JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:c300:400::ee

2a04:c300:400::ee was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Advin Services LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22295
Domain Name	advinservers.com
Country	🇺🇸 United States of America
City	North Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:c300:400::ee

Whois 2a04:c300:400::ee

IP Abuse Reports for 2a04:c300:400::ee:

This IP address has been reported a total of 46 times from 21 distinct sources. 2a04:c300:400::ee was first reported on July 1st 2026, and the most recent report was 16 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-02 14:38:13 (16 minutes ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 10:38:07.974836 2026] [security2:error] [pid 23573:tid 23573] [client 2a04:c300:400::ee:29456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.dcmillerjr.com"] [uri "/.env"] [unique_id "akZ3z-WY0Ggi9wpWXEo1sgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-07-02 12:19:50 (2 hours ago)	2a04:c300:400::ee - - [02/Jul/2026:14:19:50 +0200] "GET /.git/config HTTP/1.1" 404 153 "-" "Mozilla/ ... show more 2a04:c300:400::ee - - [02/Jul/2026:14:19:50 +0200] "GET /.git/config HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" ... show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-02 11:50:33 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-02 11:44:21 (3 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 debaba	2026-07-02 06:19:54 (8 hours ago)	[02/Jul/2026:06:19:53.932137 +0000] akYDCbE0B7cgtRcJyHX3GAAAAMA 2a04:c300:400::ee 49052 127.0.0.1 70 ... show more [02/Jul/2026:06:19:53.932137 +0000] akYDCbE0B7cgtRcJyHX3GAAAAMA 2a04:c300:400::ee 49052 127.0.0.1 7081 [02/Jul/2026:06:19:53.934998 +0000] akYDCbE0B7c ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 05:58:05 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:57:57.631560 2026] [security2:error] [pid 25006:tid 25006] [client 2a04:c300:400::ee:61526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.techimprints.com"] [uri "/.env.development"] [unique_id "akX95RNMSr1JS2iOGbRv5wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 04:44:26 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:44:19.301648 2026] [security2:error] [pid 12377:tid 12377] [client 2a04:c300:400::ee:7420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rotarymagnetics.com"] [uri "/api/.env"] [unique_id "akXsozNMUlBOlIVrwceIbAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 04:07:19 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:07:14.067743 2026] [security2:error] [pid 1926:tid 1926] [client 2a04:c300:400::ee:2458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "villamarehiltonhead.empoweruohio.org"] [uri "/.env"] [unique_id "akXj8qDR7hroxfjSSBclkQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:08:45 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:08:39.097436 2026] [security2:error] [pid 22727:tid 22727] [client 2a04:c300:400::ee:60930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mwrn.com"] [uri "/.env"] [unique_id "akXWN3u3loYPrTOiFNXufwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 02:35:55 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 22:35:50.988709 2026] [security2:error] [pid 378:tid 378] [client 2a04:c300:400::ee:41124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.soulwolf.com"] [uri "/.env"] [unique_id "akXOhq0Z8CkxiKHxBnXWywAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 01:53:22 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 21:53:15.953962 2026] [security2:error] [pid 27483:tid 27483] [client 2a04:c300:400::ee:46044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tollcrestdairy.com"] [uri "/.env"] [unique_id "akXEi4Hrps9_fwueiZthcwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-02 01:01:30 (13 hours ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-02 00:27:31 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::ee (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 20:27:24.425659 2026] [security2:error] [pid 30532:tid 30532] [client 2a04:c300:400::ee:17788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.addisonkinkade.com"] [uri "/.env"] [unique_id "akWwbCozo5-ivdw9CpR_JQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-07-02 00:14:34 (14 hours ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-02 00:07:17 (14 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇴 181.232.191.255

🇯🇵 181.214.136.22

🇦🇷 149.78.60.101

🇦🇷 149.78.40.83

🇦🇷 129.224.215.244

🇵🇭 112.208.175.100

🇦🇹 81.16.152.2

🇱🇹 62.60.130.219

🇬🇧 35.203.210.228

🇺🇸 23.162.40.58

🇺🇸 216.218.206.96

🇦🇷 181.209.76.203

🇧🇷 179.106.174.186

🇯🇵 172.64.213.45

🇯🇵 172.64.213.43

🇩🇪 165.227.159.13

🇺🇸 162.216.150.144

🇦🇷 149.78.55.38

🇦🇷 149.78.45.10

🇦🇷 149.78.35.101