JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2::26

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

219 reports

35 reporters · latest 1 month ago

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a0b:f4c2::26

Export CSV

This IP address has been reported a total of 219 times from 35 distinct sources. 2a0b:f4c2::26 was first reported on September 20th 2023, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: Turkey with 1 report. The most common categories in these recent reports were: Hacking 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-04 19:04:03 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 14:03:55.472398 2025] [security2:error] [pid 12192:tid 12192] [client 2a0b:f4c2::26:36614] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|joevallone.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "joevallone.com"] [uri "/joevallon.sql"] [unique_id "aTHbG6BMHZ_fZzjP5OTmaQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-04 18:31:28 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 13:31:06.740194 2025] [security2:error] [pid 6454:tid 6462] [client 2a0b:f4c2::26:35650] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|michaelrandon.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "michaelrandon.com"] [uri "/n.sql"] [unique_id "aTHTalnbnskLcR1DlKUEfwAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 23:53:21 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 18:53:14.753653 2025] [security2:error] [pid 24132:tid 24132] [client 2a0b:f4c2::26:24038] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|toepferlab.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "toepferlab.org"] [uri "/toe.sql"] [unique_id "aSjkaozVwBcD1KhZaDERXQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:01:49 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:01:45.441454 2025] [security2:error] [pid 29869:tid 29869] [client 2a0b:f4c2::26:52942] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ianmagarzo.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ianmagarzo.com"] [uri "/ian.sql"] [unique_id "aSaJucm5qFWay-Am8s7IlwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 13:30:33 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 08:30:28.610120 2025] [security2:error] [pid 18246:tid 18246] [client 2a0b:f4c2::26:62550] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aandbnaturalfoods.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aandbnaturalfoods.com"] [uri "/aandbnaturalfood.sql"] [unique_id "aSMMdPN5CpT2N5ydMoIV1gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 R.G.	2025-11-19 16:40:14 (10 months ago)	2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org), 12 distributed directadmin attacks on account [cloa ... show more 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org), 12 distributed directadmin attacks on account [cloacked] in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 19 17:34:12 user denied: wordpress (mysql-denied) from 2a03:e600:100::5 show less	Brute-Force
🇺🇸 TPI-Abuse	2025-11-17 22:18:12 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 17:18:02.972901 2025] [security2:error] [pid 6329:tid 6329] [client 2a0b:f4c2::26:36992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kathydumesnilart.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kathydumesnilart.com"] [uri "/wordpress.sql"] [unique_id "aRufGlzYR9k1GBRqWf3VhwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-16 06:06:14 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 01:06:06.216610 2025] [security2:error] [pid 31742:tid 31742] [client 2a0b:f4c2::26:42028] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|laura-stone.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "laura-stone.com"] [uri "/tone_com.sql"] [unique_id "aRlpzo6SMNvEtqLDxXFcPgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2025-11-12 22:58:40 (10 months ago)	(mod_security) mod_security (id:949110) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:949110) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 13:20:49 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 08:20:45.056850 2025] [security2:error] [pid 31095:tid 31095] [client 2a0b:f4c2::26:16206] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|earthtwoworkshop.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "earthtwoworkshop.com"] [uri "/earthtwowork.sql"] [unique_id "aRSJrVVdjtCkqMNqON_wgQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-11 01:12:34 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 20:12:29.942254 2025] [security2:error] [pid 3003:tid 3046] [client 2a0b:f4c2::26:1784] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|conservativedemocrat.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "conservativedemocrat.com"] [uri "/conserv.sql"] [unique_id "aRKNfbT2gnbv2gQgc4rQqwAAAg4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-10 20:48:12 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 15:48:07.935033 2025] [security2:error] [pid 2149:tid 2168] [client 2a0b:f4c2::26:5134] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vivierae.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vivierae.com"] [uri "/vivierae.sql"] [unique_id "aRJPh-m4Me4itjN_yDO-BAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 mk-dizajn.hr	2025-11-08 15:54:55 (10 months ago)	$f2bV_matches	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-29 19:14:53 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 15:14:49.589666 2025] [security2:error] [pid 31833:tid 31833] [client 2a0b:f4c2::26:14698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.esdulemba.com"] [uri "/api/.env"] [unique_id "aQJnqQ_McI1xGWAvU65IrAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-26 23:07:00 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::26 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 26 19:06:54.713990 2025] [security2:error] [pid 24569:tid 24569] [client 2a0b:f4c2::26:59616] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mjkhan.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mjkhan.com"] [uri "/mj.sql"] [unique_id "aP6pjj4kqnsa4XTF6wU_RAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 76 to 90 of 219 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 20.210.128.125

🇮🇷 178.131.162.172

🇺🇸 162.216.150.33

🇺🇸 72.211.57.141

🇲🇽 38.191.93.10

🇩🇪 37.24.25.213

🇺🇸 34.228.104.231

🇧🇷 34.39.165.91

🇰🇷 14.39.125.83

🇨🇳 223.167.205.167

🇺🇸 217.145.225.12

🇳🇱 195.178.110.30

🇨🇴 190.0.63.226

🇻🇳 163.61.110.233

🇺🇸 142.93.243.133

🇧🇷 103.88.232.57

🇿🇦 102.66.192.150

🇷🇴 92.118.39.77

🇺🇸 68.225.62.138

🇺🇸 64.62.156.78