JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a01:4f8:1c18:34e7::1

2a01:4f8:1c18:34e7::1 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a01:4f8:1c18:34e7::1

Whois 2a01:4f8:1c18:34e7::1

IP Abuse Reports for 2a01:4f8:1c18:34e7::1:

This IP address has been reported a total of 20 times from 13 distinct sources. 2a01:4f8:1c18:34e7::1 was first reported on May 16th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2026-06-02 15:14:11 (3 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -107.785 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -107.785 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇫🇷 cityhunter_rhone	2026-06-02 14:00:05 (3 months ago)	Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=1 \| events=1 \| decision=datacenter ... show more Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=1 \| events=1 \| decision=datacenter \| actions=fingerprint_visit \| last_seen=2026-06-02 15:48:46 show less	Bad Web Bot Web App Attack
🇺🇸 abenage	2026-06-02 09:25:49 (3 months ago)	2a01:4f8:1c18:34e7::1 - - [02/Jun/2026:03:25:48 -0600] "GET /sitemap.xml HTTP/2.0" 404 162 "-" "Mozi ... show more 2a01:4f8:1c18:34e7::1 - - [02/Jun/2026:03:25:48 -0600] "GET /sitemap.xml HTTP/2.0" 404 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Bad Web Bot Web App Attack
🇩🇪 Reinhard	2026-05-31 09:21:20 (3 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
Anonymous	2026-05-31 06:09:53 (3 months ago)	2a01:4f8:1c18:34e7::1 - - [31/May/2026:08:09:52 +0200] "GET /sitemap.xml HTTP/1.1" 404 495 "-" "Mozi ... show more 2a01:4f8:1c18:34e7::1 - - [31/May/2026:08:09:52 +0200] "GET /sitemap.xml HTTP/1.1" 404 495 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1" ... show less	Web App Attack
🇳🇿 nixnut	2026-05-30 09:59:00 (3 months ago)		Web Spam Email Spam
🇺🇸 Alvino	2026-05-28 15:34:31 (3 months ago)	Blocked due to using a VPN or data center IP with abuse: 41	Web Spam VPN IP
Anonymous	2026-05-28 04:00:56 (3 months ago)	nginx-444 from fail2ban ...	Web App Attack
Anonymous	2026-05-25 16:25:29 (3 months ago)	[26/May/2026:02:25:28 +1000] "GET /sitemap.xml HTTP/1.1" 404 236 "Mozilla/5.0 (Macintosh; Intel Mac ... show more [26/May/2026:02:25:28 +1000] "GET /sitemap.xml HTTP/1.1" 404 236 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" show less	Hacking Web App Attack
🇺🇸 technojoe99	2026-05-24 11:05:00 (3 months ago)	Exploit scan from 2a01:4f8:1c18:34e7::1. GET /sitemap.xml HTTP/2.0.	Web App Attack
🇨🇦 leithzz	2026-05-22 14:43:47 (3 months ago)	Report by Cloudflare.Time: 2026-05-22T14:42:37Z	DDoS Attack
🇺🇸 abenage	2026-05-22 11:33:32 (3 months ago)	2a01:4f8:1c18:34e7::1 - - [22/May/2026:05:33:31 -0600] "GET /sitemap.xml HTTP/2.0" 404 564 "-" "Mozi ... show more 2a01:4f8:1c18:34e7::1 - - [22/May/2026:05:33:31 -0600] "GET /sitemap.xml HTTP/2.0" 404 564 "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 Lezetho	2026-05-22 04:00:16 (3 months ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-05-21 12:06:52 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2a01:4f8:1c18:34e7::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2a01:4f8:1c18:34e7::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 08:06:44.543101 2026] [security2:error] [pid 8014:tid 8014] [client 2a01:4f8:1c18:34e7::1:44814] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|worldchat.global\|F\|2"] [data ".texasbordertours.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "worldchat.global"] [uri "/cameronsol/www.texasbordertours.com"] [unique_id "ag71VLy-nuv9ungxkUbjGgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-21 07:20:16 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2a01:4f8:1c18:34e7::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2a01:4f8:1c18:34e7::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 03:20:12.748282 2026] [security2:error] [pid 27121:tid 27121] [client 2a01:4f8:1c18:34e7::1:36042] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|techspertnet.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "techspertnet.com"] [uri "/[email protected]"] [unique_id "ag6yLCacH8uo3YOFpWL-rAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c14::129

🇺🇿 213.230.127.104

🇺🇸 198.13.246.0

🇺🇸 188.211.250.189

🇺🇦 185.86.76.213

🇩🇪 165.227.167.63

🇻🇳 123.16.143.216

🇩🇪 94.130.187.251

🇮🇹 62.173.163.116

🇺🇸 209.139.98.95

🇺🇸 202.51.85.135

🇰🇪 197.248.207.138

🇳🇱 193.33.157.204

🇺🇸 172.236.111.98

🇺🇸 136.70.77.15

🇫🇷 92.184.141.226

🇳🇱 89.248.172.11

🇺🇸 65.49.1.162

🇺🇸 35.236.225.187

🇮🇩 203.30.221.70