JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a03:4000:27:36:c813:6dff:fe0e:b93e

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

12% Caution

99 reports

15 reporters · latest 3 days ago

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a03:4000:27:36:c813:6dff:fe0e:b93e

This IP address has been reported a total of 99 times from 15 distinct sources. 2a03:4000:27:36:c813:6dff:fe0e:b93e was first reported on December 8th 2022, and the most recent report was 3 days ago. In the last 60 days, the only reporter location was: United States of America with 4 reports. The most common categories in these recent reports were: Port Scan 3 times; Web App Attack 1 time; Brute-Force 1 time; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-27 14:08:16 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 2a03:4000:27:36:c813:6dff:fe0e:b93e (Unknown): ... show more (mod_security) mod_security (id:225170) triggered by 2a03:4000:27:36:c813:6dff:fe0e:b93e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 10:08:10.513877 2026] [security2:error] [pid 10875:tid 10875] [client 2a03:4000:27:36:c813:6dff:fe0e:b93e:20624] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|garanta.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "garanta.co"] [uri "/wp-json/wp/v2/users"] [unique_id "arkjSvB-YbVUpt5nzG898gAAADA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-30 05:15:51 (1 month ago)	Blocked by UFW (TCP on 35814) Source port: 9100 Packet length: 2308 This report (for 2a03:4000:0027 ... show more Blocked by UFW (TCP on 35814) Source port: 9100 Packet length: 2308 This report (for 2a03:4000:0027:0036:c813:6dff:fe0e:b93e) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-22 05:21:01 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 30144 Packet length: 80 This report (for 2a03:4000:0027:0 ... show more Blocked by UFW (TCP on 8333) Source port: 30144 Packet length: 80 This report (for 2a03:4000:0027:0036:c813:6dff:fe0e:b93e) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-19 17:15:28 (1 month ago)	Blocked by UFW (TCP on 46326) Source port: 9100 Packet length: 96 This report (for 2a03:4000:0027:0 ... show more Blocked by UFW (TCP on 46326) Source port: 9100 Packet length: 96 This report (for 2a03:4000:0027:0036:c813:6dff:fe0e:b93e) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-14 17:40:37 (2 months ago)	Blocked by UFW (TCP on 9999) Source port: 48486 Packet length: 80 This report (for 2a03:4000:0027:0 ... show more Blocked by UFW (TCP on 9999) Source port: 48486 Packet length: 80 This report (for 2a03:4000:0027:0036:c813:6dff:fe0e:b93e) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Ping of Death
🇺🇸 xmission.com	2026-07-01 06:35:31 (2 months ago)	Blocked by UFW (TCP on 39340) Source port: 9000 Packet length: 2300 This report (for 2a03:4000:0027 ... show more Blocked by UFW (TCP on 39340) Source port: 9000 Packet length: 2300 This report (for 2a03:4000:0027:0036:c813:6dff:fe0e:b93e) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-06 19:17:11 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:4000:27:36:c813:6dff:fe0e:b93e (Unknown): ... show more (mod_security) mod_security (id:210730) triggered by 2a03:4000:27:36:c813:6dff:fe0e:b93e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 15:17:06.897862 2026] [security2:error] [pid 28903:tid 28903] [client 2a03:4000:27:36:c813:6dff:fe0e:b93e:19640] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bluemarineboats.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluemarineboats.com"] [uri "/.sql"] [unique_id "afuTsgxFwAY7z-7HjUTZUQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:03:37 (5 months ago)	2026-04-26 08:00:44,988 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:4000:27:36:c813:6dff: ... show more 2026-04-26 08:00:44,988 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:4000:27:36:c813:6dff:fe0e:b93e 2026-04-26 12:01:36,422 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:4000:27:36:c813:6dff:fe0e:b93e 2026-04-26 18:01:34,085 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:4000:27:36:c813:6dff:fe0e:b93e 2026-04-26 21:01:31,564 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:4000:27:36:c813:6dff:fe0e:b93e 2026-04-27 00:03:36,561 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:4000:27:36:c813:6dff:fe0e:b93e show less	Brute-Force
🇺🇸 xmission.com	2026-03-25 11:58:58 (6 months ago)	Blocked by UFW (TCP on 9999) Source port: 57438 Packet length: 80 This report (for 2a03:4000:0027:0 ... show more Blocked by UFW (TCP on 9999) Source port: 57438 Packet length: 80 This report (for 2a03:4000:0027:0036:c813:6dff:fe0e:b93e) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Ping of Death
🇺🇸 ipblock.com	2026-03-11 12:26:00 (6 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-02 18:32:51 (6 months ago)	Blocked by UFW (TCP on 8333) Source port: 62076 Packet length: 80 This report (for 2a03:4000:0027:0 ... show more Blocked by UFW (TCP on 8333) Source port: 62076 Packet length: 80 This report (for 2a03:4000:0027:0036:c813:6dff:fe0e:b93e) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 gnom4ik	2026-02-24 07:19:34 (7 months ago)	ban-reviewer auto report; ip=2a03:4000:27:36:c813:6dff:fe0e:b93e; scenario=http:scan; verdict=valid_ ... show more ban-reviewer auto report; ip=2a03:4000:27:36:c813:6dff:fe0e:b93e; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-02-19 17:04:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 2a03:4000:27:36:c813:6dff:fe0e:b93e (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a03:4000:27:36:c813:6dff:fe0e:b93e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 12:04:03.256798 2026] [security2:error] [pid 13217:tid 13230] [client 2a03:4000:27:36:c813:6dff:fe0e:b93e:33758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.anshinholdings.com"] [uri "/.git/config"] [unique_id "aZdCg3tQ4O2VKGu10BDXzAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Bensay	2026-02-03 11:26:34 (7 months ago)	[Tue Feb 03 12:26:33.746441 2026] [authz_core:error] [pid 1788006:tid 1788091] [client 2a03:4000:27: ... show more [Tue Feb 03 12:26:33.746441 2026] [authz_core:error] [pid 1788006:tid 1788091] [client 2a03:4000:27:36:c813:6dff:fe0e:b93e:24850] AH01630: client denied by server configuration: /var/www/empty/.sql [Tue Feb 03 12:26:33.903934 2026] [authz_core:error] [pid 1788005:tid 1788070] [client 2a03:4000:27:36:c813:6dff:fe0e:b93e:24866] AH01630: client denied by server configuration: /var/www/empty/back.sql ... show less	Hacking Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-02 22:59:37 (7 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-02-01. show less	Hacking Web App Attack SSH

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.238

🇵🇰 182.189.44.34

🇮🇩 160.22.126.54

🇨🇳 113.250.177.119

🇻🇳 103.241.43.193

🇮🇳 103.230.154.37

🇧🇼 102.134.169.32

🇺🇸 73.147.19.171

🇬🇧 35.203.211.55

🇩🇪 213.209.159.226

🇺🇸 195.210.105.102

🇩🇪 167.94.145.30

🇹🇼 211.75.198.217

🇧🇷 200.203.173.80

🇧🇷 191.210.73.43

🇳🇱 188.166.29.60

🇵🇱 176.53.159.197

🇳🇱 109.160.32.141

🇭🇰 101.36.125.2

🇩🇪 51.89.29.188