This IP was reported 170 times. Confidence of
Abuse
is 23%: ?
23%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
170
times from
21 distinct
sources.
2a0b:f4c2:4::104 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 8333)
Source port: 52305
Packet length: 72
This report (for 2a0b:f4c2:0004:0 ...
show moreBlocked by UFW (TCP on 8333)
Source port: 52305
Packet length: 72
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0104) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[Askari] | country=DE | Behavior: Concurrent page load during attack, HTTP/1.1 over TLS, Sequential ...
show more[Askari] | country=DE | Behavior: Concurrent page load during attack, HTTP/1.1 over TLS, Sequential path crawling
show less
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 s ...
show more(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 10:24:27.337670 2026] [security2:error] [pid 12686:tid 12686] [client 2a0b:f4c2:4::104:45663] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||grasslakepizzatime.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grasslakepizzatime.com"] [uri "/grasslakepizza.sql"] [unique_id "af9Dm7w7gHP_PehN2QD4ywAAAAs"]
show less
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 s ...
show more(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 15:15:20.499023 2026] [security2:error] [pid 26067:tid 26067] [client 2a0b:f4c2:4::104:24395] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bluemarineboats.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluemarineboats.com"] [uri "/bluem.sql"] [unique_id "afuTSJ1ofYnWv-9fWhuznwAAAAI"]
show less
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 s ...
show more(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 06:50:41.288484 2026] [security2:error] [pid 18787:tid 18787] [client 2a0b:f4c2:4::104:19133] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cajunpicasso.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cajunpicasso.com"] [uri "/casso_com.sql"] [unique_id "afnLgeFgjP2wIoZa4DMkswAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-26 08:01:01,196 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::104
2026-04-2 ...
show more2026-04-26 08:01:01,196 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::104
2026-04-26 12:01:46,616 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::104
2026-04-26 18:01:44,201 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::104
2026-04-26 21:01:43,493 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::104
2026-04-27 00:05:00,156 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::104
show less
Blocked by UFW (TCP on 45540)
Source port: 443
Packet length: 60
This report (for 2a0b:f4c2:0004:00 ...
show moreBlocked by UFW (TCP on 45540)
Source port: 443
Packet length: 60
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0104) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 s ...
show more(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 23:17:14.833655 2026] [security2:error] [pid 25781:tid 25781] [client 2a0b:f4c2:4::104:52231] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||climasyequipos.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "climasyequipos.com"] [uri "/latest.sql"] [unique_id "aaz4Sq1AHUSbaZQACDTRpQAAAAQ"]
show less
Blocked by UFW (TCP on 8333)
Source port: 7761
Packet length: 72
This report (for 2a0b:f4c2:0004:00 ...
show moreBlocked by UFW (TCP on 8333)
Source port: 7761
Packet length: 72
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0104) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 s ...
show more(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 08:27:42.235588 2026] [security2:error] [pid 23380:tid 23380] [client 2a0b:f4c2:4::104:4985] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aboutagingparents.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aboutagingparents.com"] [uri "/db_arents.sql"] [unique_id "aamEztVP0-jGeA3FzcopKwAAAAY"]
show less