JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2::23

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

219 reports

32 reporters · latest 1 month ago

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a0b:f4c2::23

Export CSV

This IP address has been reported a total of 219 times from 32 distinct sources. 2a0b:f4c2::23 was first reported on September 20th 2023, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: United States of America with 2 reports. The only category in these recent reports was: Port Scan 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-11-07 21:23:09 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 07 16:23:03.507403 2024] [security2:error] [pid 23867:tid 23867] [client 2a0b:f4c2::23:7736] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|maffiniandbearce.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "maffiniandbearce.com"] [uri "/dbearce.sql"] [unique_id "Zy0vt5QVrCbEx2X8LJTTZQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-05 10:20:04 (1 year ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Hacking SQL Injection Web App Attack
🇵🇱 sefinek.net	2024-09-24 05:25:52 (2 years ago)	Triggered Cloudflare WAF (firewallCustom). Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) [T1] Prot ... show more Triggered Cloudflare WAF (firewallCustom). Action taken: BLOCK ASN: 60729 (TORSERVERS-NET) [T1] Protocol: HTTP/2 (method GET) Domain: sefinek.net Endpoint: /favicon.ico Timestamp: 2024-09-23T21:12:00Z Ray ID: 8c7d87cdab3eca43 Rule ID: 61a9aeb040004a25a09c35e9bfb80913 UA: Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0 Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-09-15 15:56:03 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 15 11:55:57.381283 2024] [security2:error] [pid 13646:tid 13646] [client 2a0b:f4c2::23:48096] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|studiopilates.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "studiopilates.net"] [uri "/udiopilates.sql"] [unique_id "ZucDjXz9NGyqqbtMSYpTCAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-08 16:48:37 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 08 12:48:30.584536 2024] [security2:error] [pid 24076:tid 24076] [client 2a0b:f4c2::23:38492] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thespotfurniture.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thespotfurniture.com"] [uri "/backup.sql"] [unique_id "Zt3VXrhBjZtpNGDK-78t6AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-31 20:10:50 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 16:10:42.538540 2024] [security2:error] [pid 13337:tid 13337] [client 2a0b:f4c2::23:46614] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|primacomm.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "primacomm.com"] [uri "/prim.sql"] [unique_id "ZtN4wsa4ezYRTg16sWB6cgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-29 21:38:13 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 29 17:38:05.056277 2024] [security2:error] [pid 20394:tid 20394] [client 2a0b:f4c2::23:51332] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.waterjetsolutions.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.waterjetsolutions.com"] [uri "/waterjetso.sql"] [unique_id "ZtDqPT62bIpQMAEzr_4-QAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 MacLotsen	2024-08-28 17:46:52 (2 years ago)	berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3 ... show more berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl" "Mozilla/5.0 (SS; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.2.20" berlin01.tor-exit.artikel10.org - - [28/Aug/2024:19:45:53 +0200] "POST /wp-log ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-08-27 09:14:22 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 27 05:14:17.185548 2024] [security2:error] [pid 11880:tid 11880] [client 2a0b:f4c2::23:36360] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.aeomis.com"] [uri "/.git/config"] [unique_id "Zs2Y6eZoCiGJFNDy1ZqksAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Admins@FBN	2024-08-20 06:05:08 (2 years ago)	FW-PortScan: Traffic Blocked srcport=14598 dstport=443	Port Scan
🇺🇸 TPI-Abuse	2024-08-10 16:27:54 (2 years ago)	(mod_security) mod_security (id:234930) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:234930) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 10 12:27:46.620946 2024] [security2:error] [pid 14942:tid 15020] [client 2a0b:f4c2::23:18246] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.duplexgoldmine.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.duplexgoldmine.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ZreVAqovUSXQ_NJxEXIXBAAAAMU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 OiledAmoeba	2024-08-06 20:52:23 (2 years ago)	2a0b:f4c2::23 - - [06/Aug/2024:22:52:00 +0200] "www.ruhnke.cloud" "POST //xmlrpc.php HTTP/1.1" 200 2 ... show more 2a0b:f4c2::23 - - [06/Aug/2024:22:52:00 +0200] "www.ruhnke.cloud" "POST //xmlrpc.php HTTP/1.1" 200 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.522 "-" 2a0b:f4c2::23 - - [06/Aug/2024:22:52:03 +0200] "www.ruhnke.cloud" "POST //xmlrpc.php HTTP/1.1" 200 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.575 "-" 2a0b:f4c2::23 - - [06/Aug/2024:22:52:05 +0200] "www.ruhnke.cloud" "POST //xmlrpc.php HTTP/1.1" 200 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.618 "-" 2a0b:f4c2::23 - - [06/Aug/2024:22:52:19 +0200] "www.ruhnke.cloud" "POST //xmlrpc.php HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.453 "-" 2a0b:f4c2::23 - - [06/Aug/2024:22:52:22 +0200] "www.ruhnke ... show less	Brute-Force
🇺🇸 TPI-Abuse	2024-08-06 01:01:36 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 21:01:28.063427 2024] [security2:error] [pid 10448:tid 10448] [client 2a0b:f4c2::23:21692] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.gnquivers.com"] [uri "/.git/config"] [unique_id "ZrF16IIwiEs-Y-ppvNV5ZgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-05 22:29:01 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 18:28:57.907232 2024] [security2:error] [pid 9875:tid 9875] [client 2a0b:f4c2::23:20976] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.bernescobar.com"] [uri "/.git/config"] [unique_id "ZrFSKYe_Nhky468zUxxdTgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-30 16:30:02 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 30 12:29:55.032837 2024] [security2:error] [pid 28853:tid 28853] [client 2a0b:f4c2::23:39156] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.bigblue4.us"] [uri "/.git/config"] [unique_id "ZqkVA0jQA6cWiDMYC6YbcAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 166 to 180 of 219 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇷🇺 176.193.231.65

🇬🇧 165.154.129.43

🇫🇮 147.185.133.60

🇵🇰 139.135.46.207

🇧🇪 130.211.99.84

🇨🇦 129.222.247.79

🇮🇳 122.176.17.62

🇺🇸 104.220.32.177

🇩🇪 94.26.0.103

🇷🇴 92.118.39.223

🇷🇴 92.118.39.214

🇺🇸 71.6.134.234

🇦🇹 62.83.35.18

🇬🇧 45.133.173.20

🇻🇳 1.54.223.164

🇺🇸 2604:a880:400:d1:0:5:3912:1

🇳🇱 213.177.179.109

🇴🇲 212.146.165.253

🇨🇱 207.248.0.209