64.89.161.144 - IPInfo

Basic Info

City: Luxembourg

Region: Canton de Luxembourg

Country: Luxembourg

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



# start

NetRange:       64.89.160.0 - 64.89.163.255
CIDR:           64.89.160.0/22
NetName:        NETIFACE-NA1
NetHandle:      NET-64-89-160-0-1
Parent:         NET64 (NET-64-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Netiface America, Inc. (NA-520)
RegDate:        2026-01-13
Updated:        2026-01-13
Ref:            https://rdap.arin.net/registry/ip/64.89.160.0


OrgName:        Netiface America, Inc.
OrgId:          NA-520
Address:        212 N. 2nd St. STE 100
City:           Richmond
StateProv:      KY
PostalCode:     40475
Country:        US
RegDate:        2024-12-29
Updated:        2026-04-29
Ref:            https://rdap.arin.net/registry/entity/NA-520


OrgAbuseHandle: ABUSE9563-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-332-240-5494 
OrgAbuseEmail:  abuse@nfx.rip
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE9563-ARIN

OrgTechHandle: ADMIN8922-ARIN
OrgTechName:   Administrator
OrgTechPhone:  +1-332-240-5494 
OrgTechEmail:  admin@nfx.rip
OrgTechRef:    https://rdap.arin.net/registry/entity/ADMIN8922-ARIN

# end


# start

NetRange:       64.89.160.0 - 64.89.161.255
CIDR:           64.89.160.0/23
NetName:        GHOSTY-NETWORKS-LU
NetHandle:      NET-64-89-160-0-2
Parent:         NETIFACE-NA1 (NET-64-89-160-0-1)
NetType:        Reassigned
OriginAS:       
Customer:       Ghosty Networks LLC (C11486629)
RegDate:        2026-01-25
Updated:        2026-02-07
Comment:        Abuse: abuse@ghostynetworks.com
Comment:        Geofeed https://api.geofeed.space/a7283d0a-24e8-4744-8d7b-b5087cf20755/geofeed.csv
Ref:            https://rdap.arin.net/registry/ip/64.89.160.0


CustName:       Ghosty Networks LLC
Address:        12D Impasse Drosbach
City:           Luxembourg
StateProv:      Luxembourg
PostalCode:     L-1882
Country:        LU
RegDate:        2026-01-25
Updated:        2026-02-07
Ref:            https://rdap.arin.net/registry/entity/C11486629

OrgAbuseHandle: ABUSE9563-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-332-240-5494 
OrgAbuseEmail:  abuse@nfx.rip
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE9563-ARIN

OrgTechHandle: ADMIN8922-ARIN
OrgTechName:   Administrator
OrgTechPhone:  +1-332-240-5494 
OrgTechEmail:  admin@nfx.rip
OrgTechRef:    https://rdap.arin.net/registry/entity/ADMIN8922-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.89.161.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25888
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;64.89.161.144.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026072100 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 21 23:00:50 CST 2026
;; MSG SIZE  rcvd: 106

Host info

Host 144.161.89.64.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 144.161.89.64.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.68.189.69	attackspam	Sep 19 13:23:47 abendstille sshd\[20068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.189.69 user=root Sep 19 13:23:49 abendstille sshd\[20068\]: Failed password for root from 51.68.189.69 port 32779 ssh2 Sep 19 13:27:24 abendstille sshd\[23273\]: Invalid user ftpadmin from 51.68.189.69 Sep 19 13:27:24 abendstille sshd\[23273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.189.69 Sep 19 13:27:25 abendstille sshd\[23273\]: Failed password for invalid user ftpadmin from 51.68.189.69 port 37986 ssh2 ...	2020-09-19 19:53:30
81.68.82.201	attackspam	Sep 19 11:25:20 email sshd\[13182\]: Invalid user tomcat from 81.68.82.201 Sep 19 11:25:20 email sshd\[13182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.82.201 Sep 19 11:25:23 email sshd\[13182\]: Failed password for invalid user tomcat from 81.68.82.201 port 35124 ssh2 Sep 19 11:29:56 email sshd\[14057\]: Invalid user ubuntu from 81.68.82.201 Sep 19 11:29:56 email sshd\[14057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.82.201 ...	2020-09-19 19:43:00
69.28.234.137	attackbotsspam	Sep 19 06:01:24 NPSTNNYC01T sshd[23591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.28.234.137 Sep 19 06:01:27 NPSTNNYC01T sshd[23591]: Failed password for invalid user teamspeak from 69.28.234.137 port 39768 ssh2 Sep 19 06:07:53 NPSTNNYC01T sshd[24030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.28.234.137 ...	2020-09-19 19:16:05
192.241.237.8	attackbots	" "	2020-09-19 19:24:50
14.192.248.5	attack	(imapd) Failed IMAP login from 14.192.248.5 (MY/Malaysia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 19 04:07:50 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=14.192.248.5, lip=5.63.12.44, session=<9Bbe/J6vcuQOwPgF>	2020-09-19 19:39:13
61.189.43.58	attackspambots	Sep 19 07:03:03 NPSTNNYC01T sshd[28276]: Failed password for root from 61.189.43.58 port 48416 ssh2 Sep 19 07:06:57 NPSTNNYC01T sshd[28605]: Failed password for root from 61.189.43.58 port 40626 ssh2 Sep 19 07:10:34 NPSTNNYC01T sshd[28881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.189.43.58 ...	2020-09-19 19:13:54
180.127.94.65	attackspambots	Sep 18 19:57:46 elektron postfix/smtpd\[24613\]: NOQUEUE: reject: RCPT from unknown\[180.127.94.65\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.127.94.65\]\; from=\ to=\ proto=ESMTP helo=\ Sep 18 19:58:21 elektron postfix/smtpd\[24613\]: NOQUEUE: reject: RCPT from unknown\[180.127.94.65\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.127.94.65\]\; from=\ to=\ proto=ESMTP helo=\ Sep 18 19:59:18 elektron postfix/smtpd\[24613\]: NOQUEUE: reject: RCPT from unknown\[180.127.94.65\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.127.94.65\]\; from=\ to=\ proto=ESMTP helo=\ Sep 18 20:00:01 elektron postfix/smtpd\[24732\]: NOQUEUE: reject: RCPT from unknown\[180.127.94.65\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.127.94.65\]\; from=\ to=\ proto=ESMTP helo	2020-09-19 19:38:21
52.175.248.102	attack	3389/tcp 3389/tcp [2020-09-18]2pkt	2020-09-19 19:23:07
27.78.229.53	attackbots	Automatic report - Port Scan Attack	2020-09-19 19:34:27
49.234.33.229	attackspambots	Sep 19 02:22:59 propaganda sshd[14422]: Connection from 49.234.33.229 port 60694 on 10.0.0.161 port 22 rdomain "" Sep 19 02:23:00 propaganda sshd[14422]: Connection closed by 49.234.33.229 port 60694 [preauth]	2020-09-19 19:20:42
110.38.29.122	attackbotsspam	Sep 18 18:57:26 vpn01 sshd[26993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.38.29.122 Sep 18 18:57:28 vpn01 sshd[26993]: Failed password for invalid user supervisor from 110.38.29.122 port 51764 ssh2 ...	2020-09-19 19:14:52
192.99.11.40	attack	Automatic report - XMLRPC Attack	2020-09-19 19:18:05
185.147.215.14	attackbotsspam	Registration from '.' failed for ':.' - Wrong password	2020-09-19 19:48:37
106.13.10.242	attack	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-19 19:26:53
61.219.11.153	attackspam	firewall-block, port(s): 4782/tcp	2020-09-19 19:22:02

Recently Reported IPs

65.49.1.146	192.129.160.185	34.79.39.251	2606:4700:10::6814:5415
2606:4700:10::6814:7346	1.146.124.49	85.11.167.203	195.96.139.244
124.23.134.253	2606:4700:10::6816:1333	104.244.77.108	85.204.70.104
183.251.170.109	112.7.136.71	103.116.121.122	110.249.202.225
58.217.179.224	110.78.138.96	152.32.172.234	20.83.32.182