JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::17

2a0b:f4c2::17 was found in our database!

This IP was reported 214 times. Confidence of Abuse is 20%: ?

20%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	Commercial
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::17

Whois 2a0b:f4c2::17

IP Abuse Reports for 2a0b:f4c2::17:

This IP address has been reported a total of 214 times from 28 distinct sources. 2a0b:f4c2::17 was first reported on June 18th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-07 05:48:01 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 01:47:55.977151 2026] [security2:error] [pid 7913:tid 7913] [client 2a0b:f4c2::17:55790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.thelundbergs.us"] [uri "/.git/config"] [unique_id "aiUGCww6JaXnTajhlo37DgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-15 05:59:16 (3 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 17736 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 17736 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0017) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-14 06:23:45 (3 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 55454 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 55454 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0017) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-11 09:16:37 (4 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 8710 Packet length: 80 This report (for 2a0b:f4c2:0000:00 ... show more Blocked by UFW (TCP on 8333) Source port: 8710 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0017) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-26 21:04:35 (1 month ago)	2026-04-26 08:00:54,384 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::17 2026-04-26 1 ... show more 2026-04-26 08:00:54,384 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::17 2026-04-26 12:01:42,099 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::17 2026-04-26 18:01:39,752 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::17 2026-04-26 21:01:39,001 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::17 2026-04-27 00:04:30,669 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::17 show less	Brute-Force
🇨🇭 4server	2026-04-16 06:16:13 (1 month ago)	[ThuApr1608:16:08.9160042026][security2:error][pid3862180:tid3862364][client2a0b:f4c2::17:0]ModSecur ... show more [ThuApr1608:16:08.9160042026][security2:error][pid3862180:tid3862364][client2a0b:f4c2::17:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"359\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"cadvending.ch\"][uri\"/wp-content/plugins/wpforms-lite/readme.txt\"][unique_id\"aeB-qK0baYzQpR8SEO7VxQAAAEE\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-09 00:50:27 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 20:50:20.172287 2026] [security2:error] [pid 3139941:tid 3139941] [client 2a0b:f4c2::17:63630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humanicelement.com"] [uri "/wp-config.phpnew"] [unique_id "adb3zNJkBR0XApFcPyT1zAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-02 08:28:16 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 33542 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 33542 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0017) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-15 13:45:11 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 63508 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 63508 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0017) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-03-09 04:13:51 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 00:13:43.154872 2026] [security2:error] [pid 28088:tid 28088] [client 2a0b:f4c2::17:3208] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|geckoturner.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "geckoturner.com"] [uri "/ckoturner_prod.sql"] [unique_id "aa5I9yL7jvM2zqLJJTl4QgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-27 11:56:25 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 06:56:18.957682 2026] [security2:error] [pid 9722:tid 9722] [client 2a0b:f4c2::17:29872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.lightningbug.farm"] [uri "/.git/config"] [unique_id "aaGGYhATbg9j9qcaGSb10AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-26 16:46:29 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 11:46:22.820158 2026] [security2:error] [pid 9212:tid 9212] [client 2a0b:f4c2::17:58676] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ouzcorp.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ouzcorp.com"] [uri "/dbuzcorp.sql"] [unique_id "aaB43tE4RcBPHeYVpMGVQAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 20:16:47 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 15:16:40.868549 2026] [security2:error] [pid 29088:tid 29088] [client 2a0b:f4c2::17:31196] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dwightbrown.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dwightbrown.com"] [uri "/own_db.sql"] [unique_id "aZy1qOAkNICTimgi7sQC1AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 13:24:18 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 08:24:12.317538 2026] [security2:error] [pid 8358:tid 8358] [client 2a0b:f4c2::17:15460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.bienvista.com"] [uri "/.git/config"] [unique_id "aZxU_LZ69JUu-8kNIezLugAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 16:50:43 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 11:50:38.543045 2026] [security2:error] [pid 2312:tid 2312] [client 2a0b:f4c2::17:53430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.avmarep.com"] [uri "/.git/config"] [unique_id "aZsz3mCF-BMVgAF_I6GybQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 214 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:7ff:2::

🇺🇸 217.216.90.208

🇳🇱 206.189.109.91

🇩🇪 194.88.98.110

🇩🇪 193.124.20.227

🇧🇴 181.115.147.5

🇺🇸 74.235.79.41

🇳🇱 45.148.10.147

🇺🇸 2a03:2880:7ff:20::

🇧🇴 190.181.4.12

🇨🇳 182.119.131.252

🇩🇪 167.94.146.63

🇩🇪 141.95.65.57

🇨🇳 112.86.225.199

🇳🇱 81.19.216.98

🇮🇳 49.43.241.11

🇸🇬 43.173.173.188

🇸🇬 43.128.89.111

🇳🇱 34.91.40.78

🇮🇪 18.200.249.85