JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a03:e600:100::9

Neutral Activity IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

80 reports

18 reporters · latest 2 months ago

ISP: Foundation for Applied Privacy
Usage Type: Data Center/Web Hosting/Transit
ASN: AS208323
Domain Name: appliedprivacy.net
Country: 🇦🇹 Austria
City: Vienna, Vienna

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a03:e600:100::9 has been reported 80 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

80 from 18 distinct reporters

First reported

June 8th 2023

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-08 15:00:51 UTC · (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 11:00:41.544172 2026] [security2:error] [pid 3048 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 11:00:41.544172 2026] [security2:error] [pid 30485:tid 30485] [client 2a03:e600:100::9:43494] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cosplayculture.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cosplayculture.com"] [uri "/backupdb.sql"] [unique_id "af36mXGFHY6oPU3BPWKkmAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-05-07 14:08:04 UTC · (6 months ago)	[ThuMay0716:08:02.1274272026][security2:error][pid555922:tid555947][client2a03:e600:100::9:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htac ... show more [ThuMay0716:08:02.1274272026][security2:error][pid555922:tid555947][client2a03:e600:100::9:0]ModSecurity:Accessdeniedwithcode403\(phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"casacarmen.ch\"][uri\"/cas.sql\"][unique_id\"afycwgK_JN3Pjn_36KgXsAAAAA4\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-30 21:34:05 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 17:34:01.563372 2026] [security2:error] [pid 9630 ... show more (mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 17:34:01.563372 2026] [security2:error] [pid 9630:tid 9630] [client 2a03:e600:100::9:37060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.ezsmiledental.com"] [uri "/.git/config"] [unique_id "afPKyVySWt9t9luUUdFanQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-30 09:31:38 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 05:31:31.181415 2026] [security2:error] [pid 3193 ... show more (mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 05:31:31.181415 2026] [security2:error] [pid 31935:tid 31982] [client 2a03:e600:100::9:56974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "la.productions"] [uri "/wp-config.bak"] [unique_id "afMhc4Ud8VRrX7EsFOG9BgAAAVA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:03:54 UTC · (6 months ago)	2026-04-26 08:00:47,125 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:e600:100::9 2026-04-26 12:01:37,685 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:e600:100::9 2026-04-26 18:01:35,337 fail2ban.actions [7718]: NOTICE [tor ... show more 2026-04-26 08:00:47,125 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:e600:100::9 2026-04-26 12:01:37,685 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:e600:100::9 2026-04-26 18:01:35,337 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:e600:100::9 2026-04-26 21:01:32,812 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:e600:100::9 2026-04-27 00:03:52,922 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:e600:100::9 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-26 20:02:20 UTC · (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 16:02:12.366381 2026] [security2:error] [pid 1195 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 16:02:12.366381 2026] [security2:error] [pid 11950:tid 11950] [client 2a03:e600:100::9:54418] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|internetnameregistration.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "internetnameregistration.com"] [uri "/intern.sql"] [unique_id "ae5vROlsUy0r7kmH8dPFSQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-04-26 04:46:06 UTC · (6 months ago)	[SunApr2606:46:01.1812312026][security2:error][pid1633765:tid1634046][client2a03:e600:100::9:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.ht ... show more [SunApr2606:46:01.1812312026][security2:error][pid1633765:tid1634046][client2a03:e600:100::9:0]ModSecurity:Accessdeniedwithcode403\(phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"allegraravizza.it\"][uri\"/zza_com.sql\"][unique_id\"ae2YiTSUECaP_mVy_IM2FwAAAcI\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-26 01:51:41 UTC · (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 21:51:32.462475 2026] [security2:error] [pid 1136 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 21:51:32.462475 2026] [security2:error] [pid 11369:tid 11369] [client 2a03:e600:100::9:47968] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|arsndetx.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "arsndetx.com"] [uri "/ars.sql"] [unique_id "ae1vpIOvYR5rxQf9D1dB4gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-25 04:51:38 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 00:51:31.137096 2026] [security2:error] [pid 2101 ... show more (mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 00:51:31.137096 2026] [security2:error] [pid 21010:tid 21010] [client 2a03:e600:100::9:39734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soonerstone.com"] [uri "/wp-config.php.backup.txt"] [unique_id "aexIUw289g6_teR19NhHPgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-22 20:17:34 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 16:17:26.279419 2026] [security2:error] [pid 1750 ... show more (mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 16:17:26.279419 2026] [security2:error] [pid 1750025:tid 1750025] [client 2a03:e600:100::9:53444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nuewines.com"] [uri "/wp-config.phpc"] [unique_id "aeks1kRa8q1BecSFFYv8twAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-18 08:54:17 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 04:54:10.875363 2026] [security2:error] [pid 2547 ... show more (mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 04:54:10.875363 2026] [security2:error] [pid 25476:tid 25487] [client 2a03:e600:100::9:48620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "annacaird.com"] [uri "/wp-config.php.sample"] [unique_id "aeNGsowizBz-kFKYd8W1CgAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-04-16 22:25:58 UTC · (6 months ago)	[FriApr1700:25:54.8163312026][security2:error][pid3125946:tid3125961][client2a03:e600:100::9:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"\^/wp-content/plugins/[\^/] /$readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt$\"atREQUEST_URI.[file ... show more [FriApr1700:25:54.8163312026][security2:error][pid3125946:tid3125961][client2a03:e600:100::9:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"\^/wp-content/plugins/[\^/] /$readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"larademarco.ch\"][uri\"/wp-content/plugins/\*\\\\\"\,\\\\\"/readme.txt\"][unique_id\"aeFh8lVe3blYO17X8LhiQQAAAQ0\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-13 03:54:00 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:53:44.679748 2026] [security2:error] [pid 4040 ... show more (mod_security) mod_security (id:210492) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:53:44.679748 2026] [security2:error] [pid 4040976:tid 4040976] [client 2a03:e600:100::9:60956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honweneedthis.com"] [uri "/wp-config.phpr"] [unique_id "adxoyBZajgr4rrIGQ3x4PgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 23:04:29 UTC · (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 19:04:21.503667 2026] [security2:error] [pid 1425 ... show more (mod_security) mod_security (id:210730) triggered by 2a03:e600:100::9 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 19:04:21.503667 2026] [security2:error] [pid 14257:tid 14257] [client 2a03:e600:100::9:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ruralcommunitycare.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ruralcommunitycare.org"] [uri "/re_com.sql"] [unique_id "ac2kdWPupK9NiyJZ4CkUxgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 windowsforum	2026-03-26 09:33:18 UTC · (7 months ago)	Spam bot registration: triggers=service_check, username=Alok office	Web Spam Bad Web Bot

Showing 16 to 30 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇦 185.99.3.37

🇨🇳 183.224.97.83

🇫🇮 95.216.145.72

🇮🇷 185.206.92.239

🇨🇳 175.30.45.59

🇨🇳 118.196.8.203

🇵🇱 109.196.37.68

🇮🇳 103.189.89.145

🇩🇪 69.5.169.53

🇺🇸 66.132.224.247

🇲🇾 49.125.201.69

🇩🇪 167.94.146.54

🇹🇼 125.229.194.81

🇺🇸 50.6.22.250

🇿🇦 4.168.232.22

🇺🇸 3.229.164.203

🇰🇷 218.51.148.194

🇳🇱 185.242.226.72

🇺🇸 147.185.132.42

🇺🇸 147.78.183.128