JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2:1::1

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

48% Elevated

1,322 reports

121 reporters · latest 2 days ago

ISP	CIA TRIAD SECURITY LLC
Usage Type	University/College/School
ASN	AS60729
Domain Name	relayon.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a0b:f4c2:1::1

This IP address has been reported a total of 1,322 times from 121 distinct sources. 2a0b:f4c2:1::1 was first reported on December 11th 2020, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: United States of America with 78 reports; Turkey with 16 reports; Germany with 7 reports. The most common categories in these recent reports were: Port Scan 75 times; Web App Attack 25 times; Hacking 18 times; Bad Web Bot 6 times; Brute-Force 5 times; Other 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-07-22 17:56:51 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 22 13:56:42.688770 2024] [security2:error] [pid 32363:tid 32363] [client 2a0b:f4c2:1::1:15593] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.modeltdr.com"] [uri "/.git/config"] [unique_id "Zp6dWjPtSCHV5QNKb6EO3QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-22 16:49:21 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 22 12:49:14.015476 2024] [security2:error] [pid 19869:tid 19869] [client 2a0b:f4c2:1::1:45837] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.ospreylake.org"] [uri "/.git/config"] [unique_id "Zp6Niub4-0YJNCUM7WH-igAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-22 16:07:16 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 22 12:07:12.893111 2024] [security2:error] [pid 7119:tid 7119] [client 2a0b:f4c2:1::1:31283] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.thephysicsroom.com"] [uri "/.git/config"] [unique_id "Zp6DsEWek_ImOfCmTPF-sAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-22 15:51:18 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 22 11:51:14.615197 2024] [security2:error] [pid 14421:tid 14421] [client 2a0b:f4c2:1::1:56147] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.lamariposagallery.com"] [uri "/.git/config"] [unique_id "Zp5_8h0lFdUTED8fmcq8QQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-22 15:25:10 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 22 11:25:04.016684 2024] [security2:error] [pid 20344:tid 20344] [client 2a0b:f4c2:1::1:16141] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.aquatech-ind.com"] [uri "/.git/config"] [unique_id "Zp550Ek-9Cq7aqoTw9buLQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-19 06:46:49 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 19 02:46:44.927799 2024] [security2:error] [pid 5615:tid 5615] [client 2a0b:f4c2:1::1:25201] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|salsberggroup.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "salsberggroup.com"] [uri "/group.sql"] [unique_id "ZpoL1JOHn85JxXX6zAlTwgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-18 13:06:35 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 18 09:06:28.530839 2024] [security2:error] [pid 15702:tid 15702] [client 2a0b:f4c2:1::1:33911] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atreyu.net"] [uri "/wp-config.bak"] [unique_id "ZpkTVNhK-QJbiCyYL1GUSwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-17 14:57:25 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 17 10:57:18.387280 2024] [security2:error] [pid 32383:tid 32383] [client 2a0b:f4c2:1::1:7987] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|marjosse.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "marjosse.com"] [uri "/backup-2023.sql"] [unique_id "ZpfbzpGQkyzlWywHOFoGRAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cloudbuster	2024-07-04 22:40:58 (2 years ago)	Detected: Mod_Security Violation	Web App Attack
🇺🇸 Psycho Solutions LLC	2024-07-03 21:11:02 (2 years ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 7/3/2024 4:11 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-28 18:24:18 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 28 14:24:13.790618 2024] [security2:error] [pid 29419] [client 2a0b:f4c2:1::1:55539] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sumilondon.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sumilondon.com"] [uri "/ndon.sql"] [unique_id "Zn7_zQAmbAInfgSqga_eEwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-25 03:03:54 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 24 23:03:45.676320 2024] [security2:error] [pid 28966] [client 2a0b:f4c2:1::1:44517] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|stacyfarm.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stacyfarm.com"] [uri "/daily.sql"] [unique_id "ZnozkZgb1wu-QVPBrXzw8AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-24 21:21:49 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 24 17:21:41.619098 2024] [security2:error] [pid 1490:tid 46982286030592] [client 2a0b:f4c2:1::1:38625] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vinylnotespodcast.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vinylnotespodcast.com"] [uri "/odcast.sql"] [unique_id "ZnnjZZVc1aVx3NGpg-CkPQAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-24 15:08:28 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 24 11:08:19.155285 2024] [security2:error] [pid 13242] [client 2a0b:f4c2:1::1:52955] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "encuentraunbuenabogado.com"] [uri "/wp-config.php~"] [unique_id "ZnmL4zcDpA7PRlZ2cb59FgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-22 13:59:39 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 sec ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 22 09:59:32.788797 2024] [security2:error] [pid 27590] [client 2a0b:f4c2:1::1:29257] [client 2a0b:f4c2:1::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.vanmeer.info\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vanmeer.info"] [uri "/r.sql"] [unique_id "ZnbYxIwoHdRIQyPp_6OLWAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1231 to 1245 of 1322 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 104.252.250.29

🇺🇸 72.215.46.176

🇺🇦 46.164.148.190

🇩🇪 45.90.120.234

🇨🇳 218.7.195.130

🇺🇦 194.28.86.169

🇷🇺 178.209.113.162

🇭🇰 152.32.175.168

🇻🇳 125.212.239.144

🇺🇸 103.203.57.4

🇺🇸 91.230.168.100

🇺🇸 91.230.168.77

🇺🇸 65.49.1.183

🇸🇬 47.84.134.122

🇳🇱 45.148.10.157

🇳🇱 37.139.2.134

🇸🇬 8.222.203.158

🇺🇸 189.81.71.163

🇨🇭 185.231.33.46

🇨🇳 118.249.179.76