This IP was reported 149 times. Confidence of
Abuse
is 27%: ?
27%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
149
times from
20 distinct
sources.
2a0b:f4c2:4::98 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 9999)
Source port: 7701
Packet length: 72
This report (for 2a0b:f4c2:0004:00 ...
show moreBlocked by UFW (TCP on 9999)
Source port: 7701
Packet length: 72
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0098) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 8333)
Source port: 54809
Packet length: 72
This report (for 2a0b:f4c2:0004:0 ...
show moreBlocked by UFW (TCP on 8333)
Source port: 54809
Packet length: 72
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0098) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
2026-04-26 08:01:00,815 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::98
2026-04-26 ...
show more2026-04-26 08:01:00,815 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::98
2026-04-26 12:01:46,382 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::98
2026-04-26 18:01:43,971 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::98
2026-04-26 21:01:43,255 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::98
2026-04-27 00:04:58,392 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::98
show less
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::98 (Unknown): 1 in the last 300 se ...
show more(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::98 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 08:27:48.931989 2026] [security2:error] [pid 23389:tid 23389] [client 2a0b:f4c2:4::98:18587] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aboutagingparents.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aboutagingparents.com"] [uri "/wordpress_nts.sql"] [unique_id "aamE1NK-37QH8F9UG1s5QwAAAAc"]
show less
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show moreAutomated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /site.sql (Rule ID: 920440) - URL file extension is restricted by policy
show less
Feb 27 06:18:35 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 1 s ...
show moreFeb 27 06:18:35 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=, rip=2a0b:f4c2:4::98, lip=X.X.X.X session=
show less
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::98 (Unknown): 1 in the last 300 se ...
show more(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::98 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 06:56:52.770068 2026] [security2:error] [pid 5006:tid 5006] [client 2a0b:f4c2:4::98:41521] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thesalonx.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thesalonx.com"] [uri "/dbthesalonx.sql"] [unique_id "aZ7jhC45nAn13prgD2gQOwAAAAY"]
show less
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::98 (Unknown): 1 in the last 300 se ...
show more(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::98 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 09:08:00.188344 2026] [security2:error] [pid 29365:tid 29365] [client 2a0b:f4c2:4::98:20175] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thepotteriesmesilla.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thepotteriesmesilla.com"] [uri "/thepot.sql"] [unique_id "aZMkwBWyGFNznxHTJ2ykvQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
15
of 149 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩