This IP was reported 315 times. Confidence of
Abuse
is 84%: ?
84%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
315
times from
66 distinct
sources.
2a10:3c0:4:2:1:25:0:5 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[TueOct2002:58:37.7949522026][security2:error][pid1810549:tid1810676][client2a10:3c0:4:2:1:25:0:5:0] ...
show more[TueOct2002:58:37.7949522026][security2:error][pid1810549:tid1810676][client2a10:3c0:4:2:1:25:0:5:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"ci-ticino.ch\"][uri\"/mcp\"][unique_id\"ata8vd9xlJlQHeGqb3M8agAAAhY\"]
show less
[SatOct1721:01:56.0101472026][security2:error][pid2935052:tid2935176][client2a10:3c0:4:2:1:25:0:5:0] ...
show more[SatOct1721:01:56.0101472026][security2:error][pid2935052:tid2935176][client2a10:3c0:4:2:1:25:0:5:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"mail.enricoalbertini.com\"][uri\"/mcp\"][unique_id\"atPGJDdZ4yWrPYSCUpBSdwAAAQo\"]
show less
Blocked by UFW (TCP on 80)
Source port: 23228
Packet length: 80
This report (for 2a10:03c0:0004:000 ...
show moreBlocked by UFW (TCP on 80)
Source port: 23228
Packet length: 80
This report (for 2a10:03c0:0004:0002:0001:0025:0000:0005) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[MonOct1223:09:42.5216462026][security2:error][pid3143228:tid3143362][client2a10:3c0:4:2:1:25:0:5:0] ...
show more[MonOct1223:09:42.5216462026][security2:error][pid3143228:tid3143362][client2a10:3c0:4:2:1:25:0:5:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bhttpx\\\\\\\\b\|\\\\\\\\bnaabu\\\\\\\\b\|\\\\\\\\bffuf\\\\\\\\b\|\\\\\\\\bgobuster\\\\\\\\b\|\\\\\\\\bferoxbuster\\\\\\\\b\|\\\\\\\\bwfuzz\\\\\\\\b\|\\\\\\\\bjaeles\\\\\\\\b\|\\\\\\\\bzgrab2\?\\\\\\\\b\|\\\\\\\\bcommix\\\\\\\\b\|\\\\\\\\bxsstrike\\\\\\\\b\|\\\\\\\\bkiterunner\\\\\\\\b\|\(\?:\^\|[/]\)katana\(\?:/\|\\\\\\\\b\)\|\\\\\\\\bkr/\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"70\"][id\"338800\"][rev\"2\"][msg\"Atomicorp.comWAFRules:Blockedrecon/fuzzUA\"][severity\"CRITICAL\"][hostname\"www.comarcosa.com\"][uri\"/mcp\"][unique_id\"as1Mli0Y28JVIhOeJ1U-AAAAARU\"]
show less
[MonOct1222:44:48.6317362026][security2:error][pid99030:tid99138][client2a10:3c0:4:2:1:25:0:5:0]ModS ...
show more[MonOct1222:44:48.6317362026][security2:error][pid99030:tid99138][client2a10:3c0:4:2:1:25:0:5:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.specialfood.ch\"][uri\"/mcp\"][unique_id\"as1GwPO7Kxh221ba18JoTwAAAQY\"]
show less
[MonOct1204:55:16.7795292026][security2:error][pid3234753:tid3234781][client2a10:3c0:4:2:1:25:0:5:0] ...
show more[MonOct1204:55:16.7795292026][security2:error][pid3234753:tid3234781][client2a10:3c0:4:2:1:25:0:5:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"domoticaswiss.ch\"][uri\"/mcp\"][unique_id\"asxMFOVRUTN93CUsg0ZS3wAAAUI\"]
show less
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -123.676 (Bad < -10 / Very Bad < -20 ...
show moreBot/Spam/Scrapper attack detected on www.handytreff.de - Score: -123.676 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: python-httpx/0.28.1
show less