JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2604:a880:400:d1:0:4:defb:a001

2604:a880:400:d1:0:4:defb:a001 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 52%: ?

52%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	nyc1-44.boron.do.prod.binaryedge.ninja
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2604:a880:400:d1:0:4:defb:a001

Whois 2604:a880:400:d1:0:4:defb:a001

IP Abuse Reports for 2604:a880:400:d1:0:4:defb:a001:

This IP address has been reported a total of 12 times from 10 distinct sources. 2604:a880:400:d1:0:4:defb:a001 was first reported on August 26th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 aranguren.org	2026-09-17 13:17:06 (3 hours ago)	2604:a880:400:d1:0:4:defb:a001 - - [17/Sep/2026:23:17:03 +1000] "GET /auth.html HTTP/1.1" 404 995 "- ... show more 2604:a880:400:d1:0:4:defb:a001 - - [17/Sep/2026:23:17:03 +1000] "GET /auth.html HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 2604:a880:400:d1:0:4:defb:a001 - - [17/Sep/2026:23:17:03 +1000] "GET /auth1.html HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 2604:a880:400:d1:0:4:defb:a001 - - [17/Sep/2026:23:17:04 +1000] "GET /sslvpnLogin.html HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 2604:a880:400:d1:0:4:defb:a001 - - [17/Sep/2026:23:17:04 +1000] "GET /api/sonicos/auth HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 2604:a880:400:d1:0:4:defb:a001 - - [17/Sep/2026:23:17:05 +1000] "GET /api/sonicos ... show less	Bad Web Bot
🇧🇪 boxed-it	2026-09-15 05:52:21 (2 days ago)	GET /.env (Tarpitted for 24m50s, wasted 87.42kB)	Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-09-08 10:55:58 (1 week ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇩🇪 Admins@FBN	2026-09-04 10:02:44 (1 week ago)	FW-PortScan: Traffic Blocked srcport=56158 dstport=443	Port Scan
🇩🇪 _ArminS_	2026-09-03 10:52:34 (2 weeks ago)	SP-Scan6 52710:44818 detected 2026.09.03 12:52:34 blocked until 2026.10.23 05:55:21	Port Scan
🇺🇸 thororen	2026-09-02 16:35:45 (2 weeks ago)	Blocked by UFW [9151/tcp] Source port: 46913 TTL: null Packet length: 64 TOS: null This report was ... show more Blocked by UFW [9151/tcp] Source port: 46913 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-09-02 07:53:49 (2 weeks ago)	2026-09-02T10:53:47.835603+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-02T10:53:47.835603+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:86:dd SRC=2604:a880:0400:00d1:0000:0004:defb:a001 DST=2a10:f2c0:aaa8:3efc:0000:0000:0000:0001 LEN=64 TC=0 HOPLIMIT=240 FLOWLBL=0 PROTO=TCP SPT=55601 DPT=8834 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇦 Tanados	2026-08-29 00:22:09 (2 weeks ago)	Blocked by UFW [116/tcp] Source port: 42745 TTL: null Packet length: 64 TOS: null This report was g ... show more Blocked by UFW [116/tcp] Source port: 42745 TTL: null Packet length: 64 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-08-28 05:07:35 (2 weeks ago)	Blocked by UFW on LAXHH [3379/tcp] \| SPT: 53480 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: git ... show more Blocked by UFW on LAXHH [3379/tcp] \| SPT: 53480 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-08-28 01:28:30 (2 weeks ago)	FW-PortScan: Traffic Blocked srcport=40285 dstport=88	Port Scan
🇺🇸 xmission.com	2026-08-26 23:47:33 (3 weeks ago)	Blocked by UFW (TCP on 5432) Source port: 47945 Packet length: 64 This report (for 2604:a880:0400:0 ... show more Blocked by UFW (TCP on 5432) Source port: 47945 Packet length: 64 This report (for 2604:a880:0400:00d1:0000:0004:defb:a001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-08-26 01:37:49 (3 weeks ago)	Blocked by UFW on LAXHH [8443/tcp] \| SPT: 48227 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: git ... show more Blocked by UFW on LAXHH [8443/tcp] \| SPT: 48227 \| TTL: null \| LEN: 64 \| TOS: null • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.80.75.245

🇱🇧 185.97.95.107

🇺🇸 173.18.106.54

🇰🇷 121.184.144.232

🇵🇭 114.198.138.124

🇧🇩 103.234.200.252

🇩🇪 88.214.25.123

🇺🇸 64.62.197.112

🇺🇸 63.135.161.139

🇩🇪 45.3.55.128

🇩🇿 41.111.227.10

🇬🇧 35.203.210.84

🇺🇸 216.87.32.78

🇳🇱 213.232.114.140

🇨🇱 200.27.142.120

🇳🇱 195.178.110.26

🇻🇳 123.16.143.216

🇮🇳 117.222.115.40

🇨🇦 85.217.149.41

🇱🇹 62.60.130.253