JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2:2::55

2a0b:f4c2:2::55

Recent Activity IPv6 SLAAC Note

250 reports found in our database

14% ▲ ▲ ▲ Caution

Abuse confidence score ?

ISP

Network for Tor-Exit traffic.

Usage Type

Fixed Line ISP

ASN

AS60729

Hostname(s)

tor-exit-55.for-privacy.net

Domain Name

for-privacy.net

Country

🇩🇪 Germany

City

Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a0b:f4c2:2::55:

This IP address has been reported a total of 250 times from 23 distinct sources. 2a0b:f4c2:2::55 was first reported on September 17th 2022, and the most recent report was 9 hours ago. In the last 60 days, the top reporter locations were: United States of America with 23 reports; Italy with 1 report. The most common categories in these recent reports were: Port Scan 23 times; Brute-Force 1 time; Exploited Host 1 time; Web App Attack 1 time; SSH 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-09 03:26:59 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 08 23:26:55.027062 2025] [security2:error] [pid 29374:tid 29374] [client 2a0b:f4c2:2::55:21329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "indyham.com"] [uri "/wp-config.php.zip"] [unique_id "aL-ef6liC14Qh8XwJ7U3gAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-05 13:12:52 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 05 09:12:48.532486 2025] [security2:error] [pid 17441:tid 17441] [client 2a0b:f4c2:2::55:48523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pluralmatrix.net"] [uri "/wp-config.php.zip"] [unique_id "aLrh0O8aRIF1y3Y1IO7e2wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2025-09-04 07:00:39 (1 year ago)	(modsecurity) srv102 ModSecurity 2a0b:f4c2:2::55 (Unknown): 5 in the last 3600 secs; Ports: ; Direc ... show more (modsecurity) srv102 ModSecurity 2a0b:f4c2:2::55 (Unknown): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 SCHAPPY	2025-09-02 11:51:37 (1 year ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-09-01 03:03:14 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 23:03:06.741731 2025] [security2:error] [pid 31703:tid 31703] [client 2a0b:f4c2:2::55:44273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.randyshelly.com"] [uri "/wp-config.php.txt.zip"] [unique_id "aLUM6otwLoF8CQZM4IgJqQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-31 07:36:31 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 03:36:23.686602 2025] [security2:error] [pid 8013:tid 8013] [client 2a0b:f4c2:2::55:5339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enfiestate.com"] [uri "/wp-config.php~.zip"] [unique_id "aLP7d4nkQ4UkRdH1AJnhXwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-30 20:26:59 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 16:26:54.243314 2025] [security2:error] [pid 29973:tid 29973] [client 2a0b:f4c2:2::55:47979] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|paguilar.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paguilar.com"] [uri "/lar.sql"] [unique_id "aLNejrbCrfsxGUsHazPeNQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-08-30 14:22:26 (1 year ago)	Blocked by UFW (TCP on 1) Source port: 13419 Packet length: 80 This report (for 2a0b:f4c2:0002:0000 ... show more Blocked by UFW (TCP on 1) Source port: 13419 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0055) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2025-08-28 23:59:19 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 28 19:59:12.427371 2025] [security2:error] [pid 26353:tid 26353] [client 2a0b:f4c2:2::55:63325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mccompu.com"] [uri "/wp-config.php.zip"] [unique_id "aLDtUACcTaE7MULMoCClXAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-08-24 15:06:17 (1 year ago)	Blocked by UFW (TCP on 19687) Source port: 31903 Packet length: 80 This report (for 2a0b:f4c2:0002: ... show more Blocked by UFW (TCP on 19687) Source port: 31903 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0055) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2025-08-23 10:49:38 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 23 06:49:32.591013 2025] [security2:error] [pid 4583:tid 4583] [client 2a0b:f4c2:2::55:40063] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|artspacecleveland.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "artspacecleveland.org"] [uri "/cleveland_com.sql"] [unique_id "aKmcvPjfXH2ogCR42QiLEQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-23 03:45:23 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 23:45:17.531411 2025] [security2:error] [pid 22509:tid 22509] [client 2a0b:f4c2:2::55:24731] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|marilynmonroebooks.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "marilynmonroebooks.com"] [uri "/daily.sql"] [unique_id "aKk5TeFe3-2mmVIqJg-jaAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-20 21:00:13 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 20 17:00:07.853046 2025] [security2:error] [pid 17233:tid 17248] [client 2a0b:f4c2:2::55:47055] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|coasterdvdsonline.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "coasterdvdsonline.com"] [uri "/erdvdsonline_com.sql"] [unique_id "aKY3Vw2cvd30Dfza3tXNbQAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-08-19 15:16:35 (1 year ago)	Blocked by UFW (TCP on 61496) Source port: 37907 Packet length: 80 This report (for 2a0b:f4c2:0002: ... show more Blocked by UFW (TCP on 61496) Source port: 37907 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0055) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-08-16 08:30:27 (1 year ago)	Blocked by UFW (TCP on 58679) Source port: 31799 Packet length: 80 This report (for 2a0b:f4c2:0002: ... show more Blocked by UFW (TCP on 58679) Source port: 31799 Packet length: 80 This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0055) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 151 to 165 of 250 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.151

🇺🇸 45.61.187.220

🇺🇸 35.255.18.7

🇰🇷 219.250.10.142

🇬🇧 216.226.76.30

🇩🇪 157.90.4.241

🇺🇸 136.107.97.237

🇩🇪 69.5.169.157

🇳🇬 41.207.248.234

🇨🇭 151.145.197.35

🇩🇪 130.12.182.197

🇨🇳 111.51.78.203

🇫🇷 90.11.63.249

🇲🇾 47.250.45.94

🇳🇱 34.187.106.53

🇨🇳 180.168.24.186

🇺🇸 136.107.92.85

🇺🇸 72.253.251.7

🇿🇦 169.0.90.166

🇻🇳 125.212.235.194