JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2:2::50

2a0b:f4c2:2::50 was found in our database!

This IP was reported 211 times. Confidence of Abuse is 16%: ?

16%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Network for Tor-Exit traffic.
Usage Type	Commercial
ASN	AS60729
Hostname(s)	tor-exit-50.for-privacy.net
Domain Name	for-privacy.net
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2:2::50

Whois 2a0b:f4c2:2::50

IP Abuse Reports for 2a0b:f4c2:2::50:

This IP address has been reported a total of 211 times from 15 distinct sources. 2a0b:f4c2:2::50 was first reported on December 19th 2022, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-14 12:15:02 (4 days ago)	Blocked by UFW (TCP on 51637) Source port: 40625 Packet length: 80 This report (for 2a0b:f4c2:0002: ... show more Blocked by UFW (TCP on 51637) Source port: 40625 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-01 02:54:29 (2 weeks ago)	Blocked by UFW (TCP on 40820) Source port: 5513 Packet length: 80 This report (for 2a0b:f4c2:0002:0 ... show more Blocked by UFW (TCP on 40820) Source port: 5513 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-30 00:04:47 (2 weeks ago)	Blocked by UFW (TCP on 50302) Source port: 3117 Packet length: 80 This report (for 2a0b:f4c2:0002:0 ... show more Blocked by UFW (TCP on 50302) Source port: 3117 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-26 08:46:02 (3 weeks ago)	Blocked by UFW (TCP on 47998) Source port: 41601 Packet length: 80 This report (for 2a0b:f4c2:0002: ... show more Blocked by UFW (TCP on 47998) Source port: 41601 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-23 02:00:34 (3 weeks ago)	Blocked by UFW (TCP on 40820) Source port: 50479 Packet length: 80 This report (for 2a0b:f4c2:0002: ... show more Blocked by UFW (TCP on 40820) Source port: 50479 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-15 22:20:33 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 27397 Packet length: 80 This report (for 2a0b:f4c2:0002:0 ... show more Blocked by UFW (TCP on 8333) Source port: 27397 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-09 14:24:18 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::50 (tor-exit-50.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::50 (tor-exit-50.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 10:24:10.761972 2026] [security2:error] [pid 10496:tid 10496] [client 2a0b:f4c2:2::50:58265] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|grasslakepizzatime.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grasslakepizzatime.com"] [uri "/grasslakepizzati.sql"] [unique_id "af9Dil8LgrlxIh_WEyMvnQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-03 11:41:45 (1 month ago)	Blocked by UFW (TCP on 31909) Source port: 23235 Packet length: 80 This report (for 2a0b:f4c2:0002: ... show more Blocked by UFW (TCP on 31909) Source port: 23235 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-02 16:12:37 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 33901 Packet length: 80 This report (for 2a0b:f4c2:0002:0 ... show more Blocked by UFW (TCP on 8333) Source port: 33901 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-30 02:40:49 (1 month ago)	Blocked by UFW (TCP on 61496) Source port: 9209 Packet length: 80 This report (for 2a0b:f4c2:0002:0 ... show more Blocked by UFW (TCP on 61496) Source port: 9209 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-26 21:04:54 (1 month ago)	2026-04-26 08:00:59,816 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:2::50 2026-04-26 ... show more 2026-04-26 08:00:59,816 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:2::50 2026-04-26 12:01:45,740 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:2::50 2026-04-26 18:01:43,343 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:2::50 2026-04-26 21:01:42,618 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:2::50 2026-04-27 00:04:52,801 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:2::50 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-23 09:21:15 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 2a0b:f4c2:2::50 (tor-exit-50.for-privacy.net): ... show more (mod_security) mod_security (id:210831) triggered by 2a0b:f4c2:2::50 (tor-exit-50.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 05:21:09.640609 2026] [security2:error] [pid 6777:tid 6777] [client 2a0b:f4c2:2::50:57249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.onlinesoldier.com\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.onlinesoldier.com"] [uri "/"] [unique_id "aenkhTwJfSDwfvc2WPOucAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-17 02:34:40 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::50 (tor-exit-50.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::50 (tor-exit-50.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 22:34:31.617542 2026] [security2:error] [pid 3847616:tid 3847616] [client 2a0b:f4c2:2::50:33669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rambleandprose.com"] [uri "/wp-config.php.in"] [unique_id "aeGcN9UVlIg3q4uuJK_RggAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-14 03:04:51 (2 months ago)	Blocked by UFW (TCP on 50535) Source port: 7909 Packet length: 80 This report (for 2a0b:f4c2:0002:0 ... show more Blocked by UFW (TCP on 50535) Source port: 7909 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0050) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-13 23:22:39 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::50 (tor-exit-50.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::50 (tor-exit-50.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 19:22:32.486935 2026] [security2:error] [pid 3795360:tid 3795360] [client 2a0b:f4c2:2::50:32385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.vmbinc.com"] [uri "/.git/config"] [unique_id "ad16uPdP2QwFZxcR4abABAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 211 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.178

127.0.0.1

🇵🇰 39.39.218.240

🇬🇧 193.163.125.83

🇨🇴 186.147.162.215

🇹🇼 125.227.49.83

🇨🇳 117.177.102.79

🇩🇪 69.5.169.107

🇭🇰 40.81.31.179

🇺🇸 20.38.35.154

🇺🇸 192.3.134.24

🇮🇳 125.19.218.50

🇭🇰 119.246.15.94

🇳🇱 103.219.153.248

🇸🇬 103.189.234.96

🇸🇮 102.220.160.153

🇺🇸 96.78.175.36

🇳🇱 91.92.40.10

🇺🇸 172.174.72.225

🇨🇳 118.196.68.35