JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2604:a880:2:d1::af59:8001

2604:a880:2:d1::af59:8001 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 2%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2604:a880:2:d1::af59:8001

Whois 2604:a880:2:d1::af59:8001

IP Abuse Reports for 2604:a880:2:d1::af59:8001:

This IP address has been reported a total of 11 times from 9 distinct sources. 2604:a880:2:d1::af59:8001 was first reported on August 18th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Lezetho	2026-06-13 01:00:35 (1 week ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇫🇮 as211431.net	2026-03-09 10:14:33 (3 months ago)	Triggered Cloudflare WAF (linkMaze) from US. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (linkMaze) from US. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/2 (GET method) Endpoint: / UA: req/v3 (https://github.com/imroc/req) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-01-17 11:29:00 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: req/v3 (https://github.com/imroc/req) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 watchman1513	2025-11-11 04:43:46 (7 months ago)	2025/11/10 23:43:20 [error] 398879#398879: 24516 access forbidden by rule, client: 2604:a880:2:d1:: ... show more 2025/11/10 23:43:20 [error] 398879#398879: 24516 access forbidden by rule, client: 2604:a880:2:d1::af59:8001, server: dashboard., request: "GET / HTTP/1.0", host: "oldgreensynapselane.org", referrer: "http://oldgreensynapselane.org/" 2025/11/10 23:43:32 [error] 398879#398879: 24524 access forbidden by rule, client: 2604:a880:2:d1::af59:8001, server: dashboard., request: "GET / HTTP/1.0", host: "oldgreensynapselane.org", referrer: "http://oldgreensynapselane.org/" 2025/11/10 23:43:42 [error] 398879#398879: 24529 access forbidden by rule, client: 2604:a880:2:d1::af59:8001, server: dashboard.*, request: "GET /favicon.ico HTTP/1.0", host: "oldgreensynapselane.org", referrer: "http://oldgreensynapselane.org/favicon.ico" ... show less	Fraud Orders DDoS Attack FTP Brute-Force Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 kranem	2025-11-10 00:00:56 (7 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1 ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-11-09T22:07:42Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇮 as211431.net	2025-10-31 22:37:02 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-27 13:35:20 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2604:a880:2:d1::af59:8001 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210730) triggered by 2604:a880:2:d1::af59:8001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 27 09:35:16.333728 2025] [security2:error] [pid 5252:tid 5252] [client 2604:a880:2:d1::af59:8001:57169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pa-ksa.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Oksyil.dll"] [unique_id "aP91FNsHte-iAP985LNvDwAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-11 17:25:23 (8 months ago)	(mod_security) mod_security (id:212970) triggered by 2604:a880:2:d1::af59:8001 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:212970) triggered by 2604:a880:2:d1::af59:8001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 11 13:25:16.131510 2025] [security2:error] [pid 29133:tid 29133] [client 2604:a880:2:d1::af59:8001:43429] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<meta.{0,}?charset\\\\/{0,}=" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "128"] [id "212970"] [rev "5"] [msg "COMODO WAF: IE XSS Filters - Attack Detected.\|\|floridausa.com\|F\|2"] [data "Matched Data: <metacharset= found within REQUEST_URI: /nonpart<html><head><metacharset="] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "floridausa.com"] [uri "/nonpart<html><head><meta charset="] [unique_id "aOqS_PJF6NgJk3wze0giLgAAAA4"], referer: http://www.nonpartisans.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-10-06 19:03:01 (8 months ago)	Attacks with Bad user agents	Hacking
🇦🇺 MAGIC	2025-08-27 02:23:40 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 advena	2025-08-18 15:00:59 (10 months ago)	2604:a880:2:d1::af59:8001 (AS14061 DIGITALOCEAN-ASN) was intercepted at 2025-08-18T14:52:30Z after v ... show more 2604:a880:2:d1::af59:8001 (AS14061 DIGITALOCEAN-ASN) was intercepted at 2025-08-18T14:52:30Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.142.193.131

🇺🇸 40.77.167.159

🇺🇸 35.130.111.146

🇧🇪 207.175.52.100

🇧🇷 201.159.74.90

🇨🇱 186.64.123.124

🇵🇾 181.123.62.210

🇺🇸 162.243.138.30

🇺🇸 162.216.150.219

🇱🇹 62.60.130.219

🇫🇷 38.109.228.50

🇺🇸 34.125.131.18

🇪🇸 212.227.235.203

🇧🇷 205.210.31.150

🇧🇷 201.93.161.154

🇸🇬 188.166.246.68

🇳🇱 45.148.10.152

🇬🇧 45.82.76.123

🇸🇬 43.160.208.253

🇸🇬 35.187.231.181