JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2::14

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

233 reports

24 reporters · latest 2 months ago

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a0b:f4c2::14 has been reported 233 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a0b:f4c2::14

Export CSV

This IP address has been reported a total of 233 times from 24 distinct sources. 2a0b:f4c2::14 was first reported on September 20th 2023, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 MacLotsen	2026-08-02 19:09:54 (2 months ago)	berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3 ... show more berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:03 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:06 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:08 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) Ap ... show less	Web App Attack Brute-Force
🇺🇸 xmission.com	2026-07-28 22:47:28 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 33018 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 33018 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-21 15:05:09 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 42384 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 42384 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-18 03:49:36 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 19076 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 19076 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-13 00:28:44 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 57878 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 57878 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 gnom4ik	2026-07-12 12:15:02 (2 months ago)	ban-reviewer auto report; ip=2a0b:f4c2::14; scenario=http:scan; scenario_context=http:scan,tor-exit- ... show more ban-reviewer auto report; ip=2a0b:f4c2::14; scenario=http:scan; scenario_context=http:scan,tor-exit-nodes; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇺🇸 xmission.com	2026-06-26 05:29:38 (3 months ago)	Blocked by UFW (TCP on 8333) Source port: 36048 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 36048 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-21 09:11:18 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 05:11:11.256903 2026] [security2:error] [pid 19391:tid 19391] [client 2a0b:f4c2::14:1896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.medics-group.com"] [uri "/.git/config"] [unique_id "ajeqr4M6oDZVY92ALHne8AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 06:25:08 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 02:25:03.803629 2026] [security2:error] [pid 22790:tid 22790] [client 2a0b:f4c2::14:51478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.atsllc.biz"] [uri "/.git/config"] [unique_id "ajDsPyGpIhajpubUO1spBAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 13:43:34 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 09:43:26.440747 2026] [security2:error] [pid 21939:tid 21939] [client 2a0b:f4c2::14:40266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.railsolutionsmexico.com"] [uri "/.git/config"] [unique_id "ajABftKvjs1k_sznDxSvQQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 07:01:11 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:01:03.066546 2026] [security2:error] [pid 19765:tid 19765] [client 2a0b:f4c2::14:53300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.va-designers.com"] [uri "/.git/config"] [unique_id "ai-jL-mbtNpqXiUaxso3IwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-14 06:41:46 (3 months ago)	Blocked by UFW (TCP on 8333) Source port: 21026 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 21026 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-06 02:58:09 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 22:58:02.004103 2026] [security2:error] [pid 19980:tid 19980] [client 2a0b:f4c2::14:17488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drgas.com.scottwithers.xyz"] [uri "/.git/config"] [unique_id "aiOMujCJSxyYfp-54cwLUgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 21:32:20 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 17:32:13.900052 2026] [security2:error] [pid 21414:tid 21463] [client 2a0b:f4c2::14:55166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.sh2.lol"] [uri "/.git/config"] [unique_id "aiNAXaXNbljRaO-Wd0j_YQAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 11:57:12 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:57:07.332807 2026] [security2:error] [pid 15651:tid 15651] [client 2a0b:f4c2::14:60058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.now-app.space"] [uri "/.git/config"] [unique_id "aiK5k_z-g6Bi9seFHQo5oQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 233 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.51.208.158

🇩🇪 116.203.34.38

🇺🇸 64.16.133.64

🇧🇪 34.78.112.15

🇮🇳 2405:201:a431:8079:542a:93e5:8b92:36fc

🇰🇷 222.105.73.32

🇧🇷 187.40.68.241

🇺🇦 176.96.190.79

🇵🇱 139.180.0.41

🇨🇳 117.27.135.82

🇺🇸 103.251.26.66

🇵🇰 103.211.194.214

🇷🇺 88.80.61.126

🇫🇷 82.67.202.213

🇬🇧 82.26.28.214

🇧🇬 79.124.56.142

🇱🇧 78.40.181.32

🇺🇸 66.132.186.140

🇬🇧 35.203.210.28

🇰🇷 211.206.124.40