IP address
Shodan(more info)

Passive DNS

Tags:
- IP blacklists
- AbuseIPDB64.89.161.108 is listed on the AbuseIPDB blacklist.Spamhaus SBL
Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)
Last checked at: 2026-02-13 05:00:00.589000
Was present on blacklist at: 2026-02-02 05:00, 2026-02-06 05:00, 2026-02-12 05:00, 2026-02-13 05:0064.89.161.108 is listed on the Spamhaus SBL blacklist.Spamhaus DROP
Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-02-16 05:00:11.646000
Was present on blacklist at: 2026-02-02 05:00, 2026-02-09 05:00, 2026-02-16 05:0064.89.161.108 is listed on the Spamhaus DROP blacklist.blocklist.de IMAP
Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-02-16 05:00:11.646000
Was present on blacklist at: 2026-02-02 05:00, 2026-02-09 05:00, 2026-02-16 05:0064.89.161.108 is listed on the blocklist.de IMAP blacklist.blocklist.de mail
Description: Blocklist.de feed is a free and voluntary service<br>provided by a Fraud/Abuse-specialist. IPs performing attacks<br>on the Service imap, sasl, pop3.
Type of feed: primary (feed detail page)
Last checked at: 2026-02-17 23:05:05.218000
Was present on blacklist at: 2026-02-02 05:05, 2026-02-02 11:05, 2026-02-02 17:05, 2026-02-02 23:05, 2026-02-03 05:05, 2026-02-03 11:05, 2026-02-03 17:05, 2026-02-03 23:05, 2026-02-04 05:05, 2026-02-04 11:05, 2026-02-04 17:05, 2026-02-04 23:05, 2026-02-05 05:05, 2026-02-05 11:05, 2026-02-05 17:05, 2026-02-05 23:05, 2026-02-06 05:05, 2026-02-06 11:05, 2026-02-06 17:05, 2026-02-06 23:05, 2026-02-07 05:05, 2026-02-07 11:05, 2026-02-07 17:05, 2026-02-07 23:05, 2026-02-08 05:05, 2026-02-08 11:05, 2026-02-08 17:05, 2026-02-08 23:05, 2026-02-09 05:05, 2026-02-09 11:05, 2026-02-09 17:05, 2026-02-09 23:05, 2026-02-10 05:05, 2026-02-10 11:05, 2026-02-10 17:05, 2026-02-10 23:05, 2026-02-11 05:05, 2026-02-11 11:05, 2026-02-11 17:05, 2026-02-11 23:05, 2026-02-12 11:05, 2026-02-12 17:05, 2026-02-12 23:05, 2026-02-13 05:05, 2026-02-13 11:05, 2026-02-13 17:05, 2026-02-13 23:05, 2026-02-14 05:05, 2026-02-14 11:05, 2026-02-14 17:05, 2026-02-14 23:05, 2026-02-15 05:05, 2026-02-15 11:05, 2026-02-15 17:05, 2026-02-15 23:05, 2026-02-16 05:05, 2026-02-16 11:05, 2026-02-16 17:05, 2026-02-16 23:05, 2026-02-17 05:05, 2026-02-17 11:05, 2026-02-17 17:05, 2026-02-17 23:0564.89.161.108 is listed on the blocklist.de mail blacklist.blocklist.de SIP
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing Mail attacks.
Type of feed: primary (feed detail page)
Last checked at: 2026-02-17 23:05:05.173000
Was present on blacklist at: 2026-02-02 05:05, 2026-02-02 11:05, 2026-02-02 17:05, 2026-02-02 23:05, 2026-02-03 05:05, 2026-02-03 11:05, 2026-02-03 17:05, 2026-02-03 23:05, 2026-02-04 05:05, 2026-02-04 11:05, 2026-02-04 17:05, 2026-02-04 23:05, 2026-02-05 05:05, 2026-02-05 11:05, 2026-02-05 17:05, 2026-02-05 23:05, 2026-02-06 05:05, 2026-02-06 11:05, 2026-02-06 17:05, 2026-02-06 23:05, 2026-02-07 05:05, 2026-02-07 11:05, 2026-02-07 17:05, 2026-02-07 23:05, 2026-02-08 05:05, 2026-02-08 11:05, 2026-02-08 17:05, 2026-02-08 23:05, 2026-02-09 05:05, 2026-02-09 11:05, 2026-02-09 17:05, 2026-02-09 23:05, 2026-02-10 05:05, 2026-02-10 11:05, 2026-02-10 17:05, 2026-02-10 23:05, 2026-02-11 05:05, 2026-02-11 11:05, 2026-02-11 17:05, 2026-02-11 23:05, 2026-02-12 11:05, 2026-02-12 17:05, 2026-02-12 23:05, 2026-02-13 05:05, 2026-02-13 11:05, 2026-02-13 17:05, 2026-02-13 23:05, 2026-02-14 05:05, 2026-02-14 11:05, 2026-02-14 17:05, 2026-02-14 23:05, 2026-02-15 05:05, 2026-02-15 11:05, 2026-02-15 17:05, 2026-02-15 23:05, 2026-02-16 05:05, 2026-02-16 11:05, 2026-02-16 17:05, 2026-02-16 23:05, 2026-02-17 05:05, 2026-02-17 11:05, 2026-02-17 17:05, 2026-02-17 23:0564.89.161.108 is listed on the blocklist.de SIP blacklist.Blocklist.net.ua
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IP addresses that tried to login in a SIP,<br>VOIP or Asterisk Server.
Type of feed: primary (feed detail page)
Last checked at: 2026-02-12 05:05:00.063000
Was present on blacklist at: 2026-02-12 05:0564.89.161.108 is listed on the Blocklist.net.ua blacklist.
Description: BlockList contains IP addresses that perform attacks,<br>send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)
Last checked at: 2026-02-14 23:15:01.346000
Was present on blacklist at: 2026-02-14 03:15, 2026-02-14 07:15, 2026-02-14 11:15, 2026-02-14 15:15, 2026-02-14 19:15, 2026-02-14 23:15
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| No threat category tags assigned | |||
- Origin AS
- AS205759 - GHOSTYNETWORKS
- BGP Prefix
- 64.89.161.0/24
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 64.89.160.0 - 64.89.163.255
- reserved_range
- 0
- ts_added
- 2026-02-02 05:00:03.627000
- ts_last_update
- 2026-02-17 23:08:56.071000
Warden event timeline
DShield event timeline
Presence on blacklists

