JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2604:a880:400:d1:0:4:dedf:7001

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

60% Elevated

22 reports

13 reporters · latest 1 day ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	nyc1-28.barium.do.prod.binaryedge.ninja
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2604:a880:400:d1:0:4:dedf:7001

Export CSV

This IP address has been reported a total of 22 times from 13 distinct sources. 2604:a880:400:d1:0:4:dedf:7001 was first reported on August 26th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 8 reports; United States of America with 8 reports; Canada with 3 reports. The most common categories in these recent reports were: Port Scan 19 times; Hacking 2 times; Brute-Force 2 times; Web App Attack 2 times; Bad Web Bot 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 07:16:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2604:a880:400:d1:0:4:dedf:7001 (nyc1-28.barium. ... show more (mod_security) mod_security (id:210492) triggered by 2604:a880:400:d1:0:4:dedf:7001 (nyc1-28.barium.do.prod.binaryedge.ninja): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 03:16:00.820256 2026] [security2:error] [pid 7757:tid 7757] [client 2604:a880:400:d1:0:4:dedf:7001:47564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "2602:fc8e:0:688e:150::244"] [uri "/.env"] [unique_id "atm4MDpp4Q-_R4DxBeV9FgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-22 02:53:44 (1 day ago)	Blocked by UFW [8060/tcp] \| SPT: 57434 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [8060/tcp] \| SPT: 57434 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 bontekoe.technology	2026-10-20 12:59:24 (3 days ago)	Port scan or Brute-Force detected. (src_port=41008, dst_port=3348)	Brute-Force
🇧🇪 sid3windr	2026-10-16 06:44:23 (1 week ago)	GET /.env (Tarpitted for 1d15h8m33s, wasted 8.06MB)	Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-10-16 01:39:45 (1 week ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2604:a880:400:d1:0:4:dedf:7001 (IPv6) \| Port: N/A \| Country: United States \| ISP: DIGITALOCEAN \| rDNS: nyc1-28.barium.do.prod.binaryedge.ninja === TARGET === Host: helpdesk.goline.ch \| IP: helpdesk.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-10-16 03:39:44 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇺🇸 thororen	2026-10-06 08:14:57 (2 weeks ago)	Blocked by UFW [9502/tcp] Source port: 54462 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [9502/tcp] Source port: 54462 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-10-06 01:12:09 (2 weeks ago)	FW-PortScan: Traffic Blocked srcport=49092 dstport=3060	Port Scan
Anonymous	2026-10-05 21:16:32 (2 weeks ago)	Blocked by UFW [2012/tcp] \| SPT: 54959 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: github.com/s ... show more Blocked by UFW [2012/tcp] \| SPT: 54959 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-10-05 07:42:12 (2 weeks ago)	Blocked by UFW [101/tcp] Source port: 46105 TTL: null Packet length: 64 TOS: null This report was g ... show more Blocked by UFW [101/tcp] Source port: 46105 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-10-04 21:08:21 (2 weeks ago)	2026-10-05T00:08:20.758203+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-10-05T00:08:20.758203+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:86:dd SRC=2604:a880:0400:00d1:0000:0004:dedf:7001 DST=2a03:50a0:0102:6b00:59f7:c679:8726:4cbe LEN=64 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=TCP SPT=48094 DPT=55554 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 thororen	2026-10-04 03:44:46 (2 weeks ago)	Blocked by UFW [1604/tcp] Source port: 45482 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [1604/tcp] Source port: 45482 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Tanados	2026-09-24 06:52:23 (4 weeks ago)	Blocked by UFW [7700/tcp] Source port: 52538 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [7700/tcp] Source port: 52538 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-09-20 03:55:27 (1 month ago)	FW-PortScan: Traffic Blocked srcport=56355 dstport=522	Port Scan
Anonymous	2026-09-19 08:20:40 (1 month ago)	Blocked by UFW [20/tcp] \| SPT: 45936 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: github.com/sef ... show more Blocked by UFW [20/tcp] \| SPT: 45936 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Tanados	2026-09-03 08:38:02 (1 month ago)	Blocked by UFW [28015/tcp] Source port: 44665 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [28015/tcp] Source port: 44665 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 129.121.123.73

🇨🇳 123.4.200.44

🇧🇷 200.150.163.108

🇻🇪 190.153.19.105

🇩🇪 172.70.243.131

🇺🇸 103.143.11.150

🇸🇬 94.231.206.32

🇫🇷 85.217.140.14

🇹🇭 49.231.192.36

🇳🇱 45.148.10.151

🇨🇱 45.65.242.126

🇺🇸 37.19.221.165

🇺🇸 34.185.85.47

🇩🇪 172.70.243.132

🇸🇪 109.228.161.70

🇰🇷 106.246.89.69

🇸🇬 94.231.206.37

🇺🇦 91.225.162.16

🇺🇸 73.92.166.83

🇱🇹 62.60.130.234