JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::1

2a0b:f4c2::1 was found in our database!

This IP was reported 219 times. Confidence of Abuse is 12%: ?

12%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	Fixed Line ISP
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::1

Whois 2a0b:f4c2::1

IP Abuse Reports for 2a0b:f4c2::1:

This IP address has been reported a total of 219 times from 38 distinct sources. 2a0b:f4c2::1 was first reported on December 11th 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-18 02:08:17 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210831) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 22:08:13.026530 2026] [security2:error] [pid 1634532:tid 1634532] [client 2a0b:f4c2::1:58996] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.drrw.net\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.drrw.net"] [uri "/robots.txt"] [unique_id "alrgDZoUvCq4_T7ryrAC8wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-07-12 09:05:30 (2 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 21882 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 21882 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-06 07:26:06 (3 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 40396 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 40396 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-29 02:52:02 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 23860 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 23860 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-22 18:01:10 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 10646 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 10646 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-11 11:13:50 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 3312 Packet length: 80 This report (for 2a0b:f4c2:0000:00 ... show more Blocked by UFW (TCP on 8333) Source port: 3312 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-05 13:51:38 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 09:51:32.928032 2026] [security2:error] [pid 23153:tid 23153] [client 2a0b:f4c2::1:30420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.andrejblatnik.com"] [uri "/.git/config"] [unique_id "aiLUZO7g7jvF6-gEjjS7MwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-03 17:57:42 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 53640 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 53640 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-29 10:35:15 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 12884 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 12884 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-12 22:04:36 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 8986 Packet length: 80 This report (for 2a0b:f4c2:0000:00 ... show more Blocked by UFW (TCP on 8333) Source port: 8986 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-10 05:19:02 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 01:18:50.970962 2026] [security2:error] [pid 15906:tid 15906] [client 2a0b:f4c2::1:39900] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|christianconsulting.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "christianconsulting.net"] [uri "/ch.sql"] [unique_id "agAVOrTLC061jnaLcBYQdgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-05 10:50:57 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 06:50:47.168746 2026] [security2:error] [pid 19766:tid 19766] [client 2a0b:f4c2::1:46300] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cajunpicasso.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cajunpicasso.com"] [uri "/cajunpic.sql"] [unique_id "afnLh3j2NGcBqN_sj1YP4wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-30 11:31:45 (3 months ago)	Blocked by UFW (TCP on 55376) Source port: 9003 Packet length: 120 This report (for 2a0b:f4c2:0000: ... show more Blocked by UFW (TCP on 55376) Source port: 9003 Packet length: 120 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-28 21:35:21 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::1 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 17:35:15.758967 2026] [security2:error] [pid 25380:tid 25380] [client 2a0b:f4c2::1:40812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drendels.com"] [uri "/wp-config.old"] [unique_id "afEoE2_VMVTN2YixWx91SQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:04:30 (3 months ago)	2026-04-26 08:00:53,266 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::1 2026-04-26 12 ... show more 2026-04-26 08:00:53,266 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::1 2026-04-26 12:01:41,454 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::1 2026-04-26 18:01:39,112 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::1 2026-04-26 21:01:38,361 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::1 2026-04-27 00:04:24,005 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::1 show less	Brute-Force

Showing 1 to 15 of 219 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.98.62.211

🇦🇷 186.153.121.14

🇮🇶 169.224.32.166

🇮🇳 157.41.243.7

🇨🇳 124.90.51.208

🇺🇸 98.190.40.102

🇧🇷 20.226.5.174

🇳🇱 213.176.26.29

🇨🇭 209.99.190.200

🇧🇷 200.155.66.2

🇵🇱 138.124.20.112

🇧🇩 114.130.180.44

🇵🇱 91.231.121.125

🇺🇸 47.149.98.219

🇧🇷 205.210.31.218

🇭🇰 199.45.154.138

🇬🇧 193.32.209.254

🇺🇸 73.153.3.166

🇭🇰 45.249.246.196

🇨🇳 14.103.112.14