206.81.3.28
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- North Bergen, New Jersey
Abuse Reports
Total reports
73 from
44 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇭🇺 kranem |
|
Bad Web Bot | |
| 🇦🇺 2000cn.com.au |
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack Hacking | |
| 🇩🇪 LRob |
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 | 2026-11-12 21:03 UTC
|
Bad Web Bot | |
| 🇩🇪 LRob |
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 HamSammich |
Automated sensor: 5 HTTP connection/probe attempts over the last 24h (latest 2026-11-12T18:31Z).
|
Port Scan Web App Attack | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: web application attack. 3 events observed. Reported automatically from a honeypot sensor.
|
Web App Attack | |
| 🇧🇪 cmbplf |
404 requests with url.path *.git/*
|
Brute-Force Bad Web Bot | |
| 🇳🇴 tmiland |
Suricata Detected 86 attacks from 206.81.3.28.; ET CINS Active Threat Intelligence Poor Reputation IP group 288; IP: 206.81.3.28; Ports: 48192; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2
|
Brute-Force | |
| Anonymous |
2083/tcp (1 or more attempts)
|
Port Scan | |
| 🇯🇵 S.O.B.A. Dev. |
Persistent port scanning or vulnerability scanning
|
Port Scan | |
| 🇺🇸 Aurealize |
firewall port scanning detected. 2 or more observation(s) from 2026-08-11T07:34:23.000Z through 2026-08-11T07:34:23.000Z.
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2083)
Source port: 38442
TTL: 50
Packet length: 60
TOS: 0x08
This report (for 206.81.3.28) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇳🇵 radheykrishna.com.np |
Aug 11 11:56:11 kernel: [144791.875120] [UFW BLOCK] IN=ens160 OUT= SRC=206.81.3.28 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=28648 PROTO=TCP SPT=52892 DPT=2083 WINDOW=65535 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇦🇹 Pingger Shikkoken |
|
Hacking | |
| 🇺🇸 MPL |
tcp/2083 (3 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown