JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.61.89.220

109.61.89.220 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 23%: ?

23%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60068
Hostname(s)	unn-109-61-89-220.datapacket.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.61.89.220

Whois 109.61.89.220

IP Abuse Reports for 109.61.89.220:

This IP address has been reported a total of 14 times from 8 distinct sources. 109.61.89.220 was first reported on July 2nd 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 basil s	2026-10-17 16:54:35 (3 hours ago)	Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across ... show more Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across closed ports; blocked by firewall. Target: TCP/16881. First seen: 2026-10-17 16:54:35 UTC. Source: host firewall/sshd log. show less	Port Scan
🇳🇱 Alt255	2026-10-15 10:48:48 (2 days ago)	[ti-04al] WordPress login brute-force: 6 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-04al] WordPress login brute-force: 6 suspicious requests detected by fail2ban jail apache-wordpress. Example: 109.61.89.220 - - [15/Oct/2026:12:23:12 +0200] "POST /wp-login.php HTTP/2.0" 503 19178 "https://recht-in-balans.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 109.61.89.220 - - [15/Oct/2026:12:48:40 +0200] "POST /wp-login.php HTTP/2.0" 503 19350 "https://vemservice.nl/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 109.61.89.220 - - [15/Oct/2026:12:48:43 +0200] "POST /wp-login.php HTTP/2.0" 503 7504 "https://correcthousing.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 109.6 ... show less	Brute-Force Web App Attack
🇫🇮 basil s	2026-10-15 08:05:42 (2 days ago)	Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across ... show more Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across closed ports; blocked by firewall. Target: TCP/16881. First seen: 2026-10-15 08:05:42 UTC. Source: host firewall/sshd log. show less	Port Scan
🇫🇮 basil s	2026-10-14 07:25:48 (3 days ago)	Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across ... show more Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across closed ports; blocked by firewall. Target: TCP/16881. First seen: 2026-10-14 07:25:48 UTC. Source: host firewall/sshd log. show less	Port Scan
🇫🇮 basil s	2026-10-13 07:10:29 (4 days ago)	Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across ... show more Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across closed ports; blocked by firewall. Target: TCP/16881. First seen: 2026-10-13 07:10:29 UTC. Source: host firewall/sshd log. show less	Port Scan
🇩🇪 DocNetzwerk	2026-09-01 16:16:08 (1 month ago)	(wordpress) Failed wordpress login from 109.61.89.220 (DE/Germany/unn-109-61-89-220.datapacket.com)	Brute-Force
🇺🇸 xmission.com	2026-09-01 07:45:58 (1 month ago)	Blocked by UFW (TCP on 57351) Source port: 44737 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 57351) Source port: 44737 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 109.61.89.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-31 17:45:18 (1 month ago)	Blocked by UFW (TCP on 57351) Source port: 38229 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 57351) Source port: 38229 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 109.61.89.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-28 15:43:38 (1 month ago)	Blocked by UFW (TCP on 57351) Source port: 30661 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 57351) Source port: 30661 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 109.61.89.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 HandyTreff.de	2026-08-26 13:34:57 (1 month ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.21 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.21 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26. show less	Web App Attack Bad Web Bot
🇫🇷 matthieul.dev	2026-07-05 13:30:27 (3 months ago)	Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=44813	Port Scan Brute-Force
🇺🇸 xmission.com	2026-07-04 00:52:59 (3 months ago)	Blocked by UFW (TCP on 41963) Source port: 51985 TTL: 111 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 41963) Source port: 51985 TTL: 111 Packet length: 52 TOS: 0x08 This report (for 109.61.89.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kosada.com	2026-07-03 13:26:20 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇵🇱 sefinek.net	2026-07-02 05:09:42 (3 months ago)	Honeypot hit: Unauthorized traffic (68 bytes of payload); 57638 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (68 bytes of payload); 57638 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 172.71.183.111

🇨🇳 221.226.114.202

🇰🇷 220.83.187.235

🇰🇷 211.106.133.202

🇳🇱 172.71.183.112

🇩🇪 172.68.192.196

🇰🇼 149.147.81.199

🇹🇼 128.1.32.150

🇰🇷 112.161.42.97

🇹🇳 102.157.229.88

🇱🇻 94.186.8.228

🇺🇦 91.234.140.43

🇺🇸 66.132.186.166

🇯🇵 64.34.94.207

🇺🇸 52.124.32.209

🇸🇬 34.124.152.174

🇺🇸 24.142.170.231

🇧🇪 198.235.24.209

🇳🇱 195.178.110.232

🇲🇽 177.226.73.202