JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.89.160.111

64.89.160.111

Recent Activity

9,890 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Ghosty Networks LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS205759

Domain Name

ghostynetworks.com

Country

🇱🇺 Luxembourg

City

Luxembourg, Luxembourg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 64.89.160.111:

This IP address has been reported a total of 9,890 times from 249 distinct sources. 64.89.160.111 was first reported on February 4th 2026, and the most recent report was 15 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 663 reports; Germany with 512 reports; Brazil with 279 reports. The most common categories in these recent reports were: Port Scan 1906 times; Hacking 724 times; Web App Attack 361 times; Brute-Force 151 times; Bad Web Bot 138 times; Other 217 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 sonot	2026-09-03 13:25:08 (15 minutes ago)	Blocked by UFW on mail [8118/tcp] \| SPT: 55416 \| TTL: 246 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [8118/tcp] \| SPT: 55416 \| TTL: 246 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 pingusurmars	2026-09-03 13:22:06 (18 minutes ago)	Blocked by UFW on amperetwo [7890/tcp] Source port: 55416 TTL: 246 Packet length: 44 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [7890/tcp] Source port: 55416 TTL: 246 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-03 12:30:30 (1 hour ago)	Heralding honeypot: socks5 on port 1080	Brute-Force Hacking
🇺🇸 sandra361	2026-09-03 12:18:48 (1 hour ago)	Port scan detected: 32 attempts across 1 port (1080). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=64.89 ... show more Port scan detected: 32 attempts across 1 port (1080). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=64.89.160.111 LEN=49 TOS=0x00 PREC=0x00 TTL=48 ID=34 DF PROTO=TCP SPT=46422 DPT=1080 WINDOW=1436 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇬🇧 sonot	2026-09-03 11:53:45 (1 hour ago)	Blocked by UFW on tunneluk01 [999/tcp] \| SPT: 55416 \| TTL: 242 \| LEN: 44 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [999/tcp] \| SPT: 55416 \| TTL: 242 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 RAP	2026-09-03 11:05:16 (2 hours ago)	2026-09-03 11:05:16 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇩🇪 anycast_ac	2026-09-03 11:01:44 (2 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Tried credentials: b'user':b'user' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'user' : 'user' show less	DDoS Attack
🇧🇷 diego	2026-09-03 10:49:10 (2 hours ago)	[rede-44-49] 09/03/2026-07:49:10.502774, 64.89.160.111, Protocol: 6, ET DROP Spamhaus DROP Listed Tr ... show more [rede-44-49] 09/03/2026-07:49:10.502774, 64.89.160.111, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 10 show less	Hacking
🇩🇪 anycast_ac	2026-09-03 10:44:05 (2 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Tried credentials: b'test':b'test' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'test' : 'test' show less	DDoS Attack
🇩🇪 dispaisyenterprises	2026-09-03 09:58:00 (3 hours ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (9 bytes of payload); 5678 [6] TCP Reported by DisP ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (9 bytes of payload); 5678 [6] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 Admins@FBN	2026-09-03 07:53:58 (5 hours ago)	FW-PortScan: Traffic Blocked srcport=55416 dstport=7890	Port Scan
🇧🇷 diego	2026-09-03 07:47:55 (5 hours ago)	[rede-44-49] 09/03/2026-04:47:54.368735, 64.89.160.111, Protocol: 6, ET DROP Spamhaus DROP Listed Tr ... show more [rede-44-49] 09/03/2026-04:47:54.368735, 64.89.160.111, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 10 show less	Hacking
🇺🇸 donarev419	2026-09-03 07:39:39 (6 hours ago)	Connection to port 5678 with data transfer. Data preview: ;�A��	Port Scan Hacking
🇩🇪 banankicks	2026-09-03 07:38:40 (6 hours ago)	Unauthorized connection attempt detected from IP address 64.89.160.111 to port 8080 (banankicks-serv ... show more Unauthorized connection attempt detected from IP address 64.89.160.111 to port 8080 (banankicks-server) [N] show less	Brute-Force Exploited Host
🇺🇸 RAP	2026-09-03 07:20:01 (6 hours ago)	2026-09-03 07:20:01 UTC Unauthorized activity to TCP port 8089. Web App	Port Scan Web App Attack

Showing 1 to 15 of 9890 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 62.60.130.253

🇺🇸 195.184.76.165

🇺🇸 165.154.134.166

🇨🇳 118.145.239.129

🇫🇷 91.231.89.11

🇬🇧 2a06:4880:8000::b2

🇺🇸 2604:a880:400:d1:0:4:e8d5:f001

🇳🇱 195.178.110.228

🇨🇳 115.191.61.164

🇹🇼 106.105.48.59

🇧🇩 103.26.136.173

🇭🇰 69.33.211.35

🇳🇱 45.148.10.152

🇺🇸 137.184.45.104

🇺🇿 45.153.61.185

🇨🇳 39.101.92.60

🇺🇸 18.217.136.15

🇷🇴 2.57.122.238

🇲🇽 187.141.210.92

🇷🇺 94.28.187.158