JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:c300:400::fe

2a04:c300:400::fe was found in our database!

This IP was reported 39 times. Confidence of Abuse is 88%: ?

88%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Advin Services LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22295
Domain Name	advinservers.com
Country	🇺🇸 United States of America
City	North Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:c300:400::fe

Whois 2a04:c300:400::fe

IP Abuse Reports for 2a04:c300:400::fe:

This IP address has been reported a total of 39 times from 17 distinct sources. 2a04:c300:400::fe was first reported on June 29th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-07-03 04:00:25 (1 hour ago)	(y4) Failed scan -byebye- from 2a04:c300:400::fe (Unknown): (CF_ENABLE)	Hacking
🇺🇸 TPI-Abuse	2026-07-02 19:26:19 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 15:26:14.317101 2026] [security2:error] [pid 11846:tid 11846] [client 2a04:c300:400::fe:60046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elgarage.com.mx"] [uri "/.git/HEAD"] [unique_id "aka7VvANsilCRZ9WLRQV4AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 19:02:52 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 15:02:45.886986 2026] [security2:error] [pid 28445:tid 28445] [client 2a04:c300:400::fe:45720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "egrabbagsale.com"] [uri "/.git/HEAD"] [unique_id "aka11XOML0PPS2EKLcqwzgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 kranem	2026-07-02 18:00:06 (11 hours ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 22295 (Advin Services LLC) Protocol: HTTP ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 22295 (Advin Services LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-07-02T17:13:20Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇮 smallhost_helsinki	2026-07-02 17:18:28 (11 hours ago)	Tried to access non existent path: /.git	Web App Attack
🇩🇪 Ba-Yu	2026-07-02 15:27:32 (13 hours ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 14:50:23 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 10:50:16.227890 2026] [security2:error] [pid 6935:tid 6935] [client 2a04:c300:400::fe:46870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwtlaw.com"] [uri "/.git/HEAD"] [unique_id "akZ6qCxbulHOUhW-1jedNQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-02 14:09:32 (15 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-02 12:22:25 (16 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 11:44:21 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 07:44:14.705392 2026] [security2:error] [pid 385:tid 385] [client 2a04:c300:400::fe:41318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kruizekontrhl.com.darkalleyproductions.com"] [uri "/.git/HEAD"] [unique_id "akZPDpzS0FW980MRnXOT9AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-07-02 06:05:49 (23 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 04:38:00 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:37:56.434192 2026] [security2:error] [pid 8589:tid 8589] [client 2a04:c300:400::fe:52468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buildpower.com"] [uri "/.git/HEAD"] [unique_id "akXrJG1jrM542ha6zFfFQwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-01 21:20:07 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 21:15:13 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 17:15:05.004904 2026] [security2:error] [pid 9311:tid 9311] [client 2a04:c300:400::fe:53748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "technicallydental.com"] [uri "/.git/HEAD"] [unique_id "akWDWf6W96-aiPkjnCfesgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 20:51:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:c300:400::fe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 16:51:16.986800 2026] [security2:error] [pid 11998:tid 11998] [client 2a04:c300:400::fe:48794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tekbit.com"] [uri "/.git/HEAD"] [unique_id "akV9xLERTVD25erQBSMLvwAAADM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.243.179.70

🇮🇳 223.184.251.237

🇺🇸 199.193.138.200

🇧🇷 190.89.137.233

🇲🇽 187.212.1.182

🇺🇸 165.22.151.136

🇧🇷 205.210.31.144

🇭🇰 199.45.155.89

🇷🇴 151.242.30.224

🇫🇮 147.185.133.45

🇺🇸 146.190.41.214

🇨🇦 139.177.196.100

🇧🇷 131.161.249.165

🇭🇰 122.10.114.125

🇮🇳 103.215.245.14

🇫🇷 91.196.152.180

🇨🇴 2800:1e0:d40:4:9999::202

🇲🇽 189.224.203.204

🇺🇸 157.230.223.165

🇭🇰 156.238.13.126