JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::13

2a0b:f4c2::13 was found in our database!

This IP was reported 245 times. Confidence of Abuse is 7%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::13

Whois 2a0b:f4c2::13

IP Abuse Reports for 2a0b:f4c2::13:

This IP address has been reported a total of 245 times from 30 distinct sources. 2a0b:f4c2::13 was first reported on November 5th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-02 20:50:28 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 16:50:19.087307 2026] [security2:error] [pid 1467:tid 1467] [client 2a0b:f4c2::13:61216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|edgecomix.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edgecomix.com"] [uri "/dump.sql"] [unique_id "ac7Wi5hFKWIvswS_zE6xaAAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-17 06:36:10 (6 months ago)	Blocked by UFW (TCP on 8333) Source port: 16730 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 16730 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 ipblock.com	2026-03-12 15:57:00 (6 months ago)	IPBlock protected site ID [4055-d][s=02]. Rogue crawler, does not respect robots.txt	Bad Web Bot
🇺🇸 xmission.com	2026-03-12 09:12:20 (6 months ago)	Blocked by UFW (TCP on 8333) Source port: 37692 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 37692 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-11 10:25:20 (6 months ago)	Blocked by UFW (TCP on 8333) Source port: 14894 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 14894 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-07 05:57:40 (6 months ago)	Blocked by UFW (TCP on 8333) Source port: 10200 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 10200 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 jjnxpct	2026-03-05 04:50:57 (6 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /dbpraktijk.sql (Rule ID: 920440) - URL file extension is restricted by policy show less	Web App Attack SQL Injection Hacking
🇺🇸 ipblock.com	2026-02-24 10:06:00 (7 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 20:13:06 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 15:12:59.693632 2026] [security2:error] [pid 26053:tid 26053] [client 2a0b:f4c2::13:4160] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dwightbrown.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dwightbrown.com"] [uri "/ghtbrown_wp1.sql"] [unique_id "aZy0y0Ha5iYmO0yQkcRmdQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 13:44:18 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 08:44:14.022721 2026] [security2:error] [pid 12859:tid 12859] [client 2a0b:f4c2::13:48632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.visionremota.info"] [uri "/.git/config"] [unique_id "aZxZrn3Zm_iuQCr5104SOQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 00:19:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 19:19:24.864765 2026] [security2:error] [pid 26424:tid 26424] [client 2a0b:f4c2::13:49126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.skotam.com"] [uri "/.git/config"] [unique_id "aZudDFYdUa9yxKeRnJdjzwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 18:23:06 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 13:23:02.523569 2026] [security2:error] [pid 8382:tid 8382] [client 2a0b:f4c2::13:63700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.haarr.net"] [uri "/.git/config"] [unique_id "aZtJhrJw8-h0zYeKkZigXgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-02-22 11:03:32 (7 months ago)	Blocked by UFW (TCP on 8333) Source port: 58786 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 58786 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-02-22 07:54:32 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 02:54:25.199215 2026] [security2:error] [pid 22990:tid 22990] [client 2a0b:f4c2::13:17946] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|tracytappan.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tracytappan.net"] [uri "/.sql"] [unique_id "aZq2MdBcfnFaD0oLwrKt5gAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix	2026-02-20 11:18:54 (7 months ago)	Web App Attack - Exploid from 2a0b:f4c2::13	Web App Attack

Showing 16 to 30 of 245 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.92.114.204

🇺🇸 174.102.248.14

🇺🇸 107.23.137.152

🇳🇱 91.92.42.187

🇺🇸 43.135.144.70

🇷🇴 2.57.122.168

🇷🇴 2.57.122.53

🇮🇳 223.181.53.100

🇨🇳 221.203.187.222

🇳🇱 204.76.203.4

🇷🇺 188.225.50.38

🇲🇽 187.154.98.53

🇯🇵 106.153.181.80

🇺🇸 97.95.41.219

🇰🇿 95.58.221.186

🇹🇷 88.227.88.10

🇺🇸 72.202.229.17

🇮🇩 202.149.89.75

🇷🇺 185.105.109.142

🇺🇸 172.59.185.231