JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2:1::1

2a0b:f4c2:1::1 was found in our database!

This IP was reported 1,309 times. Confidence of Abuse is 50%: ?

50%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	CIA TRIAD SECURITY LLC
Usage Type	Fixed Line ISP
ASN	AS60729
Domain Name	relayon.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2:1::1

Whois 2a0b:f4c2:1::1

IP Abuse Reports for 2a0b:f4c2:1::1:

This IP address has been reported a total of 1,309 times from 120 distinct sources. 2a0b:f4c2:1::1 was first reported on December 11th 2020, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-09-01 12:25:41 (1 hour ago)	Blocked by UFW (TCP on 51225) Source port: 52935 Packet length: 72 This report (for 2a0b:f4c2:0001: ... show more Blocked by UFW (TCP on 51225) Source port: 52935 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-31 20:44:43 (17 hours ago)	Blocked by UFW (TCP on 51225) Source port: 55329 Packet length: 72 This report (for 2a0b:f4c2:0001: ... show more Blocked by UFW (TCP on 51225) Source port: 55329 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-31 04:56:33 (1 day ago)	Blocked by UFW (TCP on 18050) Source port: 48479 Packet length: 72 This report (for 2a0b:f4c2:0001: ... show more Blocked by UFW (TCP on 18050) Source port: 48479 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-30 11:43:17 (2 days ago)	Blocked by UFW (TCP on 1) Source port: 22165 Packet length: 72 This report (for 2a0b:f4c2:0001:0000 ... show more Blocked by UFW (TCP on 1) Source port: 22165 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-08-29 23:25:28 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 19:25:22.022119 2026] [security2:error] [pid 1529266:tid 1529287] [client 2a0b:f4c2:1::1:44367] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.seips.org\|F\|2"] [data ".sassnet.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.seips.org"] [uri "/www.sassnet.com"] [unique_id "apNqYo286szWfQOiP2JWeQAAAUY"], referer: https://www.seips.org/links.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-29 20:25:47 (2 days ago)	Blocked by UFW (TCP on 8333) Source port: 56095 Packet length: 72 This report (for 2a0b:f4c2:0001:0 ... show more Blocked by UFW (TCP on 8333) Source port: 56095 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-29 05:33:41 (3 days ago)	Blocked by UFW (TCP on 50302) Source port: 7817 Packet length: 72 This report (for 2a0b:f4c2:0001:0 ... show more Blocked by UFW (TCP on 50302) Source port: 7817 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-28 16:20:11 (3 days ago)	Blocked by UFW (TCP on 8333) Source port: 19975 Packet length: 72 This report (for 2a0b:f4c2:0001:0 ... show more Blocked by UFW (TCP on 8333) Source port: 19975 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-28 01:45:08 (4 days ago)	Blocked by UFW (TCP on 51225) Source port: 57117 Packet length: 72 This report (for 2a0b:f4c2:0001: ... show more Blocked by UFW (TCP on 51225) Source port: 57117 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 Budyn	2026-08-27 10:22:56 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.xyz \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 xmission.com	2026-08-27 09:26:08 (5 days ago)	Blocked by UFW (TCP on 50302) Source port: 59757 Packet length: 72 This report (for 2a0b:f4c2:0001: ... show more Blocked by UFW (TCP on 50302) Source port: 59757 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-26 21:03:12 (5 days ago)	Blocked by UFW (TCP on 31909) Source port: 21971 Packet length: 72 This report (for 2a0b:f4c2:0001: ... show more Blocked by UFW (TCP on 31909) Source port: 21971 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-26 08:53:25 (6 days ago)	Blocked by UFW (TCP on 51225) Source port: 47169 Packet length: 72 This report (for 2a0b:f4c2:0001: ... show more Blocked by UFW (TCP on 51225) Source port: 47169 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-25 19:30:40 (6 days ago)	Blocked by UFW (TCP on 51225) Source port: 49155 Packet length: 72 This report (for 2a0b:f4c2:0001: ... show more Blocked by UFW (TCP on 51225) Source port: 49155 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-25 07:27:20 (1 week ago)	Blocked by UFW (TCP on 51225) Source port: 58317 Packet length: 72 This report (for 2a0b:f4c2:0001: ... show more Blocked by UFW (TCP on 51225) Source port: 58317 Packet length: 72 This report (for 2a0b:f4c2:0001:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 1309 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.50.175.193

🇨🇴 181.205.110.34

🇺🇸 167.172.119.80

🇨🇳 106.12.128.30

🇳🇱 193.47.62.69

🇹🇭 152.32.245.186

🇱🇧 109.110.102.80

🇮🇳 103.67.152.201

🇫🇷 85.217.140.9

🇩🇪 69.5.169.198

🇺🇸 66.132.186.243

🇨🇦 47.54.234.110

🇬🇧 149.5.1.104

🇹🇭 119.59.124.134

🇺🇸 64.188.22.160

🇺🇸 43.130.16.140

🇮🇪 18.201.132.21

🇷🇴 2.57.122.53

🇬🇧 217.154.35.203

🇳🇱 204.76.203.4