← Spam & blacklist check · Flagged IPs
Is 64.89.161.131 safe?
Flagged as dangerous Malware distribution
This IP address appears in public security threat feeds. Block or rate-limit traffic from it.
Listings
| Category | Source | Details | Confidence | Since |
|---|---|---|---|---|
| Malware distribution | URLhaus (abuse.ch) | 2 active malware URL(s) tracked by URLhaus; tags: 64-89-161-131,connectwise,exe,ua-wget | 90% | 2026-08-10 |
Threat details
Reports
2
First seen
2026-04-02
Last seen
2026-10-20
64-89-161-131 connectwise exe ua-wget
Sample malicious URL (defanged — do not open): hxxp://64[.]89[.]161[.]131/Bin/ScreenConnect[.]ClientSetup[.]exe
So far the network has warned earlier than the threat feeds in 0 case(s).
Report data comes from public threat feeds (URLhaus, ThreatFox and Feodo Tracker by abuse.ch — CC0; MetaMask eth-phishing-detect; Phishing.Database) and is shown with attribution. Listings change as the sources update.
