JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2::27

Neutral Activity IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

230 reports

26 reporters · latest 1 month ago

ISP: Artikel10 e.V.
Usage Type: University/College/School
ASN: AS60729
Hostname(s): berlin01.tor-exit.artikel10.org
Domain Name: artikel10.org
Country: 🇩🇪 Germany
City: Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

230 from 26 distinct reporters

First reported

June 23rd 2023

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 1

Most common categories Web App Attack 1 Brute-Force 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-07-13 00:21:59 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 20:21:53.912246 2024] [security2:error] [pid 28136:tid 4782665 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 20:21:53.912246 2024] [security2:error] [pid 28136:tid 47826656982784] [client 2a0b:f4c2::27:54864] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|joanagauer.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "joanagauer.com"] [uri "/contact/&/mailto:[email protected]/mailto:[email protected]/mailto:[email protected]/mailto:[email protected]"] [unique_id "ZpHIodqO7VqYOa8eKdgFmwAAAQY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-12 10:16:59 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 06:16:51.116696 2024] [security2:error] [pid 28131] [client 2a ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 06:16:51.116696 2024] [security2:error] [pid 28131] [client 2a0b:f4c2::27:7932] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.studiopilates.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.studiopilates.net"] [uri "/stud.sql"] [unique_id "ZpECkz7d73g7cdjX_SfL4QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2024-07-04 23:16:19 UTC · (2 years ago)	Honeypot HIT	Brute-Force
🇳🇱 Linuxmalwarehuntingnl	2024-06-28 22:53:05 UTC · (2 years ago)	Honeypot HIT	Brute-Force
🇺🇸 TPI-Abuse	2024-06-12 02:18:09 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 11 22:18:00.775266 2024] [security2:error] [pid 2564] [client 2a0 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 11 22:18:00.775266 2024] [security2:error] [pid 2564] [client 2a0b:f4c2::27:17992] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mlsdirect.xyz\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mlsdirect.xyz"] [uri "/ml.sql"] [unique_id "ZmkFWKZ0Rupd1nq-ougj9QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-06 03:51:56 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 05 23:51:49.542954 2024] [security2:error] [pid 9003:tid 47408787 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 05 23:51:49.542954 2024] [security2:error] [pid 9003:tid 47408787687168] [client 2a0b:f4c2::27:5844] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.sparkhypnotherapy.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sparkhypnotherapy.com"] [uri "/_/mailto:[email protected]"] [unique_id "ZmEyVYftDQ4tSxPyEO1GGQAAAMk"], referer: http://sparkhypnotherapy.com/_/mailto:[email protected] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-24 10:26:16 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 24 06:26:09.018367 2024] [security2:error] [pid 9632] [client 2a0 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 24 06:26:09.018367 2024] [security2:error] [pid 9632] [client 2a0b:f4c2::27:56692] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|talkingvcardusa.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "talkingvcardusa.com"] [uri "/ta.sql"] [unique_id "ZlBrQWqRpd3eUAYZNH-MbQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-16 00:42:27 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 15 20:42:19.816178 2024] [security2:error] [pid 11012] [client 2a ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 15 20:42:19.816178 2024] [security2:error] [pid 11012] [client 2a0b:f4c2::27:3096] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.puckerbikini.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.puckerbikini.com"] [uri "/puc.sql"] [unique_id "ZkVWaySzPN6p31yXiEm9bgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-14 23:52:29 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 14 19:52:24.255989 2024] [security2:error] [pid 10450] [client 2a ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 14 19:52:24.255989 2024] [security2:error] [pid 10450] [client 2a0b:f4c2::27:26566] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|letmespeakpodcast.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "letmespeakpodcast.com"] [uri "/peakpodcast.sql"] [unique_id "ZkP5OKUZWpzkzqNa2p_KlAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-09 21:03:37 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 09 17:03:33.202613 2024] [security2:error] [pid 1783130] [client ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 09 17:03:33.202613 2024] [security2:error] [pid 1783130] [client 2a0b:f4c2::27:64472] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|brushmileage.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brushmileage.org"] [uri "/e.sql"] [unique_id "Zj06JTk6VZwPNUROffrOVQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-24 13:58:53 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 24 09:58:48.260570 2024] [security2:error] [pid 9913] [client 2a0 ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 24 09:58:48.260570 2024] [security2:error] [pid 9913] [client 2a0b:f4c2::27:29244] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.transstrategies.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.transstrategies.net"] [uri "/.sql"] [unique_id "ZikQGCiDbzNw4NgLzQ8UGQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 MrBister	2024-04-09 02:38:00 UTC · (2 years ago)	2a0b:f4c2::27 - - [09/Apr/2024:04:38:28 +0200] "GET /.DS_Store HTTP/1.1"	Web App Attack
🇺🇸 TPI-Abuse	2024-03-30 23:02:35 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 30 19:02:28.621924 2024] [security2:error] [pid 31184] [client 2a ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 30 19:02:28.621924 2024] [security2:error] [pid 31184] [client 2a0b:f4c2::27:49188] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|timbertoysbt.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "timbertoysbt.com"] [uri "/timbe.sql"] [unique_id "ZgiaBKcpO1eFqIPHf0hGbwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-29 03:28:51 UTC · (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 28 23:28:48.384864 2024] [security2:error] [pid 18186] [client 2a ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 28 23:28:48.384864 2024] [security2:error] [pid 18186] [client 2a0b:f4c2::27:23132] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.truthsabouthealthcare.com"] [uri "/.git/config"] [unique_id "ZgY1cL1i6E02y4tBVKxFmwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-29 00:23:15 UTC · (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 28 20:23:07.905689 2024] [security2:error] [pid 13150] [client 2a ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 28 20:23:07.905689 2024] [security2:error] [pid 13150] [client 2a0b:f4c2::27:7760] [client 2a0b:f4c2::27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.livingminimal.com"] [uri "/.git/config"] [unique_id "ZgYJ62bFCtHJZcRdn1lgPwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 196 to 210 of 230 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2602:80d:1007::f

🇳🇱 185.136.15.2

🇺🇸 162.216.150.158

🇮🇳 110.235.219.170

🇲🇦 105.156.117.6

🇧🇩 103.41.245.117

🇸🇪 78.66.45.101

🇺🇦 78.27.162.44

🇳🇱 77.67.26.80

🇺🇸 74.244.15.201

🇨🇳 49.75.185.71

🇳🇱 45.148.10.152

🇬🇧 35.203.210.118

🇺🇸 207.90.244.19

🇩🇪 172.70.243.241

🇩🇪 172.70.243.183

🇺🇸 165.154.235.9

🇻🇳 113.23.111.206

🇭🇰 103.108.67.180

🇺🇸 98.171.138.140