Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
This IP address has been reported a total of
136
times from
72 distinct
sources.
2a0a:20c0:f001:307::4 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Poland
with 28
reports;
Germany
with 25
reports;
United States of America
with 20
reports.
The most common categories in these recent reports were:
Web App Attack
98
times;
Hacking
47
times;
Bad Web Bot
39
times;
Brute-Force
24
times;
Port Scan
11
times;
Other
18
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"transaction":{"timestamp":"2026/10/09 11:55:21","unix_timestamp":1791546921174005696,"id":"GcNzvKH ...
show more{"transaction":{"timestamp":"2026/10/09 11:55:21","unix_timestamp":1791546921174005696,"id":"GcNzvKHhZXAcCONw","client_ip":"172.16.16.4","client_port":0,"host_ip":"","host_port":0,"server_id":"demo4.timvdberg.dev","request":{"method":"GET","protocol":"HTTP/1.1","uri":"/.well-known/security.txt","http_version":"","headers":{"accept":["*/*"],"accept-encoding":["gzip, br"],"accept-language":["en-US;q=0.8,en;q=0.7"],"cdn-loop":["cloudflare; loops=1"],"cf-connecting-ip":["2a0a:20c0:f001:307::4"],"cf-ipcountry":["CH"],"cf-ray":["a47d32209cd64d52-FRA"],"cf-visitor":["{\"scheme\":\"https\"}"],"host":["demo4.timvdberg.dev"],"user-agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 YaBrowser/21.5.2.638 Yowser/2.5 Safari/537.36"],"x-forwarded-for":["2a0a:20c0:f001:307::4, 172.68.195.158"],"x-forwarded-host":["demo4.timvdberg.dev"],"x-forwarded-port":["443"],"x-forwarded-proto":["https"],"x-forwarded-server":["2ce45b861460"],"x-real-ip":["
...
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 2a0a:20c0:f001:307::4 ge ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] The IP address 2a0a:20c0:f001:307::4 generated 5 local hits targeting api.majikah.solutions across endpoints including /, /favicon.ico, /robots.txt, /.well-known/security.txt, and /security.txt under the rate-limit tag. This activity correlates with an AbuseIPDB reputation score of 100% based on 39 external reports, with the most recent external report occurring on 2026-10-09T07:17:56.000Z. Likely motive: Automated reconnaissance and vulnerability enumeration.
show less
