JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::15

2a0b:f4c2::15 was found in our database!

This IP was reported 216 times. Confidence of Abuse is 14%: ?

14%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::15

Whois 2a0b:f4c2::15

IP Abuse Reports for 2a0b:f4c2::15:

This IP address has been reported a total of 216 times from 29 distinct sources. 2a0b:f4c2::15 was first reported on September 20th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-03 18:43:54 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 52292 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 52292 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0015) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 MacLotsen	2026-08-02 19:09:45 (1 month ago)	berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3 ... show more berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:03 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:06 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:08 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) Ap ... show less	Web App Attack Brute-Force
🇩🇪 4server	2026-08-01 20:57:51 (1 month ago)	[SatAug0122:57:45.7159612026][security2:error][pid1972923:tid1973051][client2a0b:f4c2::15:0]ModSecur ... show more [SatAug0122:57:45.7159612026][security2:error][pid1972923:tid1973051][client2a0b:f4c2::15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ipv6.newbeauty-pully.ch\"][uri\"/\"][unique_id\"am5dyTkeU10PzliAKTp5_wAAAQ4\"] show less	Port Scan Brute-Force Web App Attack
🇹🇷 neron	2026-07-25 06:27:07 (1 month ago)	CrowdSec blocked: http:scan detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 00:05:18 (2 months ago)	(mod_security) mod_security (id:211220) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:211220) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 20:05:06.137317 2026] [security2:error] [pid 13384:tid 13384] [client 2a0b:f4c2::15:15436] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\?(?!xml\\\\s)" at ARGS:vars[0]. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "70"] [id "211220"] [rev "4"] [msg "COMODO WAF: PHP Injection Attack\|\|icafe.bz.shafie.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icafe.bz.shafie.net"] [uri "/index.php"] [unique_id "alV9MpLX-R2luRxHA3GSKgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Skyrider	2026-07-03 11:26:50 (2 months ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 21:04:06 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 17:03:58.901859 2026] [security2:error] [pid 19174:tid 19174] [client 2a0b:f4c2::15:23734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.belgiophar.org"] [uri "/.git/config"] [unique_id "aisivtzio4fr9cdsSaSzYgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2026-06-10 08:37:44 (3 months ago)	20 attempts against mh-misbehave-ban on web-new	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 20:08:48 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 16:08:40.824151 2026] [security2:error] [pid 27900:tid 27900] [client 2a0b:f4c2::15:56684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.ndezrojo.com"] [uri "/.git/config"] [unique_id "aiMsyCPSp-PChbUv0iCu7QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 12:04:03 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 08:03:55.185641 2026] [security2:error] [pid 25080:tid 25080] [client 2a0b:f4c2::15:15678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.lamanchaorchards.com"] [uri "/.git/config"] [unique_id "aiK7K5Sb3s-gIhivGEElZwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 gnom4ik	2026-05-10 07:55:58 (4 months ago)	ban-reviewer auto report; ip=2a0b:f4c2::15; scenario=http:scan; verdict=valid_ban; confidence=0.92; ... show more ban-reviewer auto report; ip=2a0b:f4c2::15; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-09 14:11:41 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 10:11:32.225836 2026] [security2:error] [pid 31532:tid 31532] [client 2a0b:f4c2::15:7018] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|capitalswisscorp.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/ca.sql"] [unique_id "af9AlIMMeTX3U054-aIYTwAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-05 12:12:00 (4 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-04 19:40:13 (4 months ago)	Blocked by UFW (TCP on 8333) Source port: 46436 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 46436 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0015) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-30 10:43:15 (4 months ago)	Blocked by UFW (TCP on 33234) Source port: 9002 Packet length: 120 This report (for 2a0b:f4c2:0000: ... show more Blocked by UFW (TCP on 33234) Source port: 9002 Packet length: 120 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0015) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 216 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 188.124.228.197

🇮🇪 109.255.9.230

🇰🇷 106.245.151.118

🇮🇳 103.86.180.10

🇫🇷 91.231.89.7

🇺🇸 66.249.84.33

🇺🇸 57.141.20.0

🇺🇸 35.227.104.207

🇺🇸 35.226.21.5

🇺🇸 35.225.94.179

🇸🇬 2a12:f540:93c6:b1cd:546f:613b:8467:bf15

🇰🇷 220.95.40.69

🇻🇪 200.75.122.45

🇺🇸 193.29.62.63

🇺🇿 188.113.198.47

🇷🇺 185.46.197.79

🇭🇰 165.154.6.75

🇰🇷 112.185.230.208

🇺🇸 54.91.122.193

🇫🇮 35.228.85.141