JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::11

2a0b:f4c2::11 was found in our database!

This IP was reported 218 times. Confidence of Abuse is 24%: ?

24%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	Fixed Line ISP
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::11

Whois 2a0b:f4c2::11

IP Abuse Reports for 2a0b:f4c2::11:

This IP address has been reported a total of 218 times from 29 distinct sources. 2a0b:f4c2::11 was first reported on July 2nd 2022, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-07-24 15:30:03 (6 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 xmission.com	2026-07-13 09:46:37 (2 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 2916 Packet length: 80 This report (for 2a0b:f4c2:0000:00 ... show more Blocked by UFW (TCP on 8333) Source port: 2916 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0011) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 gnom4ik	2026-07-11 22:50:21 (2 weeks ago)	ban-reviewer auto report; ip=2a0b:f4c2::11; scenario=http:scan; scenario_context=http:scan,tor-exit- ... show more ban-reviewer auto report; ip=2a0b:f4c2::11; scenario=http:scan; scenario_context=http:scan,tor-exit-nodes; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-19 17:03:41 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 13:03:32.928488 2026] [security2:error] [pid 17897:tid 17897] [client 2a0b:f4c2::11:36046] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|astglobalgroup.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "astglobalgroup.com"] [uri "/db_group.sql"] [unique_id "ajV2ZJ7czV3bZ5Pb1xq7dQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2026-06-10 08:07:55 (1 month ago)	20 attempts against mh-misbehave-ban on web-new	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-31 21:14:30 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 58952 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 58952 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0011) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-15 20:04:31 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 51960 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 51960 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0011) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-14 15:41:11 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 48932 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 48932 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0011) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-30 11:29:18 (3 months ago)	Blocked by UFW (TCP on 53120) Source port: 9002 Packet length: 77 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 53120) Source port: 9002 Packet length: 77 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0011) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-28 21:37:20 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 17:37:13.295521 2026] [security2:error] [pid 25380:tid 25380] [client 2a0b:f4c2::11:21310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|drendels.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drendels.com"] [uri "/bb-config.php.bak"] [unique_id "afEoiW_VMVTN2YixWx91aQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:04:33 (3 months ago)	2026-04-26 08:00:53,959 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-26 1 ... show more 2026-04-26 08:00:53,959 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-26 12:01:41,854 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-26 18:01:39,509 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-26 21:01:38,761 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-27 00:04:28,187 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-25 16:34:52 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 12:34:42.035849 2026] [security2:error] [pid 10286:tid 10286] [client 2a0b:f4c2::11:15616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kh6jim.com"] [uri "/wp-config.php-n"] [unique_id "aeztIi0a-edDmDTw1dexAAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-23 00:55:19 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 20:55:14.060359 2026] [security2:error] [pid 3281741:tid 3281741] [client 2a0b:f4c2::11:2042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brbcash.com"] [uri "/wp-config.php.uk"] [unique_id "aelt8qHKpJDB-gESXYcmeAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-04-17 01:29:07 (3 months ago)	[FriApr1703:29:02.1795652026][security2:error][pid3666550:tid3666571][client2a0b:f4c2::11:0]ModSecur ... show more [FriApr1703:29:02.1795652026][security2:error][pid3666550:tid3666571][client2a0b:f4c2::11:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"www.motogiro.com\"][uri\"/wp-content/plugins/select-tours/readme.txt\"][unique_id\"aeGM3sNAcKisK9TtHvmMUwAAANI\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 13:57:42 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 09:57:37.250644 2026] [security2:error] [pid 2148879:tid 2148879] [client 2a0b:f4c2::11:53150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allisonbtaylor.com"] [uri "/wp-config.php.orig"] [unique_id "adkB0Xm4PgVnshpkUA-sAgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 218 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.235.9

🇨🇳 119.41.149.65

🇻🇳 103.61.44.43

🇨🇳 61.171.95.18

🇰🇪 41.215.115.114

🇹🇼 198.235.24.46

🇲🇽 189.204.230.91

🇳🇮 186.77.204.116

🇨🇳 115.190.56.196

🇻🇳 14.191.117.227

🇭🇰 223.197.178.95

🇰🇿 212.154.234.9

🇰🇷 210.117.212.120

🇺🇸 205.210.31.55

🇳🇱 195.178.110.137

🇫🇷 185.177.72.22

🇳🇱 91.92.47.90

🇬🇧 35.203.211.204

🇬🇧 35.203.211.100

🇧🇷 189.39.129.165