AbuseIPDB » 2620:96:e000::111
2620:96:e000::111 was found in our database!
This IP was reported 212 times. Confidence of Abuse is 0%: ?
Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.
| ISP | Censys, Inc. |
|---|---|
| Usage Type | Unknown |
| ASN | Unknown |
| Domain Name | censys.com |
| Country | 🇺🇸 United States of America |
| City | Ann Arbor, Michigan |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 2620:96:e000::111:
This IP address has been reported a total of 212 times from 48 distinct sources. 2620:96:e000::111 was first reported on , and the most recent report was .
Old Reports: The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇩🇪 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)
|
Hacking Bad Web Bot | ||
| 🇺🇸 infra-monitor |
Automated ban via infra-monitor: protocol-mismatch
|
Port Scan | ||
| 🇺🇸 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-13)
|
Hacking Bad Web Bot | ||
| 🇩🇪 Dennis |
|
Bad Web Bot | ||
| Anonymous |
2620:96:e000::111 - - [17/Mar/2026:18:14:27 +0000] "\x16\x03\x01\x01" 400 432 "-" "-"
...
|
Bad Web Bot Web App Attack | ||
| 🇩🇪 Dennis |
|
Bad Web Bot | ||
| 🇦🇺 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-syd2-4)
|
Hacking Bad Web Bot | ||
| Anonymous |
2620:96:e000::111 - - [16/Mar/2026:13:38:28 +0000] "\x16\x03\x01\x01\x03\x01" 400 432 "-" "-"
...
|
Bad Web Bot Web App Attack | ||
| 🇫🇷 HerrWolf |
CrowdSec Detection: crowdsecurity/http-bad-user-agent
|
Bad Web Bot | ||
| 🇩🇪 SCHAPPY |
Malicious activity from IP detected: crowdsecurity/http-bad-user-agent.
|
Web App Attack Bad Web Bot | ||
| 🇩🇪 fds.io |
detected and blocked multiple http 400 bad-request attempts
|
Bad Web Bot Web App Attack | ||
| 🇩🇪 seal |
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
|
SSH Brute-Force | ||
| 🇺🇸 VanKoh |
|
Port Scan Web App Attack | ||
| Anonymous |
|
DNS Compromise DDoS Attack | ||
| 🇩🇪 SCHAPPY |
Malicious activity from IP detected: crowdsecurity/http-bad-user-agent.
|
Web App Attack Bad Web Bot |
Showing 1 to 15 of 212 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩