City: New York City
Region: New York
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 64.8.192.0 - 64.8.255.255
CIDR: 64.8.192.0/18
NetName: MEGAPATH-BLK-13
NetHandle: NET-64-8-192-0-1
Parent: NET64 (NET-64-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: GTT Americas, LLC (GAL-104)
RegDate: 2001-02-06
Updated: 2025-05-07
Ref: https://rdap.arin.net/registry/ip/64.8.192.0
OrgName: GTT Americas, LLC
OrgId: GAL-104
Address: 4201 Wilson Blvd -Suite 504
City: Arlington
StateProv: VA
PostalCode: 22203
Country: US
RegDate: 2025-02-11
Updated: 2026-07-17
Ref: https://rdap.arin.net/registry/entity/GAL-104
OrgTechHandle: GLD5-ARIN
OrgTechName: GTT Legal Departement
OrgTechPhone: +359886606
OrgTechEmail: alexander.mutafchiyski@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/GLD5-ARIN
OrgNOCHandle: GNOC16-ARIN
OrgNOCName: GTT Network Operations Center
OrgNOCPhone: +1-703-442-5500
OrgNOCEmail: noc@gtt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/GNOC16-ARIN
OrgTechHandle: AS3251-ARIN
OrgTechName: AS3257 Netguard
OrgTechPhone: +49 69 48007422
OrgTechEmail: netguard@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/AS3251-ARIN
OrgAbuseHandle: GAD46-ARIN
OrgAbuseName: GTT Abuse Department
OrgAbusePhone: +1-703-442-5501
OrgAbuseEmail: abuse@gtt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GAD46-ARIN
OrgTechHandle: GIT5-ARIN
OrgTechName: GTT IPAM Team
OrgTechPhone: +1-703-442-5500
OrgTechEmail: netguard@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/GIT5-ARIN
# end
# start
NetRange: 64.8.248.0 - 64.8.248.255
CIDR: 64.8.248.0/24
NetName: GTT-ARISK-NET
NetHandle: NET-64-8-248-0-1
Parent: MEGAPATH-BLK-13 (NET-64-8-192-0-1)
NetType: Reallocated
OriginAS:
Organization: Arisk Communications inc. (AC-5396)
RegDate: 2025-10-21
Updated: 2025-10-21
Ref: https://rdap.arin.net/registry/ip/64.8.248.0
OrgName: Arisk Communications inc.
OrgId: AC-5396
Address: 350 NORTHERN BLVD STE 324 -1331 ALBANY NY 12204-1000
City: ALBANY
StateProv: NY
PostalCode: 12204
Country: US
RegDate: 2024-06-28
Updated: 2024-07-03
Ref: https://rdap.arin.net/registry/entity/AC-5396
ReferralServer: rwhois://rwhois.ariskisp.com:4321
OrgTechHandle: WILSO1903-ARIN
OrgTechName: Wilson
OrgTechPhone: +1-518-512-9230
OrgTechEmail: support@ariskisp.com
OrgTechRef: https://rdap.arin.net/registry/entity/WILSO1903-ARIN
OrgAbuseHandle: WILSO1903-ARIN
OrgAbuseName: Wilson
OrgAbusePhone: +1-518-512-9230
OrgAbuseEmail: support@ariskisp.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/WILSO1903-ARIN
# end
# start
NetRange: 64.8.248.0 - 64.8.248.255
CIDR: 64.8.248.0/24
NetName: GTT
NetHandle: NET-64-8-248-0-2
Parent: GTT-ARISK-NET (NET-64-8-248-0-1)
NetType: Reassigned
OriginAS:
Customer: GTT-CUSTOMER (C11472624)
RegDate: 2026-01-11
Updated: 2026-01-11
Comment: Geofeed https://ariskisp.com/rfc8805.csv
Ref: https://rdap.arin.net/registry/ip/64.8.248.0
CustName: GTT-CUSTOMER
Address: 350 NORTHERN BLVD STE
City: ALBANY
StateProv: NY
PostalCode: 12204
Country: US
RegDate: 2026-01-11
Updated: 2026-09-05
Ref: https://rdap.arin.net/registry/entity/C11472624
OrgTechHandle: WILSO1903-ARIN
OrgTechName: Wilson
OrgTechPhone: +1-518-512-9230
OrgTechEmail: support@ariskisp.com
OrgTechRef: https://rdap.arin.net/registry/entity/WILSO1903-ARIN
OrgAbuseHandle: WILSO1903-ARIN
OrgAbuseName: Wilson
OrgAbusePhone: +1-518-512-9230
OrgAbuseEmail: support@ariskisp.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/WILSO1903-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.ariskisp.com:4321.
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.8.248.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10636
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.8.248.249. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026111100 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 11 21:09:13 CST 2026
;; MSG SIZE rcvd: 105
249.248.8.64.in-addr.arpa domain name pointer 64-8-248-249.client.dsl.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
249.248.8.64.in-addr.arpa name = 64-8-248-249.client.dsl.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 206.189.142.10 | attack | Feb 4 21:05:21 server sshd\[26273\]: Invalid user tom from 206.189.142.10 Feb 4 21:05:21 server sshd\[26273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.142.10 Feb 4 21:05:24 server sshd\[26273\]: Failed password for invalid user tom from 206.189.142.10 port 40142 ssh2 Feb 4 22:49:22 server sshd\[9152\]: Invalid user mishka from 206.189.142.10 Feb 4 22:49:22 server sshd\[9152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.142.10 ... |
2020-02-05 03:54:36 |
| 24.2.205.235 | attackspambots | Unauthorized connection attempt detected from IP address 24.2.205.235 to port 2220 [J] |
2020-02-05 03:43:28 |
| 134.209.121.118 | attackspambots | 2019-03-15 13:12:30 1h4lhO-00010K-Id SMTP connection from bent.coldcaseforums.com \(becauseof.mebgazete.icu\) \[134.209.121.118\]:36382 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-15 13:12:55 1h4lhn-00010n-Kl SMTP connection from bent.coldcaseforums.com \(scam.mebgazete.icu\) \[134.209.121.118\]:48635 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-15 13:13:21 1h4liD-00011A-3Y SMTP connection from bent.coldcaseforums.com \(underwear.mebgazete.icu\) \[134.209.121.118\]:40746 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-17 12:41:27 1h5UAR-0005yq-AE SMTP connection from bent.coldcaseforums.com \(shiver.mebgazete.icu\) \[134.209.121.118\]:38053 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-17 12:41:27 1h5UAR-0005yr-AR SMTP connection from bent.coldcaseforums.com \(metricton.mebgazete.icu\) \[134.209.121.118\]:46314 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-17 12:43:09 1h5UC5-000611-Nl SMTP connection from bent.coldcaseforums.com \(fang.mebgazete ... |
2020-02-05 03:58:00 |
| 132.157.66.192 | attackspam | 2019-03-11 17:23:17 H=\(\[132.157.66.192\]\) \[132.157.66.192\]:6022 I=\[193.107.88.166\]:25 F=\ |
2020-02-05 04:15:25 |
| 123.118.9.145 | attackspambots | 123.118.9.145 has been banned for [Login Abuse] ... |
2020-02-05 04:06:50 |
| 94.191.89.180 | attackbotsspam | Unauthorized connection attempt detected from IP address 94.191.89.180 to port 2220 [J] |
2020-02-05 04:23:51 |
| 218.92.0.189 | attackspam | Feb 4 21:04:25 legacy sshd[10228]: Failed password for root from 218.92.0.189 port 46614 ssh2 Feb 4 21:05:21 legacy sshd[10283]: Failed password for root from 218.92.0.189 port 63144 ssh2 ... |
2020-02-05 04:14:54 |
| 82.207.207.105 | attackspambots | Feb 4 14:47:55 grey postfix/smtpd\[12048\]: NOQUEUE: reject: RCPT from muedsl-82-207-207-105.citykom.de\[82.207.207.105\]: 554 5.7.1 Service unavailable\; Client host \[82.207.207.105\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?82.207.207.105\; from=\ |
2020-02-05 04:08:40 |
| 27.76.159.206 | attack | Feb 4 14:47:59 grey postfix/smtpd\[26473\]: NOQUEUE: reject: RCPT from unknown\[27.76.159.206\]: 554 5.7.1 Service unavailable\; Client host \[27.76.159.206\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=27.76.159.206\; from=\ |
2020-02-05 04:02:29 |
| 23.247.33.61 | attackbots | Unauthorized connection attempt detected from IP address 23.247.33.61 to port 2220 [J] |
2020-02-05 03:43:49 |
| 93.174.95.41 | attackspambots | Feb 4 20:38:42 debian-2gb-nbg1-2 kernel: \[3104371.001965\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.95.41 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=65392 PROTO=TCP SPT=49957 DPT=8128 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-05 03:52:52 |
| 89.109.23.190 | attack | Unauthorized connection attempt detected from IP address 89.109.23.190 to port 2220 [J] |
2020-02-05 04:02:06 |
| 176.31.170.245 | attackspambots | fraudulent SSH attempt |
2020-02-05 03:55:09 |
| 222.186.42.7 | attackspam | 04.02.2020 19:57:08 SSH access blocked by firewall |
2020-02-05 04:00:15 |
| 66.249.66.155 | attack | Malicious brute force vulnerability hacking attacks |
2020-02-05 03:57:16 |