IP address

Search at other sites:

.13064.89.161.124

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus SBL

64.89.161.124 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-31 18:37:20.153000
Was present on blacklist at: 2026-02-03 18:37, 2026-02-10 18:37, 2026-02-17 18:37, 2026-02-24 18:37, 2026-03-03 18:37, 2026-03-10 18:37, 2026-03-17 18:37, 2026-03-24 18:37, 2026-03-31 18:37

Spamhaus DROP

64.89.161.124 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-31 18:37:20.153000
Was present on blacklist at: 2026-02-03 18:37, 2026-02-10 18:37, 2026-02-17 18:37, 2026-02-24 18:37, 2026-03-03 18:37, 2026-03-10 18:37, 2026-03-17 18:37, 2026-03-24 18:37, 2026-03-31 18:37

AbuseIPDB

64.89.161.124 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-04-03 04:00:00.588000
Was present on blacklist at: 2026-02-04 05:00, 2026-02-06 05:00, 2026-02-07 05:00, 2026-02-08 05:00, 2026-02-17 05:00, 2026-02-18 05:00, 2026-02-20 05:00, 2026-02-21 05:00, 2026-03-13 05:00, 2026-03-22 05:00, 2026-03-23 05:00, 2026-03-24 05:00, 2026-03-25 05:00, 2026-03-28 05:00, 2026-03-29 04:00, 2026-03-30 04:00, 2026-04-01 04:00, 2026-04-02 04:00, 2026-04-03 04:00

Spamhaus XBL CBL

64.89.161.124 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-31 18:37:20.153000
Was present on blacklist at: 2026-03-17 18:37, 2026-03-24 18:37

Threat categories

TL	Role	Category	Details
63	src	scan	port: 6622, 65022
25	src	—

---

Warden events (1850)

2026-03-30

ReconScanning (node.ce2b59): 16

2026-03-28

ReconScanning (node.4dc198): 25

ReconScanning (node.368407): 37

ReconScanning (node.ce2b59): 7

2026-03-27

ReconScanning (node.ce2b59): 15

ReconScanning (node.4dc198): 34

ReconScanning (node.368407): 51

2026-03-25

ReconScanning (node.368407): 39

ReconScanning (node.4dc198): 64

2026-03-24

ReconScanning (node.368407): 46

ReconScanning (node.4dc198): 69

2026-03-23

ReconScanning (node.4dc198): 63

ReconScanning (node.368407): 91

2026-03-21

ReconScanning (node.368407): 93

ReconScanning (node.4dc198): 108

2026-03-14

ReconScanning (node.368407): 4

2026-03-12

ReconScanning (node.368407): 4

ReconScanning (node.4dc198): 2

2026-02-26

ReconScanning (node.4dc198): 2

2026-02-25

ReconScanning (node.368407): 6

2026-02-22

ReconScanning (node.368407): 2

2026-02-21

ReconScanning (node.4dc198): 19

ReconScanning (node.368407): 28

2026-02-20

ReconScanning (node.368407): 127

ReconScanning (node.4dc198): 164

2026-02-19

ReconScanning (node.4dc198): 35

ReconScanning (node.368407): 25

2026-02-18

ReconScanning (node.368407): 1

ReconScanning (node.4dc198): 1

2026-02-17

ReconScanning (node.4dc198): 133

ReconScanning (node.368407): 94

2026-02-06

ReconScanning (node.368407): 59

ReconScanning (node.4dc198): 79

2026-02-05

ReconScanning (node.368407): 33

ReconScanning (node.4dc198): 54

2026-02-04

ReconScanning (node.368407): 44

ReconScanning (node.4dc198): 70

2026-02-03

ReconScanning (node.4dc198): 65

ReconScanning (node.368407): 41

DShield reports (IP summary, reports)

2026-02-24

Number of reports: 37

Distinct targets: 29

2026-02-25

Number of reports: 37

Distinct targets: 29

2026-02-26

Number of reports: 100

Distinct targets: 74

2026-02-27

Number of reports: 32

Distinct targets: 19

2026-03-11

Number of reports: 100

Distinct targets: 75

2026-03-12

Number of reports: 135

Distinct targets: 78

2026-03-13

Number of reports: 135

Distinct targets: 78

2026-03-14

Number of reports: 105

Distinct targets: 77

2026-03-21

Number of reports: 290

Distinct targets: 216

2026-03-22

Number of reports: 275

Distinct targets: 210

2026-03-23

Number of reports: 297

Distinct targets: 219

2026-03-24

Number of reports: 297

Distinct targets: 219

2026-03-25

Number of reports: 150

Distinct targets: 102

2026-03-26

Number of reports: 150

Distinct targets: 102

2026-03-27

Number of reports: 160

Distinct targets: 125

2026-03-28

Number of reports: 130

Distinct targets: 89

2026-03-29

Number of reports: 130

Distinct targets: 89

2026-03-30

Number of reports: 284

Distinct targets: 211

2026-03-31

Number of reports: 284

Distinct targets: 211

Origin AS

AS205759 - GHOSTYNETWORKS

BGP Prefix

64.89.161.0/24

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

64.89.160.0 - 64.89.163.255

last_activity

2026-03-30 13:46:39

last_warden_event

2026-03-30 13:46:39

rep

0.12976139613560267

reserved_range

0

ts_added

2026-02-03 18:37:11.740000

ts_last_update

2026-04-06 18:37:20.065000

Warden event timeline

DShield event timeline

Presence on blacklists