JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a03:4000:5c:a57:84a7:b0ff:fe9f:a67

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

34 reports

23 reporters · latest 3 months ago

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 has been reported 34 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67

This IP address has been reported a total of 34 times from 23 distinct sources. 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 was first reported on June 16th 2026, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-06-17 07:28:36 (3 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: netcup GmbH Country: DE Method: POST Timestamp: 2026-06-17T07:28:36Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-06-17 06:42:50 (3 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: netcup GmbH Country: DE Method: POST Timestamp: 2026-06-17T06:42:50Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇮🇩 securejdprop	2026-06-17 06:10:40 (3 months ago)	This IP was detected by CrowdSec triggering custom/vpatch-xmlrpc-abuse. WAF block: custom/vpatch-xml ... show more This IP was detected by CrowdSec triggering custom/vpatch-xmlrpc-abuse. WAF block: custom/vpatch-xmlrpc-abuse from 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 (172.18.0.4) show less	Hacking
🇫🇷 Baking333	2026-06-17 05:06:39 (3 months ago)	[redacted] 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 - - [17/Jun/2026:06:06:38 +0100] "GET /[redacted] HTT ... show more [redacted] 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 - - [17/Jun/2026:06:06:38 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/51097 "http://[redacted]/[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" [redacted] 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 - - [17/Jun/2026:06:06:38 +0100] "GET / HTTP/1.1" 200 9306 0/175750 "https://[redacted]/[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" show less	Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-06-17 03:34:16 (3 months ago)	Cloudflare WAF: Request Path: /old/xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Moz ... show more Cloudflare WAF: Request Path: /old/xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: netcup GmbH Country: DE Method: GET Timestamp: 2026-06-17T03:34:16Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 ipblock.com	2026-06-17 02:32:00 (3 months ago)	IPBlock protected site ID [669-fx]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇨🇦 Not Fake	2026-06-17 01:22:23 (3 months ago)	$f2bV_matches	Web App Attack
🇪🇸 el-brujo	2026-06-17 00:21:57 (3 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: warzone.elhacker.net userAgent: Mozi ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: warzone.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0 Action: managed_challenge Source: firewallManaged ASN Description: netcup GmbH Country: DE Method: POST Timestamp: 2026-06-17T00:21:57Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-06-16 23:35:10 (3 months ago)	Cloudflare WAF: Request Path: /old/xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Moz ... show more Cloudflare WAF: Request Path: /old/xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0 Action: managed_challenge Source: firewallManaged ASN Description: netcup GmbH Country: DE Method: GET Timestamp: 2026-06-16T23:35:10Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2026-06-16 23:22:46 (3 months ago)	"GET /wp-admin/ HTTP/1.1"	Hacking Web App Attack
🇫🇷 Baking333	2026-06-16 23:01:32 (3 months ago)	[redacted] 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 - - [16/Jun/2026:22:02:58 +0100] "GET / HTTP/1.1" 200 ... show more [redacted] 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 - - [16/Jun/2026:22:02:58 +0100] "GET / HTTP/1.1" 200 9304 0/75061 "https://[redacted]/wp-admin" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" [redacted] 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 - - [16/Jun/2026:22:02:58 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/78831 "http://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" show less	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-16 22:24:27 (3 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 oralunal	2026-06-16 22:12:21 (3 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2026-06-16 21:20:42 (3 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇫🇷 Baking333	2026-06-16 21:02:52 (3 months ago)	[redacted] 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 - - [16/Jun/2026:22:02:47 +0100] "GET /[redacted] HTT ... show more [redacted] 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 - - [16/Jun/2026:22:02:47 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/36968 "http://[redacted]/[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" [redacted] 2a03:4000:5c:a57:84a7:b0ff:fe9f:a67 - - [16/Jun/2026:22:02:47 +0100] "GET / HTTP/1.1" 200 9306 2/2956551 "https://[redacted]/[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.202.115.216

🇮🇹 88.147.30.59

🇺🇸 70.169.21.144

🇨🇦 45.194.92.105

🇺🇸 20.65.202.176

🇺🇸 172.232.3.17

🇩🇪 167.86.93.31

🇺🇸 136.90.54.222

🇮🇳 103.206.227.122

🇮🇷 93.118.170.58

🇲🇾 49.124.131.248

🇩🇪 46.101.137.209

🇭🇰 39.109.116.214

🇺🇸 2604:a880:400:d1:0:5:db1:c001

🇫🇷 205.237.104.121

🇺🇸 104.207.155.133

🇺🇸 45.145.131.74

🇬🇧 35.203.211.188

🇺🇸 3.32.140.161

🇬🇧 185.192.69.106