JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0a:20c0:f001:307::4

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

100% Critical

124 reports

66 reporters · latest 59 minutes ago

ISP	Fidel Ernesto Geronimo Ramirez trading as Global Business Consulting, Geronimo Ramirez
Usage Type	Data Center/Web Hosting/Transit
ASN	AS264617
Domain Name	gercomnet.ch
Country	🇨🇭 Switzerland
City	Wallisellen, Zurich

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a0a:20c0:f001:307::4

Export CSV

This IP address has been reported a total of 124 times from 66 distinct sources. 2a0a:20c0:f001:307::4 was first reported on October 5th 2026, and the most recent report was 59 minutes ago. In the last 60 days, the top reporter locations were: Poland with 25 reports; Germany with 21 reports; United States of America with 18 reports. The most common categories in these recent reports were: Web App Attack 90 times; Hacking 42 times; Bad Web Bot 35 times; Brute-Force 22 times; Port Scan 11 times; Other 17 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 as211431.net	2026-10-07 21:34:21 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CH. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CH. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.86 YaBrowser/21.3.0.663 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 Klaverstyn	2026-10-07 20:45:29 (1 week ago)	Excessive HTTP request rate	Web App Attack
🇮🇹 VHosting	2026-10-07 19:25:03 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇵🇱 Budyn	2026-10-07 18:37:32 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: registry.teddypot.website \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Edg/92.0.902.55 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇫🇷 cityhunter_rhone	2026-10-07 15:15:04 (1 week ago)	Mercurius trap auto report \| source=TRAP_403 \| last_seen=2026-10-06 05:07:05 \| hits_403=1 \| hits_404 ... show more Mercurius trap auto report \| source=TRAP_403 \| last_seen=2026-10-06 05:07:05 \| hits_403=1 \| hits_404=0 \| ip=2a0a:20c0:f001:307::4 \| sample_uri=/.well-known/security.txt show less	Port Scan Hacking Web App Attack
🇫🇮 23p02732	2026-10-06 15:17:00 (1 week ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇫🇷 cityhunter_rhone	2026-10-06 15:15:03 (1 week ago)	Mercurius trap auto report \| source=TRAP_403 \| last_seen=2026-10-06 05:07:05 \| hits_403=1 \| hits_404 ... show more Mercurius trap auto report \| source=TRAP_403 \| last_seen=2026-10-06 05:07:05 \| hits_403=1 \| hits_404=0 \| ip=2a0a:20c0:f001:307::4 \| sample_uri=/.well-known/security.txt show less	Port Scan Hacking Web App Attack
🇵🇱 Budyn	2026-10-06 12:00:31 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sweetpuddingtrap.xyz \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 YaBrowser/21.3.3.230 Yowser/2.5 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 technojoe99	2026-10-06 08:32:11 (1 week ago)	Exploit scan from 2a0a:20c0:f001:307::4. GET /.well-known/security.txt HTTP/1.1.	Web App Attack
🇵🇱 Budyn	2026-10-06 06:58:22 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.sweetpuddingtrap.xyz \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.164 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇦🇺 MAGIC	2026-10-06 04:06:21 (1 week ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 cityhunter_rhone	2026-10-06 03:10:03 (1 week ago)	Mercurius trap auto report \| source=TRAP_AND_APACHE_DENIED \| last_seen=2026-10-06 05:07:12 \| hits_40 ... show more Mercurius trap auto report \| source=TRAP_AND_APACHE_DENIED \| last_seen=2026-10-06 05:07:12 \| hits_403=7 \| hits_404=0 \| ip=2a0a:20c0:f001:307::4 \| sample_uri=/.well-known/security.txt show less	Port Scan Hacking Web App Attack
🇵🇱 Budyn	2026-10-06 02:47:21 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sql.teddypot.site \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 YaBrowser/21.5.3.740 Yowser/2.5 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-10-05 22:40:14 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: radius.teddypot.store \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇮🇹 VHosting	2026-10-05 22:40:04 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 106 to 120 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 200.138.46.234

🇨🇴 190.90.234.244

🇲🇽 187.188.224.189

🇫🇷 163.172.66.206

🇺🇸 142.93.254.185

🇮🇳 103.220.159.225

🇫🇷 90.126.16.234

🇨🇦 85.217.149.17

🇪🇸 79.117.156.108

🇺🇸 205.210.31.93

🇷🇴 193.32.162.84

🇧🇷 191.5.101.81

🇹🇷 188.124.23.4

🇭🇰 185.242.235.139

🇨🇳 180.153.236.171

🇸🇦 176.44.17.44

🇨🇳 175.4.130.152

🇺🇸 162.216.150.183

🇺🇸 138.68.239.229

🇨🇳 121.29.149.22