JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2400:6180:100:d0::393:d001

2400:6180:100:d0::393:d001 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 3%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2400:6180:100:d0::393:d001

Whois 2400:6180:100:d0::393:d001

IP Abuse Reports for 2400:6180:100:d0::393:d001:

This IP address has been reported a total of 54 times from 26 distinct sources. 2400:6180:100:d0::393:d001 was first reported on April 26th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Lezetho	2026-06-27 11:00:21 (4 days ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇺🇸 Lezetho	2026-06-15 17:38:33 (2 weeks ago)	Firewall event: ddos 2 \| Action: challenge \| Method: GET \| Host: adamsfiles.lezetho.xyz \| Path: /wor ... show more Firewall event: ddos 2 \| Action: challenge \| Method: GET \| Host: adamsfiles.lezetho.xyz \| Path: /workspace/474c6756-2a8a-4e4f-9029-a71b6dff9e61/360 \| User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 26_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Brave/1 Mobile/15E148 Safari/604.1 \| ASN: 14061 (DigitalOcean, LLC) \| Country: IN \| Rule ID: a2d1922c2d624a9cba55e973dc8817e4 \| Ray: a0c3596119156677 show less	DDoS Attack Port Scan Hacking SQL Injection Brute-Force Web App Attack
🇵🇱 ketovoila.pl	2026-01-08 23:02:52 (5 months ago)	ketovoila.pl HONEYPOT traffic: count=22, paths=1; sample_path=ketovoila.pl/; UA=Mozilla/5.0 (iPhone; ... show more ketovoila.pl HONEYPOT traffic: count=22, paths=1; sample_path=ketovoila.pl/; UA=Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1; window=2026-01-08T12:00:10Z..2026-01-08T05:33:37Z show less	Port Scan Hacking Brute-Force
🇵🇱 ketovoila.pl	2026-01-08 05:58:32 (5 months ago)	ketovoila.pl HONEYPOT traffic: count=2, paths=1; sample_path=ketovoila.pl/; UA=Mozilla/5.0 (iPhone; ... show more ketovoila.pl HONEYPOT traffic: count=2, paths=1; sample_path=ketovoila.pl/; UA=Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1; window=2026-01-08T05:33:40Z..2026-01-08T05:33:37Z show less	Port Scan Hacking Brute-Force
🇨🇳 ThreatBook.io	2025-12-30 01:05:05 (6 months ago)	2025-12-29 10:20:08 / 2025-12-29 10:23:36 /tomcat.svg 2025-12-29 10:23:37 /favicon.ico	Web App Attack
🇺🇸 TPI-Abuse	2025-12-16 15:18:18 (6 months ago)	(mod_security) mod_security (id:217291) triggered by 2400:6180:100:d0::393:d001 (Unknown): 1 in the ... show more (mod_security) mod_security (id:217291) triggered by 2400:6180:100:d0::393:d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 16 10:18:11.438347 2025] [security2:error] [pid 26637:tid 26637] [client 2400:6180:100:d0::393:d001:37969] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\ntimestamp. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|jessicabaer.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cntimestamp: \\x0d\\x0atimestamp"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "jessicabaer.com"] [uri "/track/open"] [unique_id "aUF4M93KECv3pxSNkm0-xgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 pinguin	2025-12-12 23:14:55 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 4_0 like Mac OS X; csb-PL) AppleWebKit/531.34.7 (KHTML, like Gecko) Version/3.0.5 Mobile/8B119 Safari/6531.34.7 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇿 akac	2025-12-09 06:00:41 (6 months ago)	Web vulnerability scanning: HTTP/2 GET /360	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 COMPLEX	2025-11-02 05:35:01 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1.1 (GET method) Endpoint: / show less	Bad Web Bot
🇩🇪 Admins@FBN	2025-10-11 16:29:54 (8 months ago)	FW-PortScan: Traffic Blocked srcport=38017 dstport=443	Port Scan
🇩🇪 Admins@FBN	2025-10-06 17:41:05 (8 months ago)	FW-PortScan: Traffic Blocked srcport=53095 dstport=443	Port Scan
🇩🇪 1gz	2025-09-02 20:54:34 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /360 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 MatStef132	2025-08-04 19:38:31 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0 show less	Bad Web Bot
🇦🇺 advena	2025-07-27 08:16:00 (11 months ago)	2400:6180:100:d0::393:d001 (AS14061 DIGITALOCEAN-ASN) was intercepted at 2025-07-27T08:08:02Z after ... show more 2400:6180:100:d0::393:d001 (AS14061 DIGITALOCEAN-ASN) was intercepted at 2025-07-27T08:08:02Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇩🇪 psauxit	2025-06-25 05:29:45 (1 year ago)	Fail2Ban - UFW port probing on unauthorized port	Port Scan

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 202.165.29.123

🇫🇷 185.187.169.232

🇺🇸 147.185.132.71

🇸🇪 2603:1062:0:334::17

🇺🇸 216.24.210.124

🇦🇺 209.38.81.117

🇬🇧 193.176.29.10

🇬🇧 193.176.29.8

🇬🇧 193.32.209.226

🇬🇧 185.247.137.158

🇺🇸 173.247.226.62

🇫🇮 147.185.133.71

🇰🇪 105.27.148.94

🇹🇷 91.151.95.146

🇫🇷 85.217.140.13

🇬🇧 81.103.110.4

🇸🇬 47.82.51.147

🇸🇬 47.82.15.154

🇬🇧 5.226.140.15

🇸🇪 2603:1062:0:334::1b