JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2604:a880:5:1::5c3:1000

2604:a880:5:1::5c3:1000 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Douglasville, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2604:a880:5:1::5c3:1000

Whois 2604:a880:5:1::5c3:1000

IP Abuse Reports for 2604:a880:5:1::5c3:1000:

This IP address has been reported a total of 13 times from 11 distinct sources. 2604:a880:5:1::5c3:1000 was first reported on July 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lcpacs	2026-08-26 02:31:18 (1 day ago)	Auto-flagged by honeypot: tripped /favicon.ico	Bad Web Bot Web App Attack
🇺🇸 Lezetho	2026-05-22 01:00:22 (3 months ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇺🇸 Mrnobot	2026-05-15 17:31:06 (3 months ago)	Confirmed scanner / probe behavior on US-origin IP. 3 edge-firewall events. User-Agent: Mozilla/5.0 ... show more Confirmed scanner / probe behavior on US-origin IP. 3 edge-firewall events. User-Agent: Mozilla/5.0 (iPod; U; CPU iPhone OS 3_0 like Mac OS X; cy-GB) AppleWebKit/535.34.6 (KHTML, like Gecko) Version/3.0.5 Mobile/8B111 Safari/6535.34.6 Sample paths probed: / /favicon.ico Source: edge-firewall events on a content site. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-06 00:00:42 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2604:a880:5:1::5c3:1000 (Unknown): 1 in the las ... show more (mod_security) mod_security (id:210730) triggered by 2604:a880:5:1::5c3:1000 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 19:00:35.435767 2026] [security2:error] [pid 9130:tid 9130] [client 2604:a880:5:1::5c3:1000:50575] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.fractalsky.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fractalsky.com"] [uri "/blackhorrormovie.com"] [unique_id "aVxQo3pb9cHl34weqcKU_AAAAAw"], referer: https://furythemovie.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 mscode.pl	2025-12-23 08:19:54 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-02 12:13:40 (8 months ago)	(mod_security) mod_security (id:212970) triggered by 2604:a880:5:1::5c3:1000 (Unknown): 1 in the las ... show more (mod_security) mod_security (id:212970) triggered by 2604:a880:5:1::5c3:1000 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:13:34.706173 2025] [security2:error] [pid 10568:tid 10568] [client 2604:a880:5:1::5c3:1000:53587] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<meta.{0,}?charset\\\\/{0,}=" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "128"] [id "212970"] [rev "5"] [msg "COMODO WAF: IE XSS Filters - Attack Detected.\|\|floridausa.com\|F\|2"] [data "Matched Data: <metacharset= found within REQUEST_URI: /nonpart<html><head><metacharset="] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "floridausa.com"] [uri "/nonpart<html><head><meta charset="] [unique_id "aS7X7tBeZkVQ1Pe5H2bmhAAAAAY"], referer: https://www.nonpartisans.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Serpes	2025-11-20 08:25:50 (9 months ago)	Suspicious activity detected	Hacking Web App Attack
🇺🇸 COMPLEX	2025-11-02 00:42:10 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1.1 (GET method) Endpoint: / show less	Bad Web Bot
🇵🇱 sefinek.net	2025-10-29 18:50:17 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 COMPLEX	2025-09-05 15:55:10 (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/2 (GET method) Endpoint: / show less	Bad Web Bot
🇩🇪 1gz	2025-08-30 07:48:59 (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 MatStef132	2025-08-04 19:49:21 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0 show less	Bad Web Bot
🇺🇸 creations.works	2025-07-21 20:06:19 (1 year ago)	Blocked by UFW on vds [80/tcp] Source port: 59999 TTL: null Packet length: 80 TOS: null This report ... show more Blocked by UFW on vds [80/tcp] Source port: 59999 TTL: null Packet length: 80 TOS: null This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2620:18c:0:192::e0:179

🇺🇸 205.210.31.9

🇺🇸 162.216.150.93

🇺🇸 147.185.132.166

🇬🇪 85.117.60.125

🇺🇸 66.228.53.136

🇨🇳 47.98.106.63

🇳🇱 45.148.10.152

🇪🇸 34.175.72.123

🇧🇷 205.210.31.205

🇲🇽 201.153.147.251

🇰🇪 197.248.8.33

🇳🇱 193.47.62.69

🇩🇪 187.13.8.174

🇺🇸 173.255.248.25

🇺🇸 172.253.218.221

🇺🇸 162.216.150.6

🇩🇰 130.225.33.22

🇮🇳 98.70.50.166

🇺🇸 86.104.19.49