JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2::19

Activity Trending Down IPv6 SLAAC Note

Abuse confidence score ?

8% Caution

235 reports

32 reporters · latest 4 weeks ago

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a0b:f4c2::19

Export CSV

This IP address has been reported a total of 235 times from 32 distinct sources. 2a0b:f4c2::19 was first reported on November 5th 2022, and the most recent report was 4 weeks ago. In the last 60 days, the top reporter locations were: Turkey with 6 reports; United States of America with 1 report. The most common categories in these recent reports were: Hacking 6 times; Web App Attack 6 times; Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-11-20 07:34:33 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 20 02:34:25.899789 2024] [security2:error] [pid 15994:tid 15994] [client 2a0b:f4c2::19:54540] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.henrietteg.com"] [uri "/.git/config"] [unique_id "Zz2RAZAFxHcCsy0ZlVugmgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-20 04:27:20 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 23:27:14.146484 2024] [security2:error] [pid 22112:tid 22112] [client 2a0b:f4c2::19:19384] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.somosaguila.com"] [uri "/.git/config"] [unique_id "Zz1lIiYHKF83POy-y7W92wAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-20 02:57:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 21:57:39.624305 2024] [security2:error] [pid 19360:tid 19360] [client 2a0b:f4c2::19:28836] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.waleed-alshalan.com"] [uri "/.git/config"] [unique_id "Zz1QI84VhcYN8K_r1U0jzAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-09 03:40:02 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 22:39:55.538648 2024] [security2:error] [pid 32070:tid 32077] [client 2a0b:f4c2::19:27808] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zapdazzle.com"] [uri "/wp-config.php.maj"] [unique_id "Zy7Ziz4KxdH7qlB9QTLmdgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-04 20:30:06 (1 year ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Hacking SQL Injection Web App Attack
🇵🇱 sefinek.net	2024-11-03 19:21:37 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) P ... show more Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) Protocol: HTTP/2 (method GET) Domain: sefinek.net Endpoint: /favicon.ico Timestamp: 2024-11-03T18:14:50Z Ray ID: 8dce58a50d9b0f39 Rule ID: 61a9aeb040004a25a09c35e9bfb80913 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0 Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-10-13 16:35:43 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 13 12:35:36.162361 2024] [security2:error] [pid 23269:tid 23269] [client 2a0b:f4c2::19:22042] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "viszin.com"] [uri "/wp-config.php.txt"] [unique_id "Zwv22HM58RMYLtdGmnIyMgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-20 12:40:31 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 20 08:40:27.411401 2024] [security2:error] [pid 9574:tid 9574] [client 2a0b:f4c2::19:54610] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ontimelogistiks.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ontimelogistiks.com"] [uri "/s.sql"] [unique_id "Zu1tOzlSlq2WvdifnXtrlgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-08 13:23:56 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 08 09:23:51.271618 2024] [security2:error] [pid 23358:tid 23358] [client 2a0b:f4c2::19:54060] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|roughexports.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "roughexports.com"] [uri "/ghexports.sql"] [unique_id "Zt2lZ4QbuH_meI3u2EYtWwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 MacLotsen	2024-08-28 17:47:36 (2 years ago)	berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3 ... show more berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl" "Mozilla/5.0 (SS; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.2.20" berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-log ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-08-24 22:14:52 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 24 18:14:47.940957 2024] [security2:error] [pid 23854:tid 23854] [client 2a0b:f4c2::19:19176] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|surviquo.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "surviquo.com"] [uri "/wordpress.sql"] [unique_id "ZspbV3UCOp5G2uV4u5pvhgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-18 21:50:13 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 18 17:50:05.383065 2024] [security2:error] [pid 30939:tid 30939] [client 2a0b:f4c2::19:9788] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.kaleidoscope-glass.com"] [uri "/.git/config"] [unique_id "ZsJsjYSuqhgB-Xp5e_1QVwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-18 00:54:07 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 17 20:54:00.743286 2024] [security2:error] [pid 19006:tid 19006] [client 2a0b:f4c2::19:5178] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.bonvivantorganics.com"] [uri "/.git/config"] [unique_id "ZsFGKFsHcE837w6kXd3ElgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-09 16:38:39 (2 years ago)	(mod_security) mod_security (id:234930) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:234930) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 09 12:38:28.748748 2024] [security2:error] [pid 4503:tid 4587] [client 2a0b:f4c2::19:53116] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.killasgarage.bike\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.killasgarage.bike"] [uri "/uncategorized/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ZrZGBP9XqPBUCd5nr61brAAAAMg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-07 20:24:29 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::19 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 16:24:20.571316 2024] [security2:error] [pid 19186:tid 19308] [client 2a0b:f4c2::19:46306] [client 2a0b:f4c2::19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.reghay.com"] [uri "/.git/config"] [unique_id "ZrPX9MjC02arHegqHcBWSQAAAQA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 181 to 195 of 235 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.57.211.34

🇦🇷 186.139.251.57

🇳🇱 169.150.196.8

🇩🇪 104.248.35.43

🇳🇱 80.82.77.202

🇺🇸 75.118.148.230

🇲🇦 196.206.33.193

🇷🇺 185.105.109.142

🇺🇸 165.154.36.71

🇳🇱 109.160.32.124

🇹🇷 88.249.195.23

🇳🇱 77.91.71.91

🇺🇸 70.168.196.86

🇩🇪 34.89.243.14

🇴🇲 5.37.252.101

🇺🇸 3.151.116.231

🇹🇷 201.4.71.206

🇱🇧 185.142.40.89

🇧🇷 170.79.97.207

🇺🇸 152.163.101.9