JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2:1::1

2a0b:f4c2:1::1 was found in our database!

This IP was reported 1,320 times. Confidence of Abuse is 48%: ?

48%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	CIA TRIAD SECURITY LLC
Usage Type	University/College/School
ASN	AS60729
Domain Name	relayon.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2:1::1

Whois 2a0b:f4c2:1::1

IP Abuse Reports for 2a0b:f4c2:1::1:

This IP address has been reported a total of 1,320 times from 121 distinct sources. 2a0b:f4c2:1::1 was first reported on December 11th 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-11-25 17:57:01 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 25 12:56:52.852474 2024] [security2:error] [pid 1877:tid 1877] [client 2a0b:f4c2:1::1:8045] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.shaunthomas.com"] [uri "/.git/config"] [unique_id "Z0S6ZNyoRoWjMsyFAWXrLAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2024-11-23 05:10:06 (1 year ago)	Probing for Wordpress vulnerabilities	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-22 04:11:04 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 21 23:11:00.400258 2024] [security2:error] [pid 22972:tid 22972] [client 2a0b:f4c2:1::1:54431] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.garthp.com"] [uri "/.git/config"] [unique_id "Z0AEVOY_aHYsqbdpIHMfIQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-20 14:57:12 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 20 09:57:03.428315 2024] [security2:error] [pid 6721:tid 6721] [client 2a0b:f4c2:1::1:46061] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.midnight-tech.com"] [uri "/.git/config"] [unique_id "Zz34v_9REALxs9DfiePlVwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-20 10:14:32 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 20 05:14:24.674091 2024] [security2:error] [pid 20805:tid 20805] [client 2a0b:f4c2:1::1:8267] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.webwzl.com"] [uri "/.git/config"] [unique_id "Zz22gLqQ_9o-OHRPqhWhkgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-20 01:46:16 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 20:46:12.913658 2024] [security2:error] [pid 4464:tid 4596] [client 2a0b:f4c2:1::1:4113] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.kd2lst.us"] [uri "/.git/config"] [unique_id "Zz0_ZNK_IVh4GuSfcZN9FwAAAVY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-20 01:28:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 20:28:31.186747 2024] [security2:error] [pid 9767:tid 9767] [client 2a0b:f4c2:1::1:22675] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.highdesertrocketry.org"] [uri "/.git/config"] [unique_id "Zz07P6My_wZl8G1f8NxSewAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 XICTRON	2024-11-08 13:35:08 (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2024-11-07 03:40:48 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 22:40:41.109578 2024] [security2:error] [pid 2879:tid 2882] [client 2a0b:f4c2:1::1:64123] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robotics4fun.com"] [uri "/wp-config.php9"] [unique_id "Zyw2uVhfAzrAyl2nACzhCwAAAMA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-05 10:30:06 (1 year ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Hacking SQL Injection Web App Attack
🇦🇺 weblite	2024-11-04 15:56:38 (1 year ago)	WP_MALWARE_PROBE	Hacking Web App Attack
🇩🇪 Admins@FBN	2024-11-03 19:57:08 (1 year ago)	FW-PortScan: Traffic Blocked srcport=61897 dstport=443	Port Scan
🇵🇱 sefinek.net	2024-11-03 11:02:24 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) P ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) Protocol: HTTP/2 (method GET) Domain: stella.sefinek.net Endpoint: /favicon.ico Timestamp: 2024-11-03T10:06:17Z Ray ID: 8dcb8d00e926ca50 Rule ID: 61a9aeb040004a25a09c35e9bfb80913 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0 Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot
🇳🇱 BlueWire Hosting	2024-11-02 15:10:58 (1 year ago)	Probing for Wordpress vulnerabilities	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2024-11-02 14:19:59 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) P ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) Protocol: HTTP/2 (method GET) Domain: blocklist.sefinek.net Endpoint: /generated/v1/0.0.0.0/malicious/DandelionSprout-AntiMalwareHosts.fork.txt Query: ?_=7 Timestamp: 2024-11-02T12:21:17Z Ray ID: 8dc415620874ca33 Rule ID: 61a9aeb040004a25a09c35e9bfb80913 UA: Mozilla/5.0 (Android 12; Mobile; rv:128.0) Gecko/128.0 Firefox/128.0 Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot

Showing 1171 to 1185 of 1320 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 217.60.255.130

🇵🇰 39.34.134.67

🇲🇲 37.111.53.110

🇹🇭 1.0.244.14

🇨🇿 217.77.171.138

🇸🇬 193.37.32.201

🇲🇽 187.154.98.53

🇨🇴 181.48.81.172

🇲🇩 178.168.51.106

🇿🇦 165.165.115.48

🇧🇪 104.199.26.126

🇮🇳 103.206.104.58

🇮🇳 103.174.102.29

🇮🇩 103.10.120.172

🇷🇺 81.177.33.120

🇺🇸 76.79.213.69

🇳🇱 45.142.193.177

🇨🇳 36.32.156.43

🇧🇪 35.187.95.46

🇺🇸 4.249.17.209