JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::12

2a0b:f4c2::12 was found in our database!

This IP was reported 219 times. Confidence of Abuse is 18%: ?

18%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::12

Whois 2a0b:f4c2::12

IP Abuse Reports for 2a0b:f4c2::12:

This IP address has been reported a total of 219 times from 24 distinct sources. 2a0b:f4c2::12 was first reported on September 27th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-10-05 13:03:20 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 05 09:03:15.259388 2025] [security2:error] [pid 25992:tid 25992] [client 2a0b:f4c2::12:62090] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|t9teamsportinggoods.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "t9teamsportinggoods.com"] [uri "/rtinggoods.sql"] [unique_id "aOJsk6weyxoP-DhbsHfRwAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-04 15:07:22 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-10-04 11:19:19 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 07:19:16.337765 2025] [security2:error] [pid 5306:tid 5306] [client 2a0b:f4c2::12:58232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carphotoframes.biz"] [uri "/.env"] [unique_id "aOECtE_fcDB09uTkpR9Q6AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-03 23:24:19 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 19:24:14.332503 2025] [security2:error] [pid 6266:tid 6266] [client 2a0b:f4c2::12:27030] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|deborahbein.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deborahbein.com"] [uri "/wp.sql"] [unique_id "aOBbHjqi00wZ6dib4E21rQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-02 05:09:47 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 02 01:09:41.449074 2025] [security2:error] [pid 16309:tid 16309] [client 2a0b:f4c2::12:59270] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|barkatthemoonpetsitting.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "barkatthemoonpetsitting.com"] [uri "/tthemoonpetsitting.sql"] [unique_id "aN4JFSqcXAIGzNC6IP762gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-02 03:57:38 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 23:57:33.695378 2025] [security2:error] [pid 14053:tid 14053] [client 2a0b:f4c2::12:42124] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|twincitytn.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "twincitytn.com"] [uri "/twi.sql"] [unique_id "aN34LXGy--ZLKPH3d3XWhwAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-27 05:44:05 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 27 01:43:57.645088 2025] [security2:error] [pid 13440:tid 13440] [client 2a0b:f4c2::12:13226] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ralphharris.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ralphharris.org"] [uri "/ris.sql"] [unique_id "aNd5nXfEBWfGBaHg-W73nwAAADU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-26 00:42:03 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 20:41:55.757648 2025] [security2:error] [pid 15907:tid 15907] [client 2a0b:f4c2::12:30198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|birdlovesfish.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "birdlovesfish.com"] [uri "/ovesfish.sql"] [unique_id "aNXhUz8rOaZ_Y-qR7HhJQAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-22 04:48:44 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 00:48:36.527561 2025] [security2:error] [pid 2424036:tid 2424036] [client 2a0b:f4c2::12:34570] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bonvivantorganics.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bonvivantorganics.com"] [uri "/bonviva.sql"] [unique_id "aNDVJGR-T8uG-CYdan0cCgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-21 14:41:25 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 10:41:18.055659 2025] [security2:error] [pid 25824:tid 25824] [client 2a0b:f4c2::12:41464] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bonegym.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bonegym.com"] [uri "/wordpress.sql"] [unique_id "aNAOjqWQjTstq5cK6omutQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-20 04:51:48 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 00:51:44.467135 2025] [security2:error] [pid 7623:tid 7623] [client 2a0b:f4c2::12:18400] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|trunutraceuticals.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "trunutraceuticals.com"] [uri "/backup.sql"] [unique_id "aM4y4DIBkkwlRUDrar74lAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-19 23:51:08 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 19:51:02.562210 2025] [security2:error] [pid 31916:tid 31916] [client 2a0b:f4c2::12:40710] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|drjasonkolber.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drjasonkolber.com"] [uri "/backup.sql"] [unique_id "aM3sZssFz33hKE7dphz57AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-17 22:02:13 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 18:02:08.750570 2025] [security2:error] [pid 11036:tid 11036] [client 2a0b:f4c2::12:52336] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cnphilos.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnphilos.com"] [uri "/cnphil.sql"] [unique_id "aMsv4KrR7cL-voYdyCJ9zQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-17 12:00:21 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 08:00:15.690617 2025] [security2:error] [pid 7198:tid 7198] [client 2a0b:f4c2::12:8562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "terrybeachmusic.com"] [uri "/api/.env"] [unique_id "aMqiz4aT_eLUi3j8vodA3gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-15 19:25:29 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 15 15:25:23.042971 2025] [security2:error] [pid 3086335:tid 3086387] [client 2a0b:f4c2::12:58264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atlasrecordssearch.com"] [uri "/wp-config.php.zip"] [unique_id "aMhoIyzbC_QCq6P3j1810wAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 91 to 105 of 219 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.127.17.53

🇺🇸 184.73.167.217

🇺🇸 170.106.197.109

🇮🇩 114.5.84.99

🇰🇷 111.171.127.190

🇨🇳 61.179.110.176

🇧🇷 205.210.31.223

🇮🇱 185.239.48.91

🇹🇷 185.48.180.236

🇮🇩 143.14.13.10

🇧🇦 109.163.174.195

🇻🇳 103.237.144.204

🇭🇷 93.141.28.99

🇩🇪 62.133.60.87

🇫🇷 51.38.224.114

🇺🇸 40.124.187.35

🇮🇩 203.89.28.114

🇳🇱 185.218.86.8

🇨🇦 149.56.160.172

🇨🇳 115.239.27.35