Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
This IP address has been reported a total of
334
times from
56 distinct
sources.
2001:4ba0:cafe:c13::1 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Finland
with 3
reports;
Canada
with 2
reports.
Over the same time period, 2001:4ba0:cafe:c13::1 has changed
country of origin 2 times.
The most common categories in these recent reports were:
Bad Web Bot
14
times;
Web App Attack
4
times;
Port Scan
2
times;
Brute-Force
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -56.04 (Bad < -10 / Very Bad < -20 / ...
show moreBot/Spam/Scrapper attack detected on www.handytreff.de - Score: -56.04 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.11
show less
Triggered Cloudflare WAF from DE.
Action taken: LINK_MAZE_INJECTED
ASN: 24961 (MYLOC-AS IP Backbone ...
show moreTriggered Cloudflare WAF from DE.
Action taken: LINK_MAZE_INJECTED
ASN: 24961 (MYLOC-AS IP Backbone of WIIT AG formerly myLoc managed IT AG)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-04-01T08:47:19Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54
show less
Blocked by conn-monitor: Rule http-old-chrome: Chrome version below 100 -- no legitimate user runs t ...
show moreBlocked by conn-monitor: Rule http-old-chrome: Chrome version below 100 -- no legitimate user runs this, always a bot (app: haemata, 1 hits)
show less
Blocked by conn-monitor: Rule http-old-chrome: Chrome version below 100 -- no legitimate user runs t ...
show moreBlocked by conn-monitor: Rule http-old-chrome: Chrome version below 100 -- no legitimate user runs this, always a bot (app: haemata, 1 hits)
show less
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 24961 (MYLOC-AS IP Backbone ...
show moreTriggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 24961 (MYLOC-AS IP Backbone of WIIT AG formerly myLoc managed IT AG)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-03-13T11:34:29Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54
show less
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -47.597 (Bad < -10 / Very Bad < -20 ...
show moreBot/Spam/Scrapper attack detected on www.handytreff.de - Score: -47.597 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.11
show less
