AbuseIPDB » 2620:96:e000::b4

2620:96:e000::b4 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 33%: ?

33%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	scanner-201.ch1.censys-scanner.com
Domain Name	censys.com
Country	United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 2620:96:e000::b4

Whois 2620:96:e000::b4

IP Abuse Reports for 2620:96:e000::b4:

This IP address has been reported a total of 91 times from 31 distinct sources. 2620:96:e000::b4 was first reported on June 12th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
exxos	2025-04-04 14:40:22 (2 weeks ago)	Attacks with Bad user agents	Hacking
spyra.rocks	2025-04-02 07:02:56 (2 weeks ago)	Apache Badbot	Bad Web Bot
Murazaki	2025-03-28 09:00:24 (3 weeks ago)	2025/03/28 10:00:23 [error] 589488#589488: *1417991 empty URI in redirect to named location "@err" w ... show more2025/03/28 10:00:23 [error] 589488#589488: *1417991 empty URI in redirect to named location "@err" while reading client request line, client: 2620:96:e000::b4, server: , request: "PRI * HTTP/2.0" ... show less	Hacking
exxos	2025-03-26 17:13:34 (3 weeks ago)	Traversal attacks	Hacking
MAGIC	2025-03-24 18:03:58 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
smallbottle	2025-03-18 22:11:01 (1 month ago)	The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 398324 clientAS ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 398324 clientASNDescription: CENSYS-ARIN-01 clientCountryName: US clientIP: 2620:96:e000::b4 clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /favicon.ico clientRequestQuery: datetime: 2025-03-18T21:31:26Z rayName: 9227d6458cb6eac0 ruleId: 4989f24696b94676961cd00c29a049bb userAgent: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/). Report generated by Cloudflare-WAF-to-AbuseIPDB.(https://github.com/0123-smallbottle/Cloudflare-WAF-to-AbuseIPDB) About:(https://blog.smallbottle2.top/about) show less	Web Spam Bad Web Bot
smallbottle	2025-03-14 20:00:38 (1 month ago)	The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 398324 clientAS ... show moreThe IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 398324 clientASNDescription: CENSYS-ARIN-01 clientCountryName: US clientIP: 2620:96:e000::b4 clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /favicon.ico clientRequestQuery: datetime: 2025-03-14T19:31:08Z rayName: 9206308cf9a2634b ruleId: 4989f24696b94676961cd00c29a049bb userAgent: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/). Report generated by Cloudflare-WAF-to-AbuseIPDB.(https://github.com/0123-smallbottle/Cloudflare-WAF-to-AbuseIPDB) About:(https://blog.smallbottle2.top/about) show less	Web Spam Bad Web Bot
www.elivecd.org	2025-03-10 22:37:40 (1 month ago)	2025/03/10 22:37:39 [error] 2191854#2191854: *338700 FastCGI sent in stderr: "PHP message: BOT WARNI ... show more2025/03/10 22:37:39 [error] 2191854#2191854: *338700 FastCGI sent in stderr: "PHP message: BOT WARNING: visitor used the honeypot: 2620:96:e000::b4, url was '[2a05:f480:1000:c85::]' and abuseipdb '40', function: ELP_site_live" while reading response header from upstream, client: 2620:96:e000::b4, server: www.elivecd.org, request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/run/php/php8.2-fpm-elivewp.sock:", host: "[2a05:f480:1000:c85::]" ... show less	Web Spam Email Spam
spyra.rocks	2025-03-10 19:47:39 (1 month ago)	NGINX	Bad Web Bot
ghostwarriors	2025-03-05 12:50:06 (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
Anonymous	2025-03-05 12:26:07 (1 month ago)	Fail2Ban triggered	Web App Attack
Anonymous	2025-02-19 06:35:00 (1 month ago)		DNS Compromise DDoS Attack
ghostwarriors	2025-02-18 19:50:03 (2 months ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
Anonymous	2025-02-18 19:43:37 (2 months ago)	Fail2Ban triggered	Web App Attack
securejdprop	2025-02-16 18:26:43 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 2620:96:e000::b4 p ... show moreThis IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 2620:96:e000::b4 performed 'crowdsecurity/http-bad-user-agent' (2 events over 13.206486788s) at 2025-02-16 18:26:41.799329135 +0000 UTC show less	Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩