JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4f8:13a:1f0a::2

2a01:4f8:13a:1f0a::2 was found in our database!

This IP was reported 1,011 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4f8:13a:1f0a::2

Whois 2a01:4f8:13a:1f0a::2

IP Abuse Reports for 2a01:4f8:13a:1f0a::2:

This IP address has been reported a total of 1,011 times from 112 distinct sources. 2a01:4f8:13a:1f0a::2 was first reported on February 9th 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jbcrn	2026-08-26 19:37:24 (2 hours ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercia ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Commercial scrapers, ruleset: commercial-scrapers. Requested honeypot path: /robots.txt. User-Agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) show less	Bad Web Bot Web App Attack
🇫🇷 claude CALVET	2026-08-25 13:04:12 (1 day ago)	gew-Joomla User : try to access forms...	Hacking
🇩🇪 LRob	2026-08-25 12:34:17 (1 day ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| path: /robots.txt (+1 more) \| 2026-08-25 12:34 UTC show less	Bad Web Bot
🇵🇱 Budyn	2026-08-25 09:39:27 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.teddypot.site \| URI: /backup.sql \| UA: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-08-25 09:27:53 (1 day ago)	Scanner hitting /robots.txt on () — aaguard	Brute-Force Port Scan
🇵🇱 nakordoni.eu	2026-08-25 03:30:03 (1 day ago)	Blocked by nakordoni.eu automated security: nakordoni-dc-ratelimit. Jail: nakordoni-dc-ratelimit, 21 ... show more Blocked by nakordoni.eu automated security: nakordoni-dc-ratelimit. Jail: nakordoni-dc-ratelimit, 21 matches. ISP: Hetzner Online GmbH (DE), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-24 20:14:21 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.teddypot.store \| URI: /backup.sql \| UA: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 16:38:48 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13a:1f0a::2 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210730) triggered by 2a01:4f8:13a:1f0a::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 12:38:43.863416 2026] [security2:error] [pid 18831:tid 18831] [client 2a01:4f8:13a:1f0a::2:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.swarnar.com\|F\|2"] [data ".indogram.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.swarnar.com"] [uri "/www.indogram.com"] [unique_id "aoxzk6l92g1Jo3TCOqhSuQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-24 14:58:42 (2 days ago)	2a01:4f8:13a:1f0a::2 - - [24/Aug/2026:22:56:45 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%86%C2%8D%C3% ... show more 2a01:4f8:13a:1f0a::2 - - [24/Aug/2026:22:56:45 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A5%C2%86%C2%8D%C3%A9%C2%81%C2%87%C3%AF%C2%BC%C2%8E%C3%A7%C2%91%C2%AA%C3%A9%C2%BA%C2%97%C3%A7%C2%9A%C2%87%C3%A5%C2%90%C2%8E%C3%A3%C2%80%C2%8B%C3%A7%C2%B6%C2%B2%C3%A4%C2%B8%C2%8A%C3%A6%C2%94%C2%BE%C3%A6%C2%98%C2%A0/ HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2a01:4f8:13a:1f0a::2 - - [24/Aug/2026:22:57:44 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A4%C2%B8%C2%80%C3%A5%C2%A4%C2%AB%C3%A4%C2%B8%C2%80%C3%A5%C2%A6%C2%BB%C3%A3%C2%80%C2%8B/ HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2a01:4f8:13a:1f0a::2 - - [24/Aug/2026:22:57:50 +0800] "GET /%C3%A3%C2%80%C2%8A%C3%A4%C2%B8%C2%80%C3%A5%C2%A4%C2%AB%C3%A4%C2%B8%C2%80%C3%A5%C2%A6%C2%BB%C3%A3%C2%80%C2%8B%C3%A7%C2%B6%C2%B2%C3%A4%C2%B8%C2%8A%C3%A4%C2%BA%C2%92%C3%A5%C2%8B%C2%95%C3%A7%C2%89%C2%88/ HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2a01:4f8:1 ... show less	Bad Web Bot Web App Attack
Anonymous	2026-08-23 13:48:28 (3 days ago)	Scanner hitting /robots.txt on () — aaguard	Brute-Force Port Scan
🇩🇪 bazter.pro	2026-08-22 19:07:54 (4 days ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇺🇸 www.winos.me	2026-08-22 05:09:31 (4 days ago)	Malicious bot scraper	Port Scan Bad Web Bot
Anonymous	2026-08-22 01:59:45 (4 days ago)	Automated web probe/scanner blocked at the edge (WorldTree fleet). Signature: scanner_ua. Example re ... show more Automated web probe/scanner blocked at the edge (WorldTree fleet). Signature: scanner_ua. Example request: /articles/the-dutch-model-for-education-balancing-structure-and-student-success/ on teacher-tea.com show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-21 21:44:44 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 claude CALVET	2026-08-21 16:50:55 (5 days ago)	gew-Joomla User : try to access forms...	Hacking

Showing 1 to 15 of 1011 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 103.26.136.173

🇺🇸 35.185.2.88

🇫🇷 2400:cb00:986:1000:74b3:d2a2:ca4e:7d80

🇺🇸 172.68.174.169

🇸🇬 167.172.94.203

🇭🇰 156.224.82.122

🇨🇳 119.96.159.237

🇨🇳 114.228.158.115

🇺🇸 104.23.160.48

🇦🇿 104.22.135.132

🇸🇬 103.134.154.246

🇺🇸 67.187.98.225

🇬🇧 62.60.130.253

🇧🇬 193.24.211.230

🇺🇸 172.68.175.11

🇬🇧 109.181.226.4

🇺🇸 104.23.160.125

🇺🇸 103.215.74.213

🇻🇳 103.72.96.166

🇫🇷 91.196.152.218