JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::25

2a0b:f4c2::25 was found in our database!

This IP was reported 224 times. Confidence of Abuse is 28%: ?

28%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	Fixed Line ISP
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::25

Whois 2a0b:f4c2::25

IP Abuse Reports for 2a0b:f4c2::25:

This IP address has been reported a total of 224 times from 33 distinct sources. 2a0b:f4c2::25 was first reported on September 10th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-30 17:16:04 (1 day ago)	[ThuJul3019:15:59.9053282026][security2:error][pid3227832:tid3227941][client2a0b:f4c2::25:0]ModSecur ... show more [ThuJul3019:15:59.9053282026][security2:error][pid3227832:tid3227941][client2a0b:f4c2::25:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ipv6.kvsm-blackstone.com\"][uri\"/\"][unique_id\"amuGz1Ocy795QXlSBPgjQwAAAQc\"] show less	Port Scan Brute-Force Web App Attack
🇹🇷 neron	2026-07-30 03:06:18 (1 day ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-29 02:19:38 (2 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-28 02:19:38 (3 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-26 19:50:51 (4 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 xmission.com	2026-07-22 18:37:49 (1 week ago)	Blocked by UFW (TCP on 8333) Source port: 31006 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 31006 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0025) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-19 07:57:38 (1 week ago)	Blocked by UFW (TCP on 8333) Source port: 48550 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 48550 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0025) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-10 16:48:03 (3 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 51468 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 51468 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0025) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 windowsforum	2026-06-22 18:28:02 (1 month ago)	Spam bot registration: triggers=service_check, username=WiteXCT	Web Spam Bad Web Bot
🇺🇸 xmission.com	2026-06-19 09:07:08 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 19866 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 19866 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0025) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-12 01:32:44 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 21:32:38.627477 2026] [security2:error] [pid 1455:tid 1455] [client 2a0b:f4c2::25:39610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.houseofbates.net"] [uri "/.git/config"] [unique_id "aithtuT0985vHxvOgBqPqgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-05 16:27:54 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 14318 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 14318 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0025) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-22 10:16:06 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 13254 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 13254 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0025) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-26 21:04:37 (3 months ago)	2026-04-26 08:00:54,932 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::25 2026-04-26 1 ... show more 2026-04-26 08:00:54,932 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::25 2026-04-26 12:01:42,427 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::25 2026-04-26 18:01:40,079 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::25 2026-04-26 21:01:39,333 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::25 2026-04-27 00:04:32,789 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::25 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-25 16:34:50 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 12:34:45.281210 2026] [security2:error] [pid 11952:tid 11952] [client 2a0b:f4c2::25:35484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kh6jim.com"] [uri "/wp-config.phptmp"] [unique_id "aeztJUMGQcZ42VTDy0WIoQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 186.113.246.227

🇺🇸 173.231.200.81

🇺🇸 20.80.105.83

🇸🇬 2600:3c15::2000:4eff:fe2c:67ea

🇫🇷 195.154.59.122

🇧🇷 186.232.110.92

🇺🇸 162.216.149.179

🇺🇸 74.125.72.28

🇨🇳 14.103.112.35

🇺🇸 216.25.89.77

🇦🇺 203.196.42.114

🇨🇱 186.64.123.124

🇵🇱 176.53.159.198

🇵🇱 176.53.159.197

🇮🇳 122.177.244.101

🇨🇳 120.48.90.166

🇺🇸 72.180.241.103

🇺🇸 20.98.164.209

🇮🇳 14.98.67.210

🇳🇱 185.242.226.90