JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2603:3:6101:96f0::

2603:3:6101:96f0:: was found in our database!

This IP was reported 49 times. Confidence of Abuse is 41%: ?

41%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	GoDaddy.com, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS398101
Domain Name	godaddy.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2603:3:6101:96f0::

Whois 2603:3:6101:96f0::

IP Abuse Reports for 2603:3:6101:96f0:::

This IP address has been reported a total of 49 times from 12 distinct sources. 2603:3:6101:96f0:: was first reported on February 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Saec	2026-09-01 18:45:04 (1 day ago)	Jarvis auto-ban: Honeypot /owa/auth.owa via webmail.saec.me [US] ASN:GoDaddy.com, LLC	Port Scan Web App Attack
🇩🇪 filstal.org	2026-09-01 15:23:11 (1 day ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇩🇪 LRob	2026-08-31 16:38:09 (2 days ago)	Enumerating paths that do not exist (scanning) \| method: POST \| path: /owa/auth.owa \| ua: Mozilla/5. ... show more Enumerating paths that do not exist (scanning) \| method: POST \| path: /owa/auth.owa \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 \| 2026-08-31 16:38 UTC show less	Port Scan Web App Attack
🇩🇪 LRob	2026-08-30 18:04:22 (3 days ago)	Enumerating paths that do not exist (scanning) \| method: POST \| path: /owa/auth.owa \| ua: Mozilla/5. ... show more Enumerating paths that do not exist (scanning) \| method: POST \| path: /owa/auth.owa \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 \| 2026-08-30 18:04 UTC show less	Port Scan Web App Attack
🇩🇪 LRob	2026-08-30 08:22:21 (3 days ago)	Enumerating paths that do not exist (scanning) \| method: POST \| path: /owa/auth.owa \| ua: Mozilla/5. ... show more Enumerating paths that do not exist (scanning) \| method: POST \| path: /owa/auth.owa \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 \| 2026-08-30 08:22 UTC show less	Port Scan Web App Attack
🇩🇪 LRob	2026-08-21 14:18:17 (1 week ago)	Enumerating paths that do not exist (scanning) \| method: POST \| path: /owa/auth.owa \| ua: Mozilla/5. ... show more Enumerating paths that do not exist (scanning) \| method: POST \| path: /owa/auth.owa \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 show less	Port Scan Web App Attack
🇧🇪 Saec	2026-08-20 10:31:19 (1 week ago)	Honeypot caught: /owa/auth.owa via mail.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ... show more Honeypot caught: /owa/auth.owa via mail.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36. show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇩🇪 filstal.org	2026-08-19 21:56:03 (2 weeks ago)	Persistent web reconnaissance: 8 repeated bans (probing sensitive files and admin paths)	Hacking Web App Attack
🇩🇪 filstal.org	2026-08-19 13:43:46 (2 weeks ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇧🇪 Saec	2026-08-18 17:30:44 (2 weeks ago)	Honeypot caught: /owa/auth.owa via mail.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ... show more Honeypot caught: /owa/auth.owa via mail.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36. show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇩🇪 filstal.org	2026-08-18 06:53:22 (2 weeks ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇧🇪 Saec	2026-08-18 01:48:43 (2 weeks ago)	Honeypot caught: /owa/auth.owa via webmail.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ... show more Honeypot caught: /owa/auth.owa via webmail.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36. show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇷🇴 clauss	2026-08-17 16:20:16 (2 weeks ago)	2603:3:6101:96f0:: - - [17/Aug/2026:19:20:09 +0300] "POST /owa/auth.owa HTTP/2.0" 404 3163 "https:// ... show more 2603:3:6101:96f0:: - - [17/Aug/2026:19:20:09 +0300] "POST /owa/auth.owa HTTP/2.0" 404 3163 "https://webmail.artexim.ro/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail.artexim.ro%2fowa%2f" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36" 2603:3:6101:96f0:: - - [17/Aug/2026:19:20:15 +0300] "POST /owa/auth.owa HTTP/2.0" 301 0 "https://artexim.ro/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fartexim.ro%2fowa%2f" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36" ... show less	Web App Attack
🇧🇪 Saec	2026-08-17 15:54:43 (2 weeks ago)	Honeypot caught: /owa/auth.owa via mail.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ... show more Honeypot caught: /owa/auth.owa via mail.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36. show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇹🇷 neron	2026-08-15 11:06:48 (2 weeks ago)	CrowdSec blocked: http:scan detected via OPNsense firewall	Hacking Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇫 2406:2d40:34a4:be08:ed4a:b51f:6908:cefe

🇨🇳 223.166.206.106

🇳🇱 185.223.235.30

🇨🇦 20.104.51.251

🇺🇸 216.26.224.208

🇮🇳 202.83.19.34

🇺🇸 198.144.189.37

🇵🇦 190.218.213.204

🇨🇴 190.84.88.221

🇲🇶 188.115.76.222

🇳🇱 94.154.43.74

🇹🇷 88.255.189.44

🇧🇬 77.83.38.24

🇺🇸 45.3.34.253

🇺🇸 40.74.210.142

🇦🇷 24.232.205.91

🇩🇪 216.26.246.31

🇺🇸 209.207.226.23

🇧🇪 198.235.24.175

🇳🇱 195.178.110.30