JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.89.160.19

64.89.160.19 was found in our database!

This IP was reported 189 times. Confidence of Abuse is 100%: ?

100%

ISP	Ghosty Networks LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205759
Domain Name	ghostynetworks.com
Country	🇱🇺 Luxembourg
City	Luxembourg, Luxembourg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.89.160.19

Whois 64.89.160.19

IP Abuse Reports for 64.89.160.19:

This IP address has been reported a total of 189 times from 118 distinct sources. 64.89.160.19 was first reported on May 25th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SLSLLC	2026-05-28 00:32:21 (1 week ago)	64.89.160.19 - - [28/May/2026:00:31:55 +0000] "GET /.env.local HTTP/2.0" 403 1927 "-" "Mozilla/5.0 ( ... show more 64.89.160.19 - - [28/May/2026:00:31:55 +0000] "GET /.env.local HTTP/2.0" 403 1927 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-05-28 00:07:31 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 FeG Deutschland	2026-05-27 23:52:35 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
Anonymous	2026-05-27 22:42:55 (1 week ago)	(caddyscan) Scanner path probe from 64.89.160.19 (LU/Luxembourg/-): 5 in the last 3600 secs; Ports: ... show more (caddyscan) Scanner path probe from 64.89.160.19 (LU/Luxembourg/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 64.89.160.19 - - [27/May/2026:22:42:52 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 64.89.160.19 - - [27/May/2026:22:42:52 +0000] "GET /.env.example HTTP/1.1" [REDACTED] 200 2627 64.89.160.19 - - [27/May/2026:22:42:52 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 64.89.160.19 - - [27/May/2026:22:42:52 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 64.89.160.19 - - [27/May/2026:22:42:54 +0000] "GET /.env.example HTTP/1.1" show less	Port Scan
🇫🇷 Lino Project	2026-05-27 22:08:58 (1 week ago)	64.89.160.19 - - [28/May/2026:00:08:55 +0200] "GET /.env.local HTTP/1.1" 404 4156 "-" "Mozilla/5.0 ( ... show more 64.89.160.19 - - [28/May/2026:00:08:55 +0200] "GET /.env.local HTTP/1.1" 404 4156 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" 64.89.160.19 - - [28/May/2026:00:08:55 +0200] "GET /config.json HTTP/1.1" 404 4156 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-05-27 19:22:58 (1 week ago)	[WedMay2721:22:53.2819382026][security2:error][pid461480:tid461719][client64.89.160.19:0]ModSecurity ... show more [WedMay2721:22:53.2819382026][security2:error][pid461480:tid461719][client64.89.160.19:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.mondo-it.ch.81-17-25-250.cpanel.site\"][uri\"/.env.production\"][unique_id\"ahdEjcdyMVDylYoZm4X6kQAAAEc\"] show less	Hacking Web App Attack
🇫🇷 Kimax	2026-05-27 19:12:02 (1 week ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇭🇺 szasa	2026-05-27 19:08:33 (1 week ago)	2026/05/27 21:08:32 [error] 2143328#2143328: 2692213 access forbidden by rule, client: 64.89.160.19 ... show more 2026/05/27 21:08:32 [error] 2143328#2143328: 2692213 access forbidden by rule, client: 64.89.160.19, server: datamentor.hu, request: "GET /.env HTTP/1.1", host: "www.beszerzokozpont.hu" 2026/05/27 21:08:32 [error] 2143328#2143328: 2692214 access forbidden by rule, client: 64.89.160.19, server: datamentor.hu, request: "GET /.env HTTP/1.1", host: "beszerzokozpont.hu" 2026/05/27 21:08:32 [error] 2143328#2143328: 2692215 access forbidden by rule, client: 64.89.160.19, server: datamentor.hu, request: "GET /.env HTTP/1.1", host: "www.datamentor.hu" 2026/05/27 21:08:32 [error] 2143328#2143328: *2692217 access forbidden by rule, client: 64.89.160.19, server: datamentor.hu, request: "GET /.env HTTP/1.1", host: "datamentor.hu" ... show less	Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-05-27 18:19:10 (1 week ago)	Blocked by YFC Security on https://brixzly.com — type: directory_scan_attempts	Web App Attack
🇸🇬 serverutama	2026-05-27 17:03:44 (1 week ago)	Nginx scanner:	Web App Attack Bad Web Bot
🇺🇸 Lezetho	2026-05-27 17:00:37 (1 week ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇩🇪 findlab	2026-05-27 17:00:02 (1 week ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇸🇬 serverutama	2026-05-27 16:35:10 (1 week ago)	Nginx scanner: 64.89.160.19 - - [27/May/2026:19:58:08 +0700] "GET /.env.example HTTP/1.1" 404 8775 " ... show more Nginx scanner: 64.89.160.19 - - [27/May/2026:19:58:08 +0700] "GET /.env.example HTTP/1.1" 404 8775 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" "-" 64.89.160.19 - - [27/May/2026:19:58:08 +0700] "GET /.env.local HTTP/1.1" 404 8775 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" "-" 64.89.160.19 - - [27/May/2026:19:58:08 +0700] "GET /.env.production HTTP/1.1" 404 8775 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" "-" show less	Web App Attack Bad Web Bot
Anonymous	2026-05-27 16:25:53 (1 week ago)	64.89.160.19 - - [27/May/2026:16:25:52 +0000] "GET /.env.example HTTP/1.1" 404 2964 "-" "Mozilla/5.0 ... show more 64.89.160.19 - - [27/May/2026:16:25:52 +0000] "GET /.env.example HTTP/1.1" 404 2964 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-05-27 16:08:48 (1 week ago)	HTTP scan of URLS detected through requesting more than 5 non existing (sensative) URLs (url file pa ... show more HTTP scan of URLS detected through requesting more than 5 non existing (sensative) URLs (url file paths on the same domain) show less	Brute-Force Web App Attack

Showing 121 to 135 of 189 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 40.160.2.239

🇧🇪 198.235.24.221

🇳🇱 193.176.31.217

🇻🇪 190.72.178.57

🇦🇷 170.239.182.169

🇵🇰 163.128.8.20

🇺🇸 162.216.150.165

🇺🇸 162.216.150.121

🇺🇸 162.216.150.110

🇵🇭 161.49.215.184

🇭🇰 152.32.172.177

🇺🇸 147.185.132.61

🇨🇳 114.100.48.120

🇧🇩 103.183.62.1

🇸🇬 103.14.79.188

🇧🇬 78.128.113.74

🇺🇸 76.20.71.33

🇺🇸 66.132.186.250

🇲🇾 47.250.155.223

🇺🇸 40.124.174.149