JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::11

2a0b:f4c2::11 was found in our database!

This IP was reported 214 times. Confidence of Abuse is 24%: ?

24%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	Commercial
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::11

Whois 2a0b:f4c2::11

IP Abuse Reports for 2a0b:f4c2::11:

This IP address has been reported a total of 214 times from 28 distinct sources. 2a0b:f4c2::11 was first reported on July 2nd 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Savvii	2026-06-10 08:07:55 (3 days ago)	20 attempts against mh-misbehave-ban on web-new	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-31 21:14:30 (1 week ago)	Blocked by UFW (TCP on 8333) Source port: 58952 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 58952 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0011) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-15 20:04:31 (4 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 51960 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 51960 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0011) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-14 15:41:11 (4 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 48932 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 48932 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0011) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-30 11:29:18 (1 month ago)	Blocked by UFW (TCP on 53120) Source port: 9002 Packet length: 77 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 53120) Source port: 9002 Packet length: 77 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0011) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-28 21:37:20 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 17:37:13.295521 2026] [security2:error] [pid 25380:tid 25380] [client 2a0b:f4c2::11:21310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|drendels.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drendels.com"] [uri "/bb-config.php.bak"] [unique_id "afEoiW_VMVTN2YixWx91aQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:04:33 (1 month ago)	2026-04-26 08:00:53,959 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-26 1 ... show more 2026-04-26 08:00:53,959 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-26 12:01:41,854 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-26 18:01:39,509 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-26 21:01:38,761 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 2026-04-27 00:04:28,187 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::11 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-25 16:34:52 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 12:34:42.035849 2026] [security2:error] [pid 10286:tid 10286] [client 2a0b:f4c2::11:15616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kh6jim.com"] [uri "/wp-config.php-n"] [unique_id "aeztIi0a-edDmDTw1dexAAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-23 00:55:19 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 20:55:14.060359 2026] [security2:error] [pid 3281741:tid 3281741] [client 2a0b:f4c2::11:2042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brbcash.com"] [uri "/wp-config.php.uk"] [unique_id "aelt8qHKpJDB-gESXYcmeAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-04-17 01:29:07 (1 month ago)	[FriApr1703:29:02.1795652026][security2:error][pid3666550:tid3666571][client2a0b:f4c2::11:0]ModSecur ... show more [FriApr1703:29:02.1795652026][security2:error][pid3666550:tid3666571][client2a0b:f4c2::11:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"www.motogiro.com\"][uri\"/wp-content/plugins/select-tours/readme.txt\"][unique_id\"aeGM3sNAcKisK9TtHvmMUwAAANI\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 13:57:42 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 09:57:37.250644 2026] [security2:error] [pid 2148879:tid 2148879] [client 2a0b:f4c2::11:53150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allisonbtaylor.com"] [uri "/wp-config.php.orig"] [unique_id "adkB0Xm4PgVnshpkUA-sAgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 06:06:25 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 02:06:18.207337 2026] [security2:error] [pid 8434:tid 8434] [client 2a0b:f4c2::11:40632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.protonmultimedia.com"] [uri "/.git/config"] [unique_id "actkWqta_E10gysdkSS2fAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 gnom4ik	2026-03-26 01:03:12 (2 months ago)	ban-reviewer auto report; ip=2a0b:f4c2::11; scenario=http:scan; verdict=valid_ban; confidence=0.92; ... show more ban-reviewer auto report; ip=2a0b:f4c2::11; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-03-23 07:41:57 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 03:41:48.482817 2026] [security2:error] [pid 19506:tid 19506] [client 2a0b:f4c2::11:40146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.livesteamtracks.info"] [uri "/.git/config"] [unique_id "acDuvNTqTe1UNeAOrVkhTgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-22 07:38:36 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::11 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 03:38:27.449874 2026] [security2:error] [pid 30641:tid 30641] [client 2a0b:f4c2::11:44782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.chubat.com"] [uri "/.git/config"] [unique_id "ab-ccwAJ0vfeoli20oQP-QAAACA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 214 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.202.9.120

🇨🇳 171.111.196.251

🇺🇸 162.216.149.89

🇮🇩 202.51.214.98

🇬🇧 198.244.183.101

🇩🇪 176.65.132.93

🇺🇸 172.252.13.90

🇩🇪 159.89.12.166

🇨🇳 47.96.137.221

🇸🇬 43.156.162.193

🇺🇸 35.173.79.163

🇭🇰 223.19.3.118

🇺🇸 198.74.58.148

🇺🇸 148.135.148.71

🇸🇬 103.187.146.72

🇸🇬 103.134.154.119

🇧🇷 200.151.96.150

🇩🇪 192.109.200.215

🇱🇹 141.98.11.194

🇨🇳 123.149.50.205