JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

64.89.161.82

Recent Activity

Abuse confidence score ?

100% Critical

2,723 reports

600 reporters · latest 1 hour ago

ISP	Blatant Technologies, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS403005
Domain Name	blatant.host
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 64.89.161.82

Export CSV

This IP address has been reported a total of 2,723 times from 600 distinct sources. 64.89.161.82 was first reported on February 8th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: Poland with 323 reports; Germany with 241 reports; United States of America with 186 reports. Over the same time period, 64.89.161.82 has changed country of origin 3 times. The most common categories in these recent reports were: Web App Attack 1190 times; Bad Web Bot 632 times; Brute-Force 288 times; Hacking 195 times; Port Scan 60 times; Other 160 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-10-25 12:16:31 (1 hour ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.tech \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"64.89.161.82","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a50127219f18d2e2-FRA","Accept":"text\/html, application\/xhtml+xml, application\/xml; q=0.9, image\/avif, image\/ show less	Bad Web Bot Web App Attack
🇩🇪 Phenix Info	2026-10-25 12:07:16 (1 hour ago)	SmallGuard Auto Ban - Attaque applicative web detectee - 5 blocages en 5 min.	Web App Attack
🇵🇱 Budyn	2026-10-25 09:27:06 (3 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.cloud \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"64.89.161.82","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5002ef7db0f65a4-FRA","Accept":"text\/html, application\/xhtml+xml, application\/xml; q=0.9, image\/avif, image\ show less	Bad Web Bot Web App Attack
🇺🇸 ambor	2026-10-25 08:20:11 (4 hours ago)	L0ss Honeypot: README file access attempt. Path: /README.md	Web App Attack
🇦🇺 Klaverstyn	2026-10-25 07:59:53 (5 hours ago)	Excessive HTTP request rate	Web App Attack
🇩🇪 macrob	2026-10-25 06:55:59 (6 hours ago)	2026/10/25 06:55:57 [error] 1708201#1708201: 7543617 access forbidden by rule, client: 64.89.161.82 ... show more 2026/10/25 06:55:57 [error] 1708201#1708201: 7543617 access forbidden by rule, client: 64.89.161.82, server: fastcredit.net.ua, request: "GET /.github/copilot-instructions.md HTTP/2.0", host: "fastcredit.net.ua" 2026/10/25 06:55:57 [error] 1708201#1708201: 7543617 access forbidden by rule, client: 64.89.161.82, server: fastcredit.net.ua, request: "GET /.env HTTP/2.0", host: "fastcredit.net.ua" 2026/10/25 06:55:58 [error] 1708201#1708201: 7543625 access forbidden by rule, client: 64.89.161.82, server: fastcredit.net.ua, request: "GET /.env HTTP/2.0", host: "fastcredit.net.ua" ... show less	Web App Attack
🇵🇱 Budyn	2026-10-25 06:16:59 (7 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.budyn.xyz \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"64.89.161.82","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4ff1877d8734dba-FRA","Accept":"text\/html, application\/xhtml+xml, application\/xml; q=0.9, image\/avif, image\/we show less	Bad Web Bot Web App Attack
🇧🇷 dominioz	2026-10-25 03:14:34 (10 hours ago)	2026-10-25 03:13:41 GET /.github/copilot-instructions.md - - 64.89.161.82 HTTP/1.1 Mozilla/5.0+(Wind ... show more 2026-10-25 03:13:41 GET /.github/copilot-instructions.md - - 64.89.161.82 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/156.0.0.0+Safari/537.36 - 404 245 2026-10-25 03:13:41 GET /.env - - 64.89.161.82 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/156.0.0.0+Safari/537.36 - 404 245 2026-10-25 03:13:41 GET /.env - - 64.89.161.82 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/156.0.0.0+Safari/537.36 - 404 245 2026-10-25 03:13:42 GET /config.json - - 64.89.161.82 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/156.0.0.0+Safari/537.36 - 404 226 2026-10-25 03:13:42 GET /api/config - - 64.89.161.82 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/156.0.0.0+Safari/537.36 - 404 226 ... show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-25 03:13:21 (10 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.dont-eat-the-pudding.xyz \| URI: /.github/copilot-instructions.md \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"64.89.161.82","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4fe0b7e0d1efb42-FRA","Accept":"text\/html, application\/xhtml+xml, appli show less	Bad Web Bot Web App Attack
🇰🇷 fanbinit	2026-10-25 02:43:31 (10 hours ago)	Repeated requests for sensitive configuration or repository paths.	Web App Attack
🇵🇱 Budyn	2026-10-25 00:18:21 (13 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.dont-eat-the-pudding.online \| URI: /.github/copilot-instructions.md \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"64.89.161.82","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4fd0b20cc01dba3-FRA","Accept":"text\/html, application\/xhtml+xml, ap show less	Bad Web Bot Web App Attack
Anonymous	2026-10-24 23:08:12 (14 hours ago)	64.89.161.82 - - [25/Oct/2026:07:08:07 +0800] "GET /js/env.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Wi ... show more 64.89.161.82 - - [25/Oct/2026:07:08:07 +0800] "GET /js/env.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36" 64.89.161.82 - - [25/Oct/2026:07:08:07 +0800] "GET /config.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36" 64.89.161.82 - - [25/Oct/2026:07:08:07 +0800] "GET /config.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36" 64.89.161.82 - - [25/Oct/2026:07:08:07 +0800] "GET /config.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36" 64.89.161.82 - - [25/Oct/2026:07:08:10 +0800] "GET /.github/catalog/view/javascript/jquery/datetimepicker/moment.min.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show less	Bad Web Bot Web App Attack
🇷🇴 iulianh	2026-10-24 22:52:25 (14 hours ago)	80,443	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-10-24 22:24:20 (14 hours ago)		Brute-Force Web App Attack
🇺🇸 printedwicked	2026-10-24 21:24:47 (15 hours ago)	PW Sentinel on printedwicked.com: blocked (honeypot); request shapes: honey,probe,feed:drop,feed:abu ... show more PW Sentinel on printedwicked.com: blocked (honeypot); request shapes: honey,probe,feed:drop,feed:abuseipdb,honey. Automated report. show less	Bad Web Bot Port Scan

Showing 1 to 15 of 2723 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.66

🇺🇸 66.132.172.193

🇳🇱 45.148.10.194

🇳🇱 45.148.10.123

🇳🇱 45.148.10.15

🇮🇳 2401:4900:b453:baa:1442:8464:e4a8:1199

🇨🇳 218.78.46.81

🇹🇷 176.237.129.62

🇵🇱 176.53.159.198

🇨🇳 123.190.227.77

🇻🇳 115.74.7.119

🇳🇱 45.148.10.152

🇩🇪 45.139.104.152

🇵🇱 45.138.12.88

🇵🇱 45.138.12.78

🇧🇷 201.77.124.248

🇺🇿 198.163.193.3

🇺🇸 172.190.51.254

🇷🇺 128.0.26.47

🇨🇳 103.255.200.90