JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2:4::108

Activity Trending Down IPv6 SLAAC Note

Abuse Confidence Score

2% Caution

144 reports

21 reporters · latest 3 weeks ago

ISP: Digitalcourage e.V.
Usage Type: University/College/School
ASN: AS60729
Domain Name: digitalcourage.de
Country: 🇩🇪 Germany
City: Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

144 from 21 distinct reporters

First reported

March 13th 2024

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇮🇹 Italy 1

Most common categories Exploited Host 1 Bad Web Bot 1 Web App Attack 1 DDoS Attack 1 SSH 1

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-04-24 00:04:11 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 20:04:03.648632 2025] [security2:error] [pid 7713:tid 7713] [client 2a0b:f4c2:4::10 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 20:04:03.648632 2025] [security2:error] [pid 7713:tid 7713] [client 2a0b:f4c2:4::108:44073] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|webersource.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "webersource.com"] [uri "/administrator/backups/database.sql"] [unique_id "aAl_807cajRLPsLmQ2fvVAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 pm33	2025-04-23 09:17:02 UTC · (1 year ago)	Wordpress login attempts	Brute-Force
🇺🇸 TPI-Abuse	2025-04-18 13:22:12 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 09:22:05.869759 2025] [security2:error] [pid 3844146:tid 3844146] [client 2a0b:f4c2 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 09:22:05.869759 2025] [security2:error] [pid 3844146:tid 3844146] [client 2a0b:f4c2:4::108:61037] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|danielbrower.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "danielbrower.com"] [uri "/administrator/backups/database.sql"] [unique_id "aAJR_cU3lIHVmEdt7Y-k6gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-15 05:45:47 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 15 01:45:40.044487 2025] [security2:error] [pid 1448:tid 1448] [client 2a0b:f4c2:4::10 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 15 01:45:40.044487 2025] [security2:error] [pid 1448:tid 1448] [client 2a0b:f4c2:4::108:26479] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|skinnywheels.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "skinnywheels.com"] [uri "/administrator/backups/database-sql.sql"] [unique_id "Z_3yhHWHeJIRbUX4Wu6y_gAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-07 05:35:55 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 01:35:52.646687 2025] [security2:error] [pid 634823:tid 634823] [client 2a0b:f4c2:4 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 01:35:52.646687 2025] [security2:error] [pid 634823:tid 634823] [client 2a0b:f4c2:4::108:50861] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|goseethenurse.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "goseethenurse.com"] [uri "/database.sql"] [unique_id "Z_NkOPDs8h3dnG4utFacugAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-07 04:13:01 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 00:12:55.532285 2025] [security2:error] [pid 16117:tid 16117] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 00:12:55.532285 2025] [security2:error] [pid 16117:tid 16117] [client 2a0b:f4c2:4::108:45739] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|amp712.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "amp712.com"] [uri "/db.sql"] [unique_id "Z_NQx2KpSwXrwhSxiyIDRwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-05 04:07:29 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 05 00:07:22.210997 2025] [security2:error] [pid 710:tid 710] [client 2a0b:f4c2:4::108: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 05 00:07:22.210997 2025] [security2:error] [pid 710:tid 710] [client 2a0b:f4c2:4::108:19151] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|matt-bechtel.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "matt-bechtel.com"] [uri "/db.sql"] [unique_id "Z_CselXvmhkyD-DrN3xi5AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 06:51:40 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 02:51:34.286009 2025] [security2:error] [pid 27353:tid 27353] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 02:51:34.286009 2025] [security2:error] [pid 27353:tid 27353] [client 2a0b:f4c2:4::108:34363] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rotentendales.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rotentendales.com"] [uri "/wp-content/database.sql"] [unique_id "Z-4v9lLoUPBvUPj0a-f34QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-01 15:36:16 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 01 11:36:10.415177 2025] [security2:error] [pid 28219:tid 28219] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 01 11:36:10.415177 2025] [security2:error] [pid 28219:tid 28219] [client 2a0b:f4c2:4::108:39817] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gasoilliquidsdaily.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gasoilliquidsdaily.com"] [uri "/database.sql"] [unique_id "Z-wH6nBUUSPCsQiGHd-04QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-31 11:04:19 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 31 07:04:11.685611 2025] [security2:error] [pid 10550:tid 10550] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 31 07:04:11.685611 2025] [security2:error] [pid 10550:tid 10550] [client 2a0b:f4c2:4::108:4281] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lockdownclaim.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lockdownclaim.com"] [uri "/db_backup_file.sql"] [unique_id "Z-p2q5zMYGJEXJ5bP3Lh6wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-27 04:20:31 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 00:20:27.027941 2025] [security2:error] [pid 23992:tid 23992] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 00:20:27.027941 2025] [security2:error] [pid 23992:tid 23992] [client 2a0b:f4c2:4::108:12087] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|goglobex.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "goglobex.com"] [uri "/database.sql"] [unique_id "Z-TSC5zoBDu3QuA9Y1S7UgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-26 11:25:25 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 26 07:25:17.975470 2025] [security2:error] [pid 1918644:tid 1918644] [client 2a0b:f4c2 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 26 07:25:17.975470 2025] [security2:error] [pid 1918644:tid 1918644] [client 2a0b:f4c2:4::108:4979] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thefitzgeralds.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thefitzgeralds.org"] [uri "/database.sql"] [unique_id "Z-PkHYgGJjQ4JfYzQgiKcQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-20 23:01:22 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 20 19:01:19.856708 2025] [security2:error] [pid 769:tid 784] [client 2a0b:f4c2:4::108: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 20 19:01:19.856708 2025] [security2:error] [pid 769:tid 784] [client 2a0b:f4c2:4::108:35303] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|tomithai.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tomithai.com"] [uri "/db_backup_file.sql"] [unique_id "Z9yeP-Slo8lAlabJUPaZ3AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-13 04:05:14 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 13 00:05:07.352199 2025] [security2:error] [pid 16750:tid 16750] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 13 00:05:07.352199 2025] [security2:error] [pid 16750:tid 16750] [client 2a0b:f4c2:4::108:20397] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ahhhha.nl\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ahhhha.nl"] [uri "/wp-content/db.sql"] [unique_id "Z9JZc3nh6hNKHOJrVE7myAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-05 22:13:50 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 17:13:42.485848 2025] [security2:error] [pid 12554:tid 12554] [client 2a0b:f4c2:4:: ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 17:13:42.485848 2025] [security2:error] [pid 12554:tid 12554] [client 2a0b:f4c2:4::108:34535] [client 2a0b:f4c2:4::108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thesalonx.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thesalonx.com"] [uri "/db-backup.sql"] [unique_id "Z8jMljedPQS9KECAA-mX9AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 91 to 105 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 142.250.154.139

🇺🇦 109.87.145.134

🇧🇩 103.174.150.98

🇮🇩 103.148.235.249

🇩🇪 68.183.79.160

🇳🇱 45.148.10.152

🇸🇬 45.78.201.248

🇺🇸 34.169.120.175

🇺🇸 24.44.239.47

🇺🇸 199.244.54.47

🇧🇷 186.205.16.116

🇬🇧 165.227.227.159

🇺🇸 134.209.118.112

🇮🇳 115.96.64.164

🇨🇳 111.22.163.209

🇳🇱 109.160.32.157

🇺🇸 109.105.209.90

🇨🇳 42.230.221.86

🇹🇼 35.229.191.65

🇺🇸 34.162.47.97