JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2600:3c00::2000:cdff:fe0b:55ef

2600:3c00::2000:cdff:fe0b:55ef was found in our database!

This IP was reported 17 times. Confidence of Abuse is 49%: ?

49%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	prod-barium-us-central-61.li.binaryedge.ninja
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Richardson, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2600:3c00::2000:cdff:fe0b:55ef

Whois 2600:3c00::2000:cdff:fe0b:55ef

IP Abuse Reports for 2600:3c00::2000:cdff:fe0b:55ef:

This IP address has been reported a total of 17 times from 8 distinct sources. 2600:3c00::2000:cdff:fe0b:55ef was first reported on May 19th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ParaBug	2026-06-07 21:17:36 (4 hours ago)	2600:3c00::2000:cdff:fe0b:55ef - - [07/Jun/2026:23:17:35 +0200] "CONNECT /CSCOSSLC/tunnel HTTP/1.1" ... show more 2600:3c00::2000:cdff:fe0b:55ef - - [07/Jun/2026:23:17:35 +0200] "CONNECT /CSCOSSLC/tunnel HTTP/1.1" 400 454 "-" "-" ... show less	Phishing Brute-Force Web App Attack
🇺🇸 xmission.com	2026-06-06 09:58:05 (1 day ago)	Blocked by UFW (TCP on 49671) Source port: 59831 Packet length: 64 This report (for 2600:3c00:0000: ... show more Blocked by UFW (TCP on 49671) Source port: 59831 Packet length: 64 This report (for 2600:3c00:0000:0000:2000:cdff:fe0b:55ef) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-05 16:02:10 (2 days ago)	Blocked by UFW (TCP on 10250) Source port: 55302 Packet length: 64 This report (for 2600:3c00:0000: ... show more Blocked by UFW (TCP on 10250) Source port: 55302 Packet length: 64 This report (for 2600:3c00:0000:0000:2000:cdff:fe0b:55ef) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-06-05 14:24:57 (2 days ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2600:3c00::2000:cdff:fe0b:55ef (IPv6) \| Port: N/A \| Country: United States \| ISP: LINODE-US \| rDNS: prod-barium-us-central-61.li.binaryedge.ninja === TARGET === Host: lg.goline.ch \| IP: lg.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-06-05 16:24:56 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-06-05 13:47:56 (2 days ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2600:3c00::2000:cdff:fe0b:55ef (IPv6) \| Port: N/A \| Country: United States \| ISP: LINODE-US \| rDNS: prod-barium-us-central-61.li.binaryedge.ninja === TARGET === Host: time.goline.ch \| IP: time.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-06-05 15:47:50 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-06-05 12:05:14 (2 days ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2600:3c00::2000:cdff:fe0b:55ef (IPv6) \| Port: N/A \| Country: United States \| ISP: LINODE-US \| rDNS: prod-barium-us-central-61.li.binaryedge.ninja === TARGET === Host: lg.goline.ch \| IP: lg.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-06-05 14:05:13 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇺🇸 xmission.com	2026-06-05 02:58:57 (2 days ago)	Blocked by UFW (TCP on 8888) Source port: 48333 Packet length: 64 This report (for 2600:3c00:0000:0 ... show more Blocked by UFW (TCP on 8888) Source port: 48333 Packet length: 64 This report (for 2600:3c00:0000:0000:2000:cdff:fe0b:55ef) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-04 15:31:50 (3 days ago)	Blocked by UFW (TCP on 7657) Source port: 47072 Packet length: 64 This report (for 2600:3c00:0000:0 ... show more Blocked by UFW (TCP on 7657) Source port: 47072 Packet length: 64 This report (for 2600:3c00:0000:0000:2000:cdff:fe0b:55ef) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-06-04 13:16:32 (3 days ago)	Unauthorized attempt on coresecret [7070/tcp] Source port: 58977 TTL: null Packet length: 64 TOS: nu ... show more Unauthorized attempt on coresecret [7070/tcp] Source port: 58977 TTL: null Packet length: 64 TOS: null https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-04 01:19:19 (4 days ago)	Blocked by UFW (TCP on 5601) Source port: 55929 Packet length: 64 This report (for 2600:3c00:0000:0 ... show more Blocked by UFW (TCP on 5601) Source port: 55929 Packet length: 64 This report (for 2600:3c00:0000:0000:2000:cdff:fe0b:55ef) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 Peter-Johann Sarbach	2026-05-24 05:06:16 (2 weeks ago)	May 23 03:33:37 imap-login: Info: Disconnected: Connection closed (no auth attempts in 1 secs): user ... show more May 23 03:33:37 imap-login: Info: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=2600:3c00::2000:cdff:fe0b:55ef, lip=x.x.x.x, TLS handshaking: Connection closed May 23 03:33:38 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 0 secs): user=<>, rip=2600:3c00::2000:cdff:fe0b:55ef, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low May 23 03:33:38 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher (no auth attempts in 0 secs): user=<>, rip=2600:3c00::2000:cdff:fe0b:55ef, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher May 23 03:33:40 imap-login: Info: Disconnected: Connection closed (no auth attempts in 2 secs): user=<>, rip=2600:3c00::2000:cdff:fe0b:55ef, lip=x.x.x.x, TLS handshaking: Connection closed May 23 03:33:40 imap-login: Info... show less	Hacking
🇩🇪 _ArminS_	2026-05-24 01:08:03 (2 weeks ago)	SP-Scan6 44706:8103 detected 2026.05.24 03:08:03 blocked until 2026.07.12 20:10:50	Port Scan
🇩🇪 Admins@FBN	2026-05-23 23:27:05 (2 weeks ago)	FW-PortScan: Traffic Blocked srcport=58782 dstport=8083	Port Scan
🇫🇮 6kilowatti	2026-05-23 13:47:47 (2 weeks ago)	2026-05-23T16:47:46.317592+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-05-23T16:47:46.317592+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:86:dd SRC=2600:3c00:0000:0000:2000:cdff:fe0b:55ef DST=2a03:50a0:0102:a700:6e9f:0860:5122:89b3 LEN=64 TC=0 HOPLIMIT=232 FLOWLBL=0 PROTO=TCP SPT=44019 DPT=515 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-05-23 13:37:54 (2 weeks ago)	Blocked by UFW (TCP on 515) Source port: 43388 Packet length: 64 This report (for 2600:3c00:0000:00 ... show more Blocked by UFW (TCP on 515) Source port: 43388 Packet length: 64 This report (for 2600:3c00:0000:0000:2000:cdff:fe0b:55ef) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.93.167.144

🇭🇰 199.45.155.95

🇺🇸 172.253.244.155

🇺🇸 104.194.8.142

🇮🇩 103.98.176.164

🇺🇸 82.29.199.64

🇺🇸 64.62.197.227

🇻🇳 42.96.4.94

🇹🇿 41.59.97.148

🇧🇷 189.28.147.26

🇭🇰 152.32.135.217

🇧🇩 103.81.175.179

🇺🇸 98.95.120.52

🇫🇷 91.231.89.216

🇺🇸 52.91.2.81

🇺🇸 45.79.153.51

🇫🇮 34.88.61.230

🇺🇸 34.86.52.224

🇵🇰 14.192.132.36

🇨🇳 14.103.123.75