JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2:4::104

Recent Activity IPv6 SLAAC Note

Abuse Confidence Score

20% Elevated

181 reports

27 reporters · latest 23 hours ago

ISP: Digitalcourage e.V.
Usage Type: University/College/School
ASN: AS60729
Domain Name: digitalcourage.de
Country: 🇩🇪 Germany
City: Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

181 from 27 distinct reporters

First reported

February 12th 2024

Most recent report

23 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 2 🇩🇰 Denmark 1

Most common categories Brute-Force 2 Web App Attack 2 Bad Web Bot 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-13 12:10:11 UTC · (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 07:10:03.472599 2025] [security2:error] [pid 29580:tid 29580] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 07:10:03.472599 2025] [security2:error] [pid 29580:tid 29580] [client 2a0b:f4c2:4::104:23425] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mfleetservice.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mfleetservice.com"] [uri "/.sql"] [unique_id "aT1XmyGhRGTX8_nCmCx0hQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-13 11:26:20 UTC · (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 06:26:14.412520 2025] [security2:error] [pid 26829:tid 26829] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 06:26:14.412520 2025] [security2:error] [pid 26829:tid 26829] [client 2a0b:f4c2:4::104:15147] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|prayers4america.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "prayers4america.com"] [uri "/.sql"] [unique_id "aT1NVkhmX9H8SjPP01DARAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-12 19:41:11 UTC · (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 12 14:41:01.547566 2025] [security2:error] [pid 14150:tid 14150] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 12 14:41:01.547566 2025] [security2:error] [pid 14150:tid 14150] [client 2a0b:f4c2:4::104:41027] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lowkeytiki.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lowkeytiki.com"] [uri "/owkeytiki_com.sql"] [unique_id "aTxvzauzHlblWU2G5JeykwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-12 18:32:25 UTC · (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 12 13:32:17.316695 2025] [security2:error] [pid 9266:tid 9266] [client 2a0b:f4c2:4::10 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 12 13:32:17.316695 2025] [security2:error] [pid 9266:tid 9266] [client 2a0b:f4c2:4::104:42259] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|polymermembranes.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "polymermembranes.com"] [uri "/latest.sql"] [unique_id "aTxfsbQP1N7eRBrZhgvRBgAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 04:27:27 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 23:27:22.892155 2025] [security2:error] [pid 27304:tid 27304] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 23:27:22.892155 2025] [security2:error] [pid 27304:tid 27304] [client 2a0b:f4c2:4::104:9465] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|swcbsa.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "swcbsa.org"] [uri "/swcb.sql"] [unique_id "aTOwqheY13MwepkGetwPEwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 15:21:44 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 10:21:41.102770 2025] [security2:error] [pid 4400:tid 4423] [client 2a0b:f4c2:4::10 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 10:21:41.102770 2025] [security2:error] [pid 4400:tid 4423] [client 2a0b:f4c2:4::104:18063] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|fibertechsystems.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fibertechsystems.com"] [uri "/f.sql"] [unique_id "aTL4hfZZra6JoAZ8eRlzfAAAAJU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-04 18:46:45 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 13:46:36.034185 2025] [security2:error] [pid 11586:tid 11586] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 13:46:36.034185 2025] [security2:error] [pid 11586:tid 11586] [client 2a0b:f4c2:4::104:38849] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mariettacaseyclub.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mariettacaseyclub.org"] [uri "/ttacaseyclub.sql"] [unique_id "aTHXDB-z1MTomASGxrDKBgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-04 11:31:19 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 06:31:09.497344 2025] [security2:error] [pid 31867:tid 31867] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 06:31:09.497344 2025] [security2:error] [pid 31867:tid 31867] [client 2a0b:f4c2:4::104:42817] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lesbidrawn.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lesbidrawn.com"] [uri "/esbidrawn.sql"] [unique_id "aTFw_WEokPK2yCP9TGvQrQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 06:12:18 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 01:12:13.090198 2025] [security2:error] [pid 1338:tid 1338] [client 2a0b:f4c2:4::10 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 01:12:13.090198 2025] [security2:error] [pid 1338:tid 1338] [client 2a0b:f4c2:4::104:64675] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|midwayisland.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "midwayisland.com"] [uri "/ayisland.sql"] [unique_id "aS_UvTQQ_BHt2STzG7QzkQAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 08:24:42 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 03:24:36.816880 2025] [security2:error] [pid 22358:tid 22358] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 03:24:36.816880 2025] [security2:error] [pid 22358:tid 22358] [client 2a0b:f4c2:4::104:49115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|majesticsolutions.co\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "majesticsolutions.co"] [uri "/csolutions_com.sql"] [unique_id "aSlcRMfVm-VAdZEc_ZLn9AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-20 01:17:13 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 19 20:17:04.215306 2025] [security2:error] [pid 1413630:tid 1413671] [client 2a0b:f4c2 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 19 20:17:04.215306 2025] [security2:error] [pid 1413630:tid 1413671] [client 2a0b:f4c2:4::104:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mindgardens.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindgardens.com"] [uri "/ww.sql"] [unique_id "aR5sEF7BCzTivwilqAaB-QAAAcs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-19 13:09:23 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 19 08:09:14.456209 2025] [security2:error] [pid 25164:tid 25164] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 19 08:09:14.456209 2025] [security2:error] [pid 25164:tid 25164] [client 2a0b:f4c2:4::104:42775] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mixmediallc.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mixmediallc.com"] [uri "/mixmedial.sql"] [unique_id "aR3BevVbUF3XxrVLe8mhngAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-16 22:21:08 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 17:21:02.365107 2025] [security2:error] [pid 16001:tid 16001] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 17:21:02.365107 2025] [security2:error] [pid 16001:tid 16001] [client 2a0b:f4c2:4::104:64681] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thenursingsite.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thenursingsite.com"] [uri "/rsingsite_com.sql"] [unique_id "aRpOTj-YZM52xHicBZvxNgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-15 11:09:31 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 06:09:26.406204 2025] [security2:error] [pid 16704:tid 16704] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 06:09:26.406204 2025] [security2:error] [pid 16704:tid 16704] [client 2a0b:f4c2:4::104:29085] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|transcapitalsolutions.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "transcapitalsolutions.com"] [uri "/transcapit.sql"] [unique_id "aRhfZjddgCbD4b2X_EWYfQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 05:06:48 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 00:06:39.433970 2025] [security2:error] [pid 20095:tid 20095] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 00:06:39.433970 2025] [security2:error] [pid 20095:tid 20095] [client 2a0b:f4c2:4::104:40291] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|drjasonkolber.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drjasonkolber.com"] [uri "/jasonkolber.sql"] [unique_id "aRQV3-m1rcyhFvFjp476LQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 46 to 60 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.180.246.5

🇺🇸 216.25.90.17

🇩🇪 213.209.159.242

🇺🇸 205.210.31.64

🇺🇸 192.3.248.179

🇺🇸 157.173.193.124

🇫🇮 147.185.133.88

🇺🇸 103.73.54.48

🇳🇱 77.239.124.148

🇸🇬 35.240.149.219

🇨🇦 35.203.122.251

🇯🇵 34.85.73.248

🇺🇸 20.169.91.29

🇹🇷 212.64.201.210

🇺🇸 72.215.33.32

🇫🇷 51.75.194.44

🇳🇱 45.148.10.141

🇳🇱 34.147.44.170

🇧🇪 34.140.1.153

🇨🇦 34.47.61.35