ks.ks.cox.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 37.59.224.39 | attack | Invalid user nicole from 37.59.224.39 port 34859 |
2020-10-10 23:49:12 |
| 218.61.5.68 | attackspambots | Oct 10 01:17:11 gitlab sshd[26547]: Failed password for invalid user test from 218.61.5.68 port 18436 ssh2 Oct 10 01:21:14 gitlab sshd[27136]: Invalid user testing from 218.61.5.68 port 32985 Oct 10 01:21:14 gitlab sshd[27136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.61.5.68 Oct 10 01:21:14 gitlab sshd[27136]: Invalid user testing from 218.61.5.68 port 32985 Oct 10 01:21:17 gitlab sshd[27136]: Failed password for invalid user testing from 218.61.5.68 port 32985 ssh2 ... |
2020-10-10 23:38:40 |
| 156.96.156.37 | attack | [2020-10-10 10:51:33] NOTICE[1182][C-000028b8] chan_sip.c: Call from '' (156.96.156.37:49172) to extension '46842002803' rejected because extension not found in context 'public'. [2020-10-10 10:51:33] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-10T10:51:33.315-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="46842002803",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.156.37/49172",ACLName="no_extension_match" [2020-10-10 10:53:21] NOTICE[1182][C-000028bc] chan_sip.c: Call from '' (156.96.156.37:56166) to extension '01146842002803' rejected because extension not found in context 'public'. [2020-10-10 10:53:21] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-10T10:53:21.510-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146842002803",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.156 ... |
2020-10-10 23:57:49 |
| 159.65.136.44 | attackbotsspam | Oct 10 16:26:55 host sshd[22069]: Invalid user hr from 159.65.136.44 port 37626 ... |
2020-10-10 23:29:40 |
| 2.57.122.209 | attack | Sep 10 16:11:05 *hidden* postfix/postscreen[11034]: DNSBL rank 4 for [2.57.122.209]:55941 |
2020-10-10 23:47:57 |
| 194.180.224.103 | attackbotsspam | Invalid user user from 194.180.224.103 port 39896 |
2020-10-10 23:55:15 |
| 193.169.253.169 | attackspambots | Sep 13 15:18:22 *hidden* postfix/postscreen[16414]: DNSBL rank 3 for [193.169.253.169]:42332 |
2020-10-10 23:56:18 |
| 128.14.236.201 | attackbotsspam | (sshd) Failed SSH login from 128.14.236.201 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 10 06:13:42 server2 sshd[5527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.236.201 user=operator Oct 10 06:13:44 server2 sshd[5527]: Failed password for operator from 128.14.236.201 port 46648 ssh2 Oct 10 06:36:31 server2 sshd[20215]: Invalid user proxy from 128.14.236.201 Oct 10 06:36:31 server2 sshd[20215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.236.201 Oct 10 06:36:33 server2 sshd[20215]: Failed password for invalid user proxy from 128.14.236.201 port 53662 ssh2 |
2020-10-11 00:03:45 |
| 222.220.87.7 | attack | Invalid user web6p1 from 222.220.87.7 port 54548 |
2020-10-10 23:36:40 |
| 39.106.124.148 | attack | 20 attempts against mh-ssh on flare |
2020-10-10 23:23:57 |
| 128.199.145.5 | attackbots | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-10-10 23:43:22 |
| 64.227.24.186 | attackbotsspam | Lines containing failures of 64.227.24.186 (max 1000) Oct 6 23:08:56 Tosca sshd[2078667]: User r.r from 64.227.24.186 not allowed because none of user's groups are listed in AllowGroups Oct 6 23:08:56 Tosca sshd[2078667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.24.186 user=r.r Oct 6 23:08:58 Tosca sshd[2078667]: Failed password for invalid user r.r from 64.227.24.186 port 40416 ssh2 Oct 6 23:08:59 Tosca sshd[2078667]: Received disconnect from 64.227.24.186 port 40416:11: Bye Bye [preauth] Oct 6 23:08:59 Tosca sshd[2078667]: Disconnected from invalid user r.r 64.227.24.186 port 40416 [preauth] Oct 6 23:24:37 Tosca sshd[2093797]: User r.r from 64.227.24.186 not allowed because none of user's groups are listed in AllowGroups Oct 6 23:24:37 Tosca sshd[2093797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.24.186 user=r.r Oct 6 23:24:40 Tosca sshd[2093797]: Faile........ ------------------------------ |
2020-10-11 00:00:00 |
| 212.70.149.5 | attackbots | Oct 10 17:35:47 cho postfix/smtpd[376265]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 10 17:36:08 cho postfix/smtpd[375994]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 10 17:36:29 cho postfix/smtpd[374502]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 10 17:36:50 cho postfix/smtpd[376265]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 10 17:37:11 cho postfix/smtpd[374502]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-10-10 23:41:20 |
| 195.158.26.238 | attack | Oct 11 01:54:26 web1 sshd[15950]: Invalid user list from 195.158.26.238 port 50906 Oct 11 01:54:26 web1 sshd[15950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.26.238 Oct 11 01:54:26 web1 sshd[15950]: Invalid user list from 195.158.26.238 port 50906 Oct 11 01:54:29 web1 sshd[15950]: Failed password for invalid user list from 195.158.26.238 port 50906 ssh2 Oct 11 01:59:55 web1 sshd[17744]: Invalid user jaxson from 195.158.26.238 port 40824 Oct 11 01:59:55 web1 sshd[17744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.26.238 Oct 11 01:59:55 web1 sshd[17744]: Invalid user jaxson from 195.158.26.238 port 40824 Oct 11 01:59:57 web1 sshd[17744]: Failed password for invalid user jaxson from 195.158.26.238 port 40824 ssh2 Oct 11 02:03:59 web1 sshd[19116]: Invalid user cvs1 from 195.158.26.238 port 44856 ... |
2020-10-11 00:00:30 |
| 85.84.75.207 | attack | Oct 8 17:02:46 *hidden* sshd[15594]: Invalid user admin from 85.84.75.207 port 37412 Oct 8 17:02:46 *hidden* sshd[15594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.84.75.207 Oct 8 17:02:48 *hidden* sshd[15594]: Failed password for invalid user admin from 85.84.75.207 port 37412 ssh2 |
2020-10-10 23:59:42 |