JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.89.160.42

64.89.160.42 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 100%: ?

100%

ISP	Ghosty Networks LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205759
Domain Name	ghostynetworks.com
Country	🇱🇺 Luxembourg
City	Luxembourg, Luxembourg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.89.160.42

Whois 64.89.160.42

IP Abuse Reports for 64.89.160.42:

This IP address has been reported a total of 20 times from 19 distinct sources. 64.89.160.42 was first reported on July 14th 2026, and the most recent report was 16 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Marten Mark	2026-07-15 06:08:42 (16 minutes ago)	2026-07-15T06:08:24.702962+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection c ... show more 2026-07-15T06:08:24.702962+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=206.189.122.172, session=<l1y5JqBWJuJAWaAq> 2026-07-15T06:08:25.906965+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=206.189.122.172, session=<mrvLJqBWLuJAWaAq> 2026-07-15T06:08:25.906965+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=206.189.122.172, session=<mrvLJqBWLuJAWaAq> 2026-07-15T06:08:40.984004+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=206.189.122.172, session=<rcqxJ6BW/K9AWaAq> ... show less	Email Spam Brute-Force
🇩🇪 NewGastroline	2026-07-15 05:46:34 (38 minutes ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇬🇧 Marten Mark	2026-07-15 04:16:04 (2 hours ago)	2026-07-15T04:15:00.979741+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection c ... show more 2026-07-15T04:15:00.979741+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=206.189.122.172, session=<bMswkZ5WPt5AWaAq> 2026-07-15T04:15:17.495223+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=206.189.122.172, session=<Gs0skp5WyJVAWaAq> 2026-07-15T04:15:33.323230+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=206.189.122.172, session=<h1Aek55WjppAWaAq> 2026-07-15T04:15:48.146916+00:00 mail.cfi.co dovecot[952573]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=206.189.122.172, session=<MYIAlJ5WduVAWaAq> 2026-07-15T04:16:03.662789+00:00 mail.cfi.co dovecot[952573]: pop3-login: Discon ... show less	Email Spam Brute-Force
Anonymous	2026-07-15 03:43:58 (2 hours ago)		Brute-Force
🇩🇪 netclix.gr	2026-07-15 03:22:52 (3 hours ago)	(pop3d) Failed POP3 login from 64.89.160.42 (US/United States/-)	Brute-Force
🇺🇸 TAY	2026-07-15 03:22:20 (3 hours ago)	2026-07-15 11:22:16 auth-worker(27661): Info: sql([email protected],64.89.160.42,<XTma1J1W6MFAWaAq>): ... show more 2026-07-15 11:22:16 auth-worker(27661): Info: sql([email protected],64.89.160.42,<XTma1J1W6MFAWaAq>): Password mismatch 2026-07-15 11:22:19 pop3-login: Info: Disconnected (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=64.89.160.42, lip=162.220.160.187, session=<XTma1J1W6MFAWaAq> ... show less	Brute-Force
🇮🇹 Inartis	2026-07-15 02:48:09 (3 hours ago)	Jul 15 04:47:53 mail1 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<a ... show more Jul 15 04:47:53 mail1 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=93.39.247.192, session=<4uiYWZ1WOuhAWaAq> Jul 15 04:48:09 mail1 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=64.89.160.42, lip=93.39.247.192, session=<ZSyMWp1WgpJAWaAq> ... show less	Port Scan Brute-Force
🇫🇷 [email protected]	2026-07-15 02:24:39 (4 hours ago)	Jul 15 04:23:49 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<a ... show more Jul 15 04:23:49 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=64.89.160.42, lip=141.94.194.45, session=<bt1yA51WYJpAWaAq> Jul 15 04:23:56 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=64.89.160.42, lip=141.94.194.45, session=<jbGfA51WYppAWaAq> Jul 15 04:24:11 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=64.89.160.42, lip=141.94.194.45, session=<u8LCBJ1WTtBAWaAq> Jul 15 04:24:16 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 10 secs): user=<[email protected]>, method=PLAIN, rip=64.89.160.42, lip=141.94.194.45, session=<KJCNBJ1WJIhAWaAq> Jul 15 04:24:39 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 17 secs): user=<[email protected]>, method=PLAIN, rip=64.89 ... show less	Brute-Force
🇧🇷 KingHost	2026-07-15 01:41:00 (4 hours ago)		Brute-Force
🇺🇸 Mainpine	2026-07-15 01:29:24 (4 hours ago)	invalid IMAP/POP3 authentication attempts	Brute-Force
🇨🇦 Julio Covolato	2026-07-15 01:20:02 (5 hours ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇩🇪 jasperedv.de	2026-07-15 01:06:53 (5 hours ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇳🇱 e.fierstra	2026-07-15 00:27:28 (5 hours ago)	Failed IMAP logins over 24h	Brute-Force
🇫🇷 ✨	2026-07-15 00:08:18 (6 hours ago)	Rule : POP 07/15/26 01:05:40 POPS 948 64.89.160.42 OK Welcome to MailEnable POP3 Server 39 0 0 ... show more Rule : POP 07/15/26 01:05:40 POPS 948 64.89.160.42 OK Welcome to MailEnable POP3 Server 39 0 07/15/26 01:05:41 POPS 948 64.89.160.42 USER USER [email protected] OK 5 23 07/15/26 01:05:41 POPS 948 64.89.160.42 PASS PASS * -ERR Unable to log on 23 18 07/15/26 01:05:56 POPS 3428 64.89.160.42 OK Welcome to MailEnable POP3 Server 39 0 07/15/26 01:05:56 POPS 3428 64.89.160.42 USER USER [email protected] OK 5 23 07/15/26 01:05:56 POPS 3428 64.89.160.42 PASS PASS * -ERR Unable to log on 23 18 07/15/26 01:06:11 POPS 3280 64.89.160.42 OK Welcome to MailEnable POP3 Server 39 0 07/15/26 01:06:11 POPS 3280 64.89.160.42 USER USER [email protected] OK 5 23 07/15/26 01:06:11 POPS 3280 64.89.160.42 PASS PASS * -ERR Unable to log on 23 18 show less	Port Scan Spoofing
🇪🇸 Pablo	2026-07-14 23:39:44 (6 hours ago)	<matches>	Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.210.124

🇬🇧 213.166.84.53

🇲🇽 189.204.230.91

🇧🇷 189.6.243.116

🇹🇼 118.163.132.211

🇮🇳 117.192.227.71

🇮🇳 66.116.224.161

🇺🇸 20.29.49.93

🇧🇪 198.235.24.245

🇧🇪 198.235.24.134

🇺🇸 172.234.199.75

🇺🇸 66.249.74.67

🇺🇸 64.62.197.200

🇺🇸 38.141.62.148

🇬🇧 194.50.235.149

🇺🇸 185.223.152.184

🇺🇸 185.149.26.71

🇯🇵 172.253.6.145

🇻🇳 157.66.80.124

🇩🇪 150.241.77.28