JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2620:18c:0:192::e0:142

2620:18c:0:192::e0:142 was found in our database!

This IP was reported 114 times. Confidence of Abuse is 18%: ?

18%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Emerald Onion
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396507
Domain Name	emeraldonion.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2620:18c:0:192::e0:142

Whois 2620:18c:0:192::e0:142

IP Abuse Reports for 2620:18c:0:192::e0:142:

This IP address has been reported a total of 114 times from 4 distinct sources. 2620:18c:0:192::e0:142 was first reported on July 12th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-02 12:47:46 (2 days ago)	Blocked by UFW (TCP on 52231) Source port: 21169 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 52231) Source port: 21169 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-27 04:22:15 (1 week ago)	Blocked by UFW (TCP on 54202) Source port: 27195 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 54202) Source port: 27195 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-26 05:22:02 (1 week ago)	Blocked by UFW (TCP on 47998) Source port: 65477 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 47998) Source port: 65477 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-25 11:12:28 (1 week ago)	Blocked by UFW (TCP on 63909) Source port: 50773 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 63909) Source port: 50773 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-11 19:40:49 (3 weeks ago)	Blocked by UFW (TCP on 46079) Source port: 62497 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 46079) Source port: 62497 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-11 00:05:30 (3 weeks ago)	Blocked by UFW (TCP on 65535) Source port: 7885 Packet length: 80 This report (for 2620:018c:0000:0 ... show more Blocked by UFW (TCP on 65535) Source port: 7885 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-07 11:54:12 (4 weeks ago)	Blocked by UFW (TCP on 52955) Source port: 45893 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 52955) Source port: 45893 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-06 11:00:30 (4 weeks ago)	Blocked by UFW (TCP on 37260) Source port: 53809 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 37260) Source port: 53809 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-05 18:15:22 (4 weeks ago)	Blocked by UFW (TCP on 39042) Source port: 44657 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 39042) Source port: 44657 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-04 18:50:06 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2620:18c:0:192::e0:142 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2620:18c:0:192::e0:142 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 14:49:59.507681 2026] [security2:error] [pid 15808:tid 15808] [client 2620:18c:0:192::e0:142:16887] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|microkerneltechnologies.com\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "microkerneltechnologies.com"] [uri "/config.backup"] [unique_id "afjqV8-puCZfTXOCEQSSygAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-04 12:58:11 (1 month ago)	Blocked by UFW (TCP on 49194) Source port: 51857 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 49194) Source port: 51857 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-03 20:27:22 (1 month ago)	Blocked by UFW (TCP on 48449) Source port: 17797 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 48449) Source port: 17797 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-26 21:02:42 (1 month ago)	2026-04-26 08:00:35,907 fail2ban.actions [7718]: NOTICE [tor] Ban 2620:18c:0:192::e0:142 202 ... show more 2026-04-26 08:00:35,907 fail2ban.actions [7718]: NOTICE [tor] Ban 2620:18c:0:192::e0:142 2026-04-26 12:01:30,810 fail2ban.actions [7718]: NOTICE [tor] Ban 2620:18c:0:192::e0:142 2026-04-26 18:01:28,641 fail2ban.actions [7718]: NOTICE [tor] Ban 2620:18c:0:192::e0:142 2026-04-26 21:01:26,055 fail2ban.actions [7718]: NOTICE [tor] Ban 2620:18c:0:192::e0:142 2026-04-27 00:02:41,805 fail2ban.actions [7718]: NOTICE [tor] Ban 2620:18c:0:192::e0:142 show less	Brute-Force
🇺🇸 xmission.com	2026-04-26 15:05:46 (1 month ago)	Blocked by UFW (TCP on 49211) Source port: 23503 Packet length: 80 This report (for 2620:018c:0000: ... show more Blocked by UFW (TCP on 49211) Source port: 23503 Packet length: 80 This report (for 2620:018c:0000:0192:0000:0000:00e0:0142) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-23 00:54:22 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2620:18c:0:192::e0:142 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2620:18c:0:192::e0:142 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 20:54:18.852468 2026] [security2:error] [pid 3280371:tid 3280371] [client 2620:18c:0:192::e0:142:14995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brbcash.com"] [uri "/wp-config.bak"] [unique_id "aeltuvoFsThLq3pfxQxnKQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 114 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.70.126.133

🇺🇸 172.69.58.194

🇸🇬 152.42.164.239

🇩🇪 130.12.181.106

🇮🇳 115.96.242.70

🇩🇪 102.220.160.42

🇺🇸 96.78.175.36

🇺🇸 66.249.66.166

🇳🇱 45.148.10.147

🇺🇸 40.80.204.149

🇺🇸 24.5.244.85

🇰🇷 211.228.218.47

🇳🇱 204.76.203.213

🇳🇱 204.76.203.18

🇺🇸 195.184.76.129

🇨🇳 175.178.110.121

🇺🇸 172.71.1.155

🇺🇸 172.70.130.246

🇺🇸 172.70.130.37

🇺🇸 172.70.100.101