City: Luxembourg
Region: Canton de Luxembourg
Country: Luxembourg
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 64.89.160.0 - 64.89.163.255
CIDR: 64.89.160.0/22
NetName: NETIFACE-NA1
NetHandle: NET-64-89-160-0-1
Parent: NET64 (NET-64-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Netiface America, Inc. (NA-520)
RegDate: 2026-01-13
Updated: 2026-01-13
Ref: https://rdap.arin.net/registry/ip/64.89.160.0
OrgName: Netiface America, Inc.
OrgId: NA-520
Address: 212 N. 2nd St. STE 100
City: Richmond
StateProv: KY
PostalCode: 40475
Country: US
RegDate: 2024-12-29
Updated: 2026-04-29
Ref: https://rdap.arin.net/registry/entity/NA-520
OrgAbuseHandle: ABUSE9563-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-332-240-5494
OrgAbuseEmail: abuse@nfx.rip
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9563-ARIN
OrgTechHandle: ADMIN8922-ARIN
OrgTechName: Administrator
OrgTechPhone: +1-332-240-5494
OrgTechEmail: admin@nfx.rip
OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN8922-ARIN
# end
# start
NetRange: 64.89.160.0 - 64.89.161.255
CIDR: 64.89.160.0/23
NetName: GHOSTY-NETWORKS-LU
NetHandle: NET-64-89-160-0-2
Parent: NETIFACE-NA1 (NET-64-89-160-0-1)
NetType: Reassigned
OriginAS:
Customer: Ghosty Networks LLC (C11486629)
RegDate: 2026-01-25
Updated: 2026-02-07
Comment: Abuse: abuse@ghostynetworks.com
Comment: Geofeed https://api.geofeed.space/a7283d0a-24e8-4744-8d7b-b5087cf20755/geofeed.csv
Ref: https://rdap.arin.net/registry/ip/64.89.160.0
CustName: Ghosty Networks LLC
Address: 12D Impasse Drosbach
City: Luxembourg
StateProv: Luxembourg
PostalCode: L-1882
Country: LU
RegDate: 2026-01-25
Updated: 2026-02-07
Ref: https://rdap.arin.net/registry/entity/C11486629
OrgAbuseHandle: ABUSE9563-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-332-240-5494
OrgAbuseEmail: abuse@nfx.rip
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9563-ARIN
OrgTechHandle: ADMIN8922-ARIN
OrgTechName: Administrator
OrgTechPhone: +1-332-240-5494
OrgTechEmail: admin@nfx.rip
OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN8922-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.89.160.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.89.160.249. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081001 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 11 11:00:17 CST 2026
;; MSG SIZE rcvd: 106Host 249.160.89.64.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 249.160.89.64.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.22.45.165 | attackbotsspam | 08/12/2019-14:33:36.008152 81.22.45.165 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 86 |
2019-08-13 02:54:44 |
| 107.170.238.236 | attackbotsspam | 44471/tcp 520/tcp 512/tcp... [2019-06-11/08-10]45pkt,36pt.(tcp),3pt.(udp) |
2019-08-13 03:08:56 |
| 123.125.71.91 | attack | Bad bot/spoofed identity |
2019-08-13 02:27:35 |
| 178.128.246.54 | attackbots | Aug 12 08:51:46 plusreed sshd[12139]: Invalid user www from 178.128.246.54 ... |
2019-08-13 02:28:16 |
| 94.21.225.164 | attack | $f2bV_matches |
2019-08-13 03:00:41 |
| 162.243.150.172 | attackbotsspam | 465/tcp 2096/tcp 61038/tcp... [2019-06-13/08-12]66pkt,52pt.(tcp),6pt.(udp) |
2019-08-13 02:45:12 |
| 148.243.26.116 | attackspambots | 2019-08-12T18:17:17.735217abusebot-4.cloudsearch.cf sshd\[26107\]: Invalid user mysql from 148.243.26.116 port 42059 |
2019-08-13 02:58:55 |
| 162.243.149.252 | attackbots | 20/tcp 25877/tcp 5351/udp... [2019-06-12/08-11]79pkt,63pt.(tcp),3pt.(udp) |
2019-08-13 02:44:28 |
| 198.199.105.199 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-08-13 02:30:54 |
| 50.195.7.180 | attackbots | Mail sent to address hacked/leaked from Last.fm |
2019-08-13 02:45:33 |
| 210.182.116.41 | attack | Aug 12 16:26:55 mail sshd\[3298\]: Invalid user callahan from 210.182.116.41 Aug 12 16:26:55 mail sshd\[3298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.182.116.41 Aug 12 16:26:57 mail sshd\[3298\]: Failed password for invalid user callahan from 210.182.116.41 port 44780 ssh2 ... |
2019-08-13 02:33:46 |
| 107.170.203.223 | attackbots | 53271/tcp 25330/tcp 18205/tcp... [2019-06-12/08-12]59pkt,47pt.(tcp),6pt.(udp) |
2019-08-13 02:47:18 |
| 83.165.211.178 | attackbots | Aug 12 20:08:26 * sshd[12850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.165.211.178 Aug 12 20:08:28 * sshd[12850]: Failed password for invalid user stack from 83.165.211.178 port 55826 ssh2 |
2019-08-13 03:03:31 |
| 138.59.218.118 | attack | 2019-08-12T17:47:34.282842abusebot-7.cloudsearch.cf sshd\[28447\]: Invalid user alexandru from 138.59.218.118 port 36303 |
2019-08-13 02:48:17 |
| 128.199.142.138 | attack | Aug 12 20:44:48 vps647732 sshd[32172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138 Aug 12 20:44:50 vps647732 sshd[32172]: Failed password for invalid user deploy from 128.199.142.138 port 59410 ssh2 ... |
2019-08-13 02:55:02 |