JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a03:b0c0:3:f0:0:1:19dd:e000

2a03:b0c0:3:f0:0:1:19dd:e000 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 8%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	DigitalOcean, LLC
Usage Type	Content Delivery Network
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a03:b0c0:3:f0:0:1:19dd:e000

Whois 2a03:b0c0:3:f0:0:1:19dd:e000

IP Abuse Reports for 2a03:b0c0:3:f0:0:1:19dd:e000:

This IP address has been reported a total of 12 times from 11 distinct sources. 2a03:b0c0:3:f0:0:1:19dd:e000 was first reported on September 5th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ph	2026-06-09 12:31:41 (3 weeks ago)	Bad web bot attempting to run wp-admin on non-WP site	Hacking Bad Web Bot Web App Attack
🇨🇦 dispensight	2026-05-19 15:01:02 (1 month ago)	ngrok traffic to secureleaf-fraud-api-v1.ngrok.io: 1 req(s) [GET:1] URIs: /favicon.ico. UA-class: Hu ... show more ngrok traffic to secureleaf-fraud-api-v1.ngrok.io: 1 req(s) [GET:1] URIs: /favicon.ico. UA-class: Human / Browser. UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Sa. Geo: Germany / DigitalOcean, LLC. Flags: datacenter/hosting, recon, threats:recon_path. Window: 2026-05-19T08:01:02-07:00 to 2026-05-19T08:01:02-07:00. show less	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-16 06:40:17 (3 months ago)	(mod_security) mod_security (id:217291) triggered by 2a03:b0c0:3:f0:0:1:19dd:e000 (Unknown): 1 in th ... show more (mod_security) mod_security (id:217291) triggered by 2a03:b0c0:3:f0:0:1:19dd:e000 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 02:40:09.931380 2026] [security2:error] [pid 27864:tid 27918] [client 2a03:b0c0:3:f0:0:1:19dd:e000:46687] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\ntimestamp. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|www.entjeter.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cntimestamp: \\x0d\\x0atimestamp"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.entjeter.com"] [uri "/track/open"] [unique_id "abelyflzNnldvwbwKz4V3wAAAVc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-02-12 08:40:39 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.311 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.311 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobi show less	Bad Web Bot Web App Attack
🇮🇩 Knightweb	2026-01-16 05:33:00 (5 months ago)	Automated web application scanning with reflected XSS probing of search parameters	Hacking Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-01-12 10:18:53 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-01-12T08:54:36Z Ray ID: 9bcb6e2099b09012 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15 show less	Bad Web Bot
🇫🇷 debaba	2026-01-11 03:32:14 (5 months ago)	3	Brute-Force Web App Attack
🇨🇦 1gz	2025-12-29 05:38:30 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /auth/verify/HyxGDIuHkpSHnLfQHAG8lPsRzPNKIhn2 UA: Mozilla/5.0 (iPhone, CPU iPhone OS 19_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 pinguin	2025-12-17 19:41:10 (6 months ago)	Triggered Cloudflare WAF (linkMaze) from DE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (linkMaze) from DE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 pinguin	2025-12-06 03:53:49 (6 months ago)	Triggered Cloudflare WAF (linkMaze) from DE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (linkMaze) from DE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 exxos	2025-10-13 15:03:01 (8 months ago)	Attacks with Bad user agents	Hacking
🇺🇸 COMPLEX	2025-09-05 15:31:47 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1.1 (GET method) Endpoint: / show less	Bad Web Bot

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:550:9005:2000::1a

🇫🇷 51.68.236.91

🇧🇬 78.128.114.118

🇳🇱 45.142.193.164

🇮🇩 36.95.139.149

🇬🇧 5.226.140.119

🇷🇴 2.57.122.238

🇦🇷 186.148.224.83

🇧🇷 45.71.123.230

🇨🇳 14.103.115.85

🇩🇪 213.209.159.228

🇳🇵 202.51.89.131

🇧🇷 190.89.137.141

🇨🇳 183.225.233.45

🇪🇸 89.35.62.163

🇳🇱 77.83.39.149

🇮🇪 34.244.61.126

🇬🇧 195.96.139.244

🇵🇸 185.21.120.72

🇯🇵 103.143.72.165