JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.61.209.44

5.61.209.44 was found in our database!

This IP was reported 643 times. Confidence of Abuse is 100%: ?

100%

ISP	Amarutu Technology Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206264
Domain Name	koddos.net
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.61.209.44

Whois 5.61.209.44

IP Abuse Reports for 5.61.209.44:

This IP address has been reported a total of 643 times from 241 distinct sources. 5.61.209.44 was first reported on July 23rd 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 en0	2026-07-24 20:15:05 (3 minutes ago)	5.61.209.44 was recorded 3 times by 2 hosts attempting to connect to 2 unique ports. Incident counte ... show more 5.61.209.44 was recorded 3 times by 2 hosts attempting to connect to 2 unique ports. Incident counter (4h, 24h, all-time): 3, 16, 21 show less	Port Scan
🇭🇰 PingMeMaybe	2026-07-24 20:12:18 (5 minutes ago)	Blocked by UFW on hk [8080/tcp] Source port: 58591 TTL: 242 Packet length: 40 TOS: 0x00 This report ... show more Blocked by UFW on hk [8080/tcp] Source port: 58591 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 mutebot.net	2026-07-24 20:10:49 (7 minutes ago)	SRC=5.61.209.44, PROTO=TCP, SPT=35225, DPT=8080	Port Scan
🇺🇸 drewf.ink	2026-07-24 20:03:00 (15 minutes ago)	[20:03] Attempted HTTP access to a Hikvision device SDK endpoint (/SDK/webLanguage) on the web honey ... show more [20:03] Attempted HTTP access to a Hikvision device SDK endpoint (/SDK/webLanguage) on the web honeypot - likely CVE-2021-36260 reconnaissance show less	Web App Attack
🇩🇪 EinfxchFinn	2026-07-24 20:02:17 (15 minutes ago)	Unauthorized connection attempt to port 8080 from 5.61.209.44	Port Scan
🇩🇪 zupan	2026-07-24 19:56:58 (21 minutes ago)	Blocked by UFW on vps [84/tcp] \| SPT: 42629 \| TTL: 246 \| LEN: 40 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on vps [84/tcp] \| SPT: 42629 \| TTL: 246 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 sandra361	2026-07-24 19:56:02 (22 minutes ago)	Port scan detected: 6 attempts across 1 port (84). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=5.61.209.4 ... show more Port scan detected: 6 attempts across 1 port (84). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=5.61.209.44 LEN=40 TOS=0x00 PREC=0x00 TTL=60 ID=51924 DF PROTO=TCP SPT=43648 DPT=84 WINDOW=64240 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇺🇸 xmission.com	2026-07-24 19:50:39 (27 minutes ago)	Blocked by UFW (TCP on 84) Source port: 50323 TTL: 237 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 84) Source port: 50323 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 5.61.209.44) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 pingusurmars	2026-07-24 19:34:39 (43 minutes ago)	Blocked by UFW on ampereone [84/tcp] Source port: 60315 TTL: 245 Packet length: 40 TOS: 0x00 This r ... show more Blocked by UFW on ampereone [84/tcp] Source port: 60315 TTL: 245 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-24 19:33:07 (44 minutes ago)	Blocked by UFW (TCP on 84) Source port: 46326 TTL: 237 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 84) Source port: 46326 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 5.61.209.44) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 drewf.ink	2026-07-24 19:28:50 (49 minutes ago)	[19:28] Port scanning. Port(s) scanned: TCP/83, TCP/84	Port Scan
🇺🇸 xmission.com	2026-07-24 19:14:54 (1 hour ago)	Blocked by UFW (TCP on 83) Source port: 46794 TTL: 237 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 83) Source port: 46794 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 5.61.209.44) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-07-24 18:51:13 (1 hour ago)	tcp port scan (83 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-07-24 18:49:06 (1 hour ago)	Blocked by UFW (TCP on 83) Source port: 48142 TTL: 239 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 83) Source port: 48142 TTL: 239 Packet length: 40 TOS: 0x08 This report (for 5.61.209.44) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cazae	2026-07-24 18:44:20 (1 hour ago)	Unauthorized attempt on debian [83/tcp] Source port: 34959 TTL: 240 Packet length: 40 TOS: 0x08 htt ... show more Unauthorized attempt on debian [83/tcp] Source port: 34959 TTL: 240 Packet length: 40 TOS: 0x08 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 643 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 103.210.21.36

🇳🇱 195.178.110.30

🇲🇴 182.93.7.194

🇻🇳 152.32.250.21

🇭🇰 103.108.67.180

🇹🇳 102.104.38.162

🇩🇪 94.26.106.46

🇺🇸 71.6.241.140

🇧🇷 20.195.181.10

🇷🇺 185.39.118.137

🇨🇱 181.162.161.58

🇮🇹 77.39.164.230

🇰🇷 59.27.123.101

🇬🇧 45.133.173.216

🇯🇵 43.163.241.143

🇨🇳 218.23.95.9

🇰🇿 193.106.99.134

🇧🇬 193.24.211.76

🇦🇷 179.63.206.119

🇺🇸 173.94.6.137