64.89.161.135

Classification: Malicious

64.89.161.135 is a malicious IP address. Reported by 4 threat sources, last seen 2026-09-07. Network: AS205759 Ghosty Networks LLC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Blocklist.de 2026-08-20 12:02:32 2026-09-07 12:02:37 attacker malicious-activity
IMAP Attacker Blocklist.de 2026-08-20 11:02:12 2026-09-07 11:02:15 attacker malicious-activity
Bruteforce Blocklist.net.ua 2026-09-05 16:23:47 2026-09-05 16:23:47 attacker malicious-activity
VPN IPWhois.io 2026-08-20 11:02:12 2026-08-20 11:02:12 anonymization vpn
Bruteforce AbuseIPDB 2026-08-09 17:55:31 2026-08-20 09:25:51 attacker malicious-activity
Mail Spammer AbuseIPDB 2026-08-08 17:12:40 2026-08-20 05:44:23 attacker malicious-activity
HTTP Attacker AbuseIPDB 2026-08-11 00:01:27 2026-08-19 03:33:12 attacker malicious-activity
FTP Attacker AbuseIPDB 2026-08-19 02:44:16 2026-08-19 02:44:16 attacker malicious-activity
Port Scanner AbuseIPDB 2026-08-08 12:33:32 2026-08-18 09:33:31 anomalous-activity attacker malicious-activity reconnaissance
Hacking AbuseIPDB 2026-08-08 18:12:34 2026-08-17 11:37:19 attacker malicious-activity
Phishing AbuseIPDB 2026-08-17 10:00:08 2026-08-17 10:00:08 malicious-activity phishing
SSH Attacker AbuseIPDB 2026-08-10 02:51:02 2026-08-17 08:48:54 attacker malicious-activity
Malicious Host AbuseIPDB 2026-08-10 17:49:57 2026-08-10 18:16:22 attacker compromised malicious-activity
IMAP Attacker AbuseIPDB 2026-08-08 19:27:23 2026-08-08 19:27:23 attacker malicious-activity

Tags

attacker imap pop3 sasl bot mail spam abuse

Whois information

AS name
AS205759 Ghosty Networks LLC
Registrant
Ghosty Networks LLC
City
Luxembourg
Postal code
1341
Country
LU — Luxembourg 🇱🇺
First indexed
2026-08-20 11:02:12
Last updated
2026-09-07 12:02:37