JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::15

2a0b:f4c2::15 was found in our database!

This IP was reported 216 times. Confidence of Abuse is 14%: ?

14%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::15

Whois 2a0b:f4c2::15

IP Abuse Reports for 2a0b:f4c2::15:

This IP address has been reported a total of 216 times from 29 distinct sources. 2a0b:f4c2::15 was first reported on September 20th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-02-27 22:56:28 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 17:56:24.447786 2025] [security2:error] [pid 1337746:tid 1337746] [client 2a0b:f4c2::15:50468] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sutherlandyogastudio.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sutherlandyogastudio.com"] [uri "/installer-data.sql"] [unique_id "Z8DtmGMDzDyRZaPXNuq40wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-27 20:31:23 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 15:31:16.214501 2025] [security2:error] [pid 2790:tid 2790] [client 2a0b:f4c2::15:43422] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.hawaiireservations.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hawaiireservations.com"] [uri "/db-backup.sql"] [unique_id "Z8DLlFIjGwYYJ5An1x2VEwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-25 21:17:58 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 16:17:53.761719 2025] [security2:error] [pid 18120:tid 18142] [client 2a0b:f4c2::15:17178] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "datuinc.com"] [uri "/wp-config.php~.public"] [unique_id "Z74zgQbMqf9r_6TEwb6SkAAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-25 18:56:25 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 13:56:19.318036 2025] [security2:error] [pid 17095:tid 17130] [client 2a0b:f4c2::15:2500] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|captechinc.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "captechinc.com"] [uri "/mysql.sql"] [unique_id "Z74SU4TndMVHiJkd1DMmdAAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-25 11:20:54 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 06:20:49.848912 2025] [security2:error] [pid 29507:tid 29507] [client 2a0b:f4c2::15:7246] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|symbarenewables.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "symbarenewables.com"] [uri "/wp-content/mysql.sql"] [unique_id "Z72nkcoj8EFFZlVT0vNkTwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-25 10:08:23 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 05:08:19.085049 2025] [security2:error] [pid 323779:tid 323779] [client 2a0b:f4c2::15:55574] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.songwriterdemo.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.songwriterdemo.com"] [uri "/wp-content/mysql.sql"] [unique_id "Z72Wk-02kCKvoTbNEYc1AwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-21 23:23:53 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 21 18:23:47.651759 2025] [security2:error] [pid 6918:tid 7042] [client 2a0b:f4c2::15:46892] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|boxvalleyrockers.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "boxvalleyrockers.com"] [uri "/installer-data.sql"] [unique_id "Z7kLA4mxLvAU2_Gtctb_PgAAAcg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-21 18:13:49 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 21 13:13:42.814549 2025] [security2:error] [pid 9577:tid 9577] [client 2a0b:f4c2::15:45232] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|3penguinsdesign.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3penguinsdesign.com"] [uri "/wp-content/mysql.sql"] [unique_id "Z7jCVq3UHkH2Mrmn_SvOGQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-20 17:14:29 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 20 12:14:20.563425 2025] [security2:error] [pid 14454:tid 14454] [client 2a0b:f4c2::15:25284] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|chaletparkaparts.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chaletparkaparts.com"] [uri "/wp-content/mysql.sql"] [unique_id "Z7di7EiibDlfQDNidn8WUAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-16 04:59:18 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 15 23:59:11.132663 2025] [security2:error] [pid 1787:tid 1787] [client 2a0b:f4c2::15:39736] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|simplehandymanllc.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "simplehandymanllc.com"] [uri "/wp-content/db.sql"] [unique_id "Z7Fwn3WhG43oGQUewAhyhAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-14 00:16:59 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 13 19:16:53.485206 2025] [security2:error] [pid 23581:tid 23581] [client 2a0b:f4c2::15:56970] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kellenbarger.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kellenbarger.com"] [uri "/db.sql"] [unique_id "Z66LdcOpbmAyNWUhCD1aTwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-11 00:35:47 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 10 19:35:42.215658 2025] [security2:error] [pid 8892:tid 8892] [client 2a0b:f4c2::15:47416] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.inclined2wander.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.inclined2wander.com"] [uri "/installer-data.sql"] [unique_id "Z6qbXlPtBvgmP_8YhVfucgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-09 21:00:54 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 09 16:00:50.936854 2025] [security2:error] [pid 25336:tid 25336] [client 2a0b:f4c2::15:44114] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandersonpropertyimprovements.com"] [uri "/download.php"] [unique_id "Z6kXgv6_u0WcGWpjotpyAgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-15 03:04:57 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::15 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 14 22:04:48.823374 2025] [security2:error] [pid 17896:tid 17896] [client 2a0b:f4c2::15:52150] [client 2a0b:f4c2::15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.studiopilates.net"] [uri "/wp-config.php.backup.txt"] [unique_id "Z4cl0BnE_Gz7mER29o_gfgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Nicolmn	2025-01-11 18:10:13 (1 year ago)	Web form spam ( id srvs.l )	Web Spam

Showing 151 to 165 of 216 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 157.230.165.211

🇭🇰 156.225.1.98

🇮🇳 49.207.242.82

🇬🇧 31.14.254.107

🇧🇩 203.99.145.203

🇹🇳 197.5.145.114

🇵🇾 186.16.206.82

🇮🇩 182.253.209.100

🇨🇳 160.202.253.225

🇮🇩 157.20.159.35

🇺🇸 147.185.132.85

🇨🇳 116.179.32.202

🇬🇧 109.180.119.90

🇩🇪 104.248.132.98

🇮🇳 103.174.34.49

🇲🇩 87.248.161.46

🇵🇹 81.84.191.47

🇧🇬 79.124.62.126

🇺🇸 54.166.249.45

🇺🇸 52.248.43.16