Name: Threat Intelligence: 64.89.161.180
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelHIGH70/1001 rule type

13 incidents · confirmed on global blocklist · persistent 17-day campaign · seen 24h ago

PTR	N/A
Org / ASN	AS205759 Ghosty Networks LLC
Country	🇱🇺 Luxembourg
City	Schieren, Diekirch
Timezone	Europe/Luxembourg

Attack Analysis

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

Reports (13)

Date	Severity	Description
29 Sep 2026 - 00:50	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
23 Sep 2026 - 00:26	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
22 Sep 2026 - 01:02	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
22 Sep 2026 - 01:02	high	IDS: Blocklist — Spamhaus DROP listed IP
13 Sep 2026 - 02:33	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
13 Sep 2026 - 02:05	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Sep 2026 - 20:06	high	IDS: Blocklist — Spamhaus DROP listed IP
12 Sep 2026 - 10:00	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
12 Sep 2026 - 09:57	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Sep 2026 - 07:14	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 10
12 Sep 2026 - 07:14	high	IDS: Blocklist — Spamhaus DROP listed IP
12 Sep 2026 - 06:34	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
12 Sep 2026 - 06:32	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9

Report for IP: 64.89.161.180

Attack Analysis

Reports (13)

Related IPs — Same /24 Block (64.89.161.0/24)