JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.89.163.130

64.89.163.130 was found in our database!

This IP was reported 2,923 times. Confidence of Abuse is 100%: ?

100%

ISP	Meowcore Softworks LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401626
Domain Name	geofeed.space
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.89.163.130

Whois 64.89.163.130

IP Abuse Reports for 64.89.163.130:

This IP address has been reported a total of 2,923 times from 169 distinct sources. 64.89.163.130 was first reported on January 21st 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ValtonTahiri	2026-07-05 15:06:47 (6 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=64.89.163.130; proto=TCP; source_port=43827; target_port=27017; flags=SYN show less	Port Scan
🇧🇷 diego	2026-07-05 14:18:56 (6 hours ago)	[rede-44-49] 07/05/2026-11:18:56.392724, 64.89.163.130, Protocol: 6, ET DROP Spamhaus DROP Listed Tr ... show more [rede-44-49] 07/05/2026-11:18:56.392724, 64.89.163.130, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 9 show less	Hacking
🇺🇸 MPL	2026-07-05 13:00:59 (8 hours ago)	tcp/27017 (92 or more attempts)	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-07-05 10:43:01 (10 hours ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Database/Cache Attack)	Brute-Force Port Scan Hacking
🇺🇸 shaunc	2026-07-05 10:41:20 (10 hours ago)	Jul 3 23:35:20 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC= ... show more Jul 3 23:35:20 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=64.89.163.130 DST=[redacted] LEN=44 TOS=0x08 PREC=0x20 TTL=241 ID=63813 PROTO=TCP SPT=59409 DPT=27017 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 4 10:50:49 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=64.89.163.130 DST=[redacted] LEN=44 TOS=0x08 PREC=0x20 TTL=241 ID=36041 PROTO=TCP SPT=59968 DPT=27017 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 5 05:41:17 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=64.89.163.130 DST=[redacted] LEN=44 TOS=0x08 PREC=0x20 TTL=241 ID=29535 PROTO=TCP SPT=48058 DPT=27017 WINDOW=1025 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇷 diego	2026-07-05 10:22:39 (10 hours ago)	[rede-arem1] 07/05/2026-07:22:39.428336, 64.89.163.130, Protocol: 6, ET DROP Spamhaus DROP Listed Tr ... show more [rede-arem1] 07/05/2026-07:22:39.428336, 64.89.163.130, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 9 show less	Hacking
🇵🇱 sefinek.net	2026-07-05 09:44:40 (11 hours ago)	Blocked by UFW on PL02 [27017/tcp] \| SPT: 44394 \| TTL: 243 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on PL02 [27017/tcp] \| SPT: 44394 \| TTL: 243 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking
🇫🇷 Soncraft	2026-07-05 09:44:35 (11 hours ago)	Blocked by UFW on Jellyfin [27017/tcp] Source port: 44378 TTL: 251 Packet length: 44 TOS: 0x08 This ... show more Blocked by UFW on Jellyfin [27017/tcp] Source port: 44378 TTL: 251 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 SeczarSecureOps	2026-07-05 09:38:37 (11 hours ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — MongoDB (5 events ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — MongoDB (5 events in 10min) at 2026-07-05 09:38 show less	Web App Attack
🇬🇧 Nov	2026-07-05 08:55:29 (12 hours ago)	Unauthorized access attempt (tcp/27017)	Port Scan
🇳🇱 StopAbuse	2026-07-05 08:53:14 (12 hours ago)	tcp/27017	Port Scan
🇺🇸 xmission.com	2026-07-05 07:58:07 (13 hours ago)	Blocked by UFW (TCP on 27017) Source port: 58013 TTL: 242 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 27017) Source port: 58013 TTL: 242 Packet length: 44 TOS: 0x08 This report (for 64.89.163.130) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 evvsk	2026-07-05 06:23:14 (14 hours ago)	27017/tcp	Port Scan
🇺🇸 drewf.ink	2026-07-05 05:47:06 (15 hours ago)	[05:47] Port scanning. Port(s) scanned: TCP/27017	Port Scan
🇺🇸 Axel	2026-07-05 04:35:23 (16 hours ago)	Blocked by UFW on LAXHH [27017/tcp] \| SPT: 46092 \| TTL: 238 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [27017/tcp] \| SPT: 46092 \| TTL: 238 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 2923 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.204

🇰🇷 110.14.192.20

🇳🇱 45.198.224.140

🇺🇸 172.234.218.87

🇨🇳 111.225.149.17

🇳🇱 91.92.40.231

🇳🇱 81.171.72.93

🇺🇸 69.229.227.44

🇺🇸 8.235.49.42

🇲🇽 189.223.169.139

🇬🇧 185.247.137.155

🇵🇱 166.88.69.106

🇩🇪 142.248.0.228

🇫🇷 85.90.216.84

🇺🇸 66.132.186.181

🇨🇳 60.247.209.100

🇺🇸 20.190.190.130

🇨🇳 14.103.107.221

🇬🇧 194.74.196.10

🇺🇸 172.200.228.35