JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::17

2a0b:f4c2::17 was found in our database!

This IP was reported 225 times. Confidence of Abuse is 22%: ?

22%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	Fixed Line ISP
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::17

Whois 2a0b:f4c2::17

IP Abuse Reports for 2a0b:f4c2::17:

This IP address has been reported a total of 225 times from 29 distinct sources. 2a0b:f4c2::17 was first reported on June 18th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-03-21 17:04:52 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 13:04:45.245230 2024] [security2:error] [pid 29354] [client 2a0b:f4c2::17:56666] [client 2a0b:f4c2::17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.tone57.com"] [uri "/.git/config"] [unique_id "ZfxorZjZfttAHHfnSmjOuAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-21 15:13:30 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 11:13:27.342588 2024] [security2:error] [pid 3703642:tid 47759630718720] [client 2a0b:f4c2::17:49634] [client 2a0b:f4c2::17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.kincers.com"] [uri "/.git/config"] [unique_id "ZfxOl6z2H0TaMvr86vcsmAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-21 09:50:44 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:50:41.029772 2024] [security2:error] [pid 23075] [client 2a0b:f4c2::17:3898] [client 2a0b:f4c2::17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.bigtrucksforkids.com"] [uri "/.git/config"] [unique_id "ZfwC8TZcugkYXVVhft4V7AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-21 09:14:33 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:14:25.082425 2024] [security2:error] [pid 31136] [client 2a0b:f4c2::17:16516] [client 2a0b:f4c2::17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.vccemail.net"] [uri "/.git/config"] [unique_id "Zfv6cY_3v3qWTUTOeocHBwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-21 08:31:03 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 04:30:54.443886 2024] [security2:error] [pid 13085] [client 2a0b:f4c2::17:19360] [client 2a0b:f4c2::17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.kathrynsaunders.com"] [uri "/.git/config"] [unique_id "ZfvwPuOAjqtO53VygjI0hwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-17 15:47:19 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 17 11:47:16.228679 2024] [security2:error] [pid 17390] [client 2a0b:f4c2::17:1880] [client 2a0b:f4c2::17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.ucommsi.com"] [uri "/.git/config"] [unique_id "ZfcQhGwFZ2iwmrbDaD4yRQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-15 10:37:39 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 15 06:37:32.150083 2024] [security2:error] [pid 19714] [client 2a0b:f4c2::17:44242] [client 2a0b:f4c2::17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|valarien.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "valarien.com"] [uri "/mailto:[email protected]"] [unique_id "ZfQk7Cag_P-jlLszzRY3BgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-13 22:01:25 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 18:01:21.794321 2024] [security2:error] [pid 9654:tid 47691612604160] [client 2a0b:f4c2::17:40898] [client 2a0b:f4c2::17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.charliefranks.com"] [uri "/.git/config"] [unique_id "ZfIiMfQkIDVW25QrZgWC2wAAARI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-07 21:23:33 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 07 16:23:26.315604 2024] [security2:error] [pid 6761] [client 2a0b:f4c2::17:32072] [client 2a0b:f4c2::17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|atreyu.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "atreyu.net"] [uri "/atreyu.sql"] [unique_id "ZZsWTkVAIL5xe1IiRFYZVgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 chronos	2023-11-12 22:29:23 (2 years ago)	[[12/11/2023 - 19:29:22 -03:00 UTC] Attack from [2a0b:f4c2::17][berlin01.tor-exit.artikel10.org] Ac ... show more [[12/11/2023 - 19:29:22 -03:00 UTC] Attack from [2a0b:f4c2::17][berlin01.tor-exit.artikel10.org] Action: BLocKed Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing. ] ... show less	Bad Web Bot
🇺🇸 chronos	2023-11-12 22:29:16 (2 years ago)	[[12/11/2023 - 19:29:15 -03:00 UTC] Attack from [2a0b:f4c2::17][berlin01.tor-exit.artikel10.org] Ac ... show more [[12/11/2023 - 19:29:15 -03:00 UTC] Attack from [2a0b:f4c2::17][berlin01.tor-exit.artikel10.org] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other] ... show less	Hacking Web App Attack
🇺🇸 chronos	2023-10-11 10:12:46 (2 years ago)	[[11/10/2023 - 07:12:45 -03:00 UTC] Attack from [2a0b:f4c2::17][berlin01.tor-exit.artikel10.org] Ac ... show more [[11/10/2023 - 07:12:45 -03:00 UTC] Attack from [2a0b:f4c2::17][berlin01.tor-exit.artikel10.org] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other] ... show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2023-09-26 23:07:33 (2 years ago)	2023-09-26 02:54:27 / 2023-09-26 02:54:26 /robots.txt 2023-09-26 02:54:28 / 2023-09-26 02:54:30 http ... show more 2023-09-26 02:54:27 / 2023-09-26 02:54:26 /robots.txt 2023-09-26 02:54:28 / 2023-09-26 02:54:30 https://d3sspl5ropfzm8.cloudfront.net/ show less	Web App Attack
🇨🇳 ThreatBook.io	2023-09-24 23:13:22 (2 years ago)	2023-09-24 21:24:25 / 2023-09-24 18:55:21 /	Web App Attack
🇺🇸 mawan	2023-06-18 00:16:43 (3 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack

Showing 211 to 225 of 225 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.204.253.26

🇳🇱 195.178.110.30

🇺🇸 172.191.132.202

🇨🇳 116.177.172.64

🇻🇳 103.78.2.252

🇸🇪 81.233.184.161

🇳🇱 45.156.87.252

🇳🇱 45.148.10.141

🇺🇸 172.253.244.158

🇨🇦 104.234.6.169

🇫🇷 91.196.152.194

🇮🇳 59.179.31.237

🇳🇱 45.198.224.141

🇻🇳 27.2.113.124

🇺🇸 172.217.107.28

🇲🇽 158.23.17.4

🇺🇬 154.72.196.195

🇨🇳 117.72.208.83

🇻🇳 103.69.96.120

🇳🇱 77.239.124.108