JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2:2::57

2a0b:f4c2:2::57 was found in our database!

This IP was reported 216 times. Confidence of Abuse is 16%: ?

16%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Network for Tor-Exit traffic.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	tor-exit-57.for-privacy.net
Domain Name	for-privacy.net
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2:2::57

Whois 2a0b:f4c2:2::57

IP Abuse Reports for 2a0b:f4c2:2::57:

This IP address has been reported a total of 216 times from 18 distinct sources. 2a0b:f4c2:2::57 was first reported on October 10th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-04-02 08:48:09 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 04:48:02.878212 2025] [security2:error] [pid 12830:tid 12830] [client 2a0b:f4c2:2::57:31767] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mccompu.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mccompu.com"] [uri "/wp-content/database.sql"] [unique_id "Z-z5wsLFFP_Gc7qsc4zU7QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-13 16:49:45 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 13 12:49:37.229049 2025] [security2:error] [pid 5661:tid 5661] [client 2a0b:f4c2:2::57:25817] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|schmitzcomm.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "schmitzcomm.net"] [uri "/2022-omm.sql"] [unique_id "Z9MMoXN9HDx4r0s_wjH3zQAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-04 22:11:07 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 17:11:01.209716 2025] [security2:error] [pid 9706:tid 9706] [client 2a0b:f4c2:2::57:25671] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fydelityco.com.fydelity.net"] [uri "/.git/config"] [unique_id "Z8d6dePsf4opvhXtqqwjYAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-03 13:58:36 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 08:58:29.548062 2025] [security2:error] [pid 3233793:tid 3233793] [client 2a0b:f4c2:2::57:12929] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lightningbug.farm\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lightningbug.farm"] [uri "/installer-data.sql"] [unique_id "Z8W1hbHS9JMOaPJet-FXIgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-27 14:41:13 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 09:41:06.292785 2025] [security2:error] [pid 10346:tid 10346] [client 2a0b:f4c2:2::57:20287] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gilgoinn.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gilgoinn.com"] [uri "/installer-data.sql"] [unique_id "Z8B5gtJjKOehIrPydiZQTQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-24 21:33:20 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 24 16:33:15.451467 2025] [security2:error] [pid 20649:tid 20649] [client 2a0b:f4c2:2::57:30597] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lakependoreillemobility.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lakependoreillemobility.com"] [uri "/mysql.sql"] [unique_id "Z7zlm4SVnr0MNelpUvcqXwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-22 05:37:20 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 22 00:37:17.323755 2025] [security2:error] [pid 25426:tid 25426] [client 2a0b:f4c2:2::57:35173] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|odysseydogasporlari.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "odysseydogasporlari.com"] [uri "/2022-gasporlari.sql"] [unique_id "Z7lijf6a0igVixxxFa0bmwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-21 06:09:40 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 21 01:09:32.984458 2025] [security2:error] [pid 28159:tid 28278] [client 2a0b:f4c2:2::57:31739] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gestorialuengo.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gestorialuengo.com"] [uri "/mysql.sql"] [unique_id "Z7gYnGIQByhJJaJM9J4c7wAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-08 06:08:22 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 08 01:08:14.739037 2025] [security2:error] [pid 24379:tid 24379] [client 2a0b:f4c2:2::57:10565] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cuul.co"] [uri "/wp-config.php_old2023"] [unique_id "Z6b0zp4wu_1nwr5mB46GQQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-23 01:02:04 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 22 20:01:59.445290 2025] [security2:error] [pid 7042:tid 7042] [client 2a0b:f4c2:2::57:27357] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gasoilliquidsdaily.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gasoilliquidsdaily.com"] [uri "/wordpress.sql"] [unique_id "Z5GVB9Z3OS1fnPuBPosukwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-01-14 22:51:41 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) P ... show more Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) Protocol: HTTP/2 (GET method) Endpoint: /blocklist-generator/rpz Timestamp: 2025-01-14T21:44:19Z Ray ID: 9020ce80bbf6ca64 UA: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-11-28 12:40:29 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 28 07:40:22.046000 2024] [security2:error] [pid 4814:tid 4814] [client 2a0b:f4c2:2::57:35139] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.basicdevicesonline.com"] [uri "/.git/config"] [unique_id "Z0hktqehfI7ru-3fTxbfqAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2024-11-23 05:10:09 (1 year ago)	Probing for Wordpress vulnerabilities	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-01 06:33:38 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 01 02:33:34.254518 2024] [security2:error] [pid 13117:tid 13117] [client 2a0b:f4c2:2::57:21583] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunshine-trust.com"] [uri "/wp-config.php_old1"] [unique_id "ZyR2PhmdTjYfXPkkUAWqSwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2024-09-30 15:19:07 (1 year ago)	2024-09-30T17:19:06.182600+02:00 ipoac.nl wordpress(*)[1995250]: Authentication attempt for unknow ... show more 2024-09-30T17:19:06.182600+02:00 ipoac.nl wordpress(*)[1995250]: Authentication attempt for unknown user a from 2a0b:f4c2:2::57 show less	Web App Attack

Showing 181 to 195 of 216 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 154.221.25.72

🇹🇼 152.32.230.94

🇺🇸 143.42.1.123

🇻🇳 115.79.125.54

🇧🇬 109.160.32.115

🇭🇰 43.99.250.111

🇹🇭 203.150.107.244

🇨🇳 180.76.143.203

🇺🇸 140.174.220.68

🇮🇳 122.187.237.122

🇺🇸 91.230.168.6

🇳🇱 77.239.124.212

🇺🇸 75.89.41.186

🇬🇧 35.203.211.86

🇺🇸 2001:470:1:c84::279

🇳🇱 209.85.208.69

🇱🇹 194.165.16.162

🇨🇴 181.48.105.218

🇫🇷 172.71.118.245

🇺🇸 136.144.33.213