JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2::28

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

233 reports

26 reporters · latest 1 month ago

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a0b:f4c2::28

Export CSV

This IP address has been reported a total of 233 times from 26 distinct sources. 2a0b:f4c2::28 was first reported on October 30th 2022, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: Turkey with 2 reports. The most common categories in these recent reports were: Hacking 2 times; Web App Attack 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-10-08 20:03:58 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 16:03:54.239820 2025] [security2:error] [pid 5791:tid 5791] [client 2a0b:f4c2::28:56914] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|firstunitedreserve.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "firstunitedreserve.com"] [uri "/firstunitedr.sql"] [unique_id "aObDqqs9dwV86QNTQRVOfgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-05 14:16:05 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 05 10:16:00.503344 2025] [security2:error] [pid 11347:tid 11347] [client 2a0b:f4c2::28:60936] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|casadelsolmexico.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "casadelsolmexico.net"] [uri "/wp.sql"] [unique_id "aOJ9oNdYw9GXxjm-m1NKDAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-04 13:31:25 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 09:31:18.994040 2025] [security2:error] [pid 12470:tid 12470] [client 2a0b:f4c2::28:60434] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|premierveterinarysurgery.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "premierveterinarysurgery.com"] [uri "/inarysurgery.sql"] [unique_id "aOEhpkKn1MpEreeaJXNFPgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-03 22:27:55 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 18:27:49.006431 2025] [security2:error] [pid 10371:tid 10371] [client 2a0b:f4c2::28:47076] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gangnagel.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gangnagel.com"] [uri "/wordpress.sql"] [unique_id "aOBN5X09JQUSNHic5q86oAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-02 12:27:03 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 02 08:26:57.445755 2025] [security2:error] [pid 12868:tid 12868] [client 2a0b:f4c2::28:23454] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jfexpressfr8.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jfexpressfr8.com"] [uri "/jfexpres.sql"] [unique_id "aN5vkYeQncBIqQVJiZu6UQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-01 06:59:55 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 02:59:47.310376 2025] [security2:error] [pid 16998:tid 16998] [client 2a0b:f4c2::28:45936] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|eta-mct.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "eta-mct.com"] [uri "/back.sql"] [unique_id "aNzRY9VUaIOBmfJu8d46awAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-27 21:12:52 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 27 17:12:46.306610 2025] [security2:error] [pid 2401992:tid 2402004] [client 2a0b:f4c2::28:47500] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|property-management-companies-chicago.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "property-management-companies-chicago.com"] [uri "/perty-management-companies-chicago.sql"] [unique_id "aNhTTjrmWgYktgwSH3s4-gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2025-09-25 10:12:12 (1 year ago)	(modsecurity) srv102 ModSecurity 2a0b:f4c2::28 (Unknown): 5 in the last 3600 secs; Ports: ; Directi ... show more (modsecurity) srv102 ModSecurity 2a0b:f4c2::28 (Unknown): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2025-09-24 18:03:14 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 14:03:10.556941 2025] [security2:error] [pid 6145:tid 6162] [client 2a0b:f4c2::28:45776] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|princesscastlebunkbed.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "princesscastlebunkbed.com"] [uri "/backup.sql"] [unique_id "aNQyXuXlq27HOt7u9hk_vQAAAQs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-24 02:38:06 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 22:37:58.900105 2025] [security2:error] [pid 25515:tid 25515] [client 2a0b:f4c2::28:19554] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bickleton.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bickleton.org"] [uri "/on.sql"] [unique_id "aNNZhh-mpGS2xbgts6-CPQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-23 10:06:01 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 06:05:54.988030 2025] [security2:error] [pid 25271:tid 25271] [client 2a0b:f4c2::28:53240] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dynamic-therapy-mn.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dynamic-therapy-mn.com"] [uri "/y-mn.sql"] [unique_id "aNJxAnm7E2G-797vRnrS4wAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-23 00:52:51 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 20:52:44.722156 2025] [security2:error] [pid 25287:tid 25287] [client 2a0b:f4c2::28:60358] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|convtek.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "convtek.com"] [uri "/ek.sql"] [unique_id "aNHvXN4YGBX5majbVGZIyQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-22 14:54:48 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 10:54:42.660217 2025] [security2:error] [pid 1959:tid 1959] [client 2a0b:f4c2::28:26448] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|natickvillagerentals.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "natickvillagerentals.com"] [uri "/natickvillage.sql"] [unique_id "aNFjMj8ap_5SVGlkaOBXzgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-19 13:53:24 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 09:53:18.529691 2025] [security2:error] [pid 3798:tid 3798] [client 2a0b:f4c2::28:51986] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aholsniffsglue.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aholsniffsglue.com"] [uri "/aholsniffs.sql"] [unique_id "aM1gTgyawYls1TGDr2eN4AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-19 03:05:52 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::28 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 23:05:47.777962 2025] [security2:error] [pid 8390:tid 8580] [client 2a0b:f4c2::28:27310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aclarityforensics.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aclarityforensics.com"] [uri "/sics.sql"] [unique_id "aMzIi2ZbHzfASKUHJyY38QAAAks"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 91 to 105 of 233 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 200.120.12.127

🇫🇷 172.71.119.19

🇮🇳 160.187.54.127

🇻🇳 144.79.173.63

🇯🇵 133.242.174.119

🇳🇱 109.160.32.103

🇩🇪 93.152.221.108

🇻🇪 38.10.251.62

🇮🇳 20.40.44.6

🇬🇧 185.214.101.139

🇻🇳 183.91.11.36

🇺🇸 172.236.102.48

🇺🇸 162.216.149.144

🇮🇩 103.59.161.128

🇺🇸 198.13.222.56

🇺🇸 192.241.252.242

🇧🇷 190.89.55.250

🇨🇳 183.152.138.55

🇺🇦 176.101.194.122

🇺🇸 172.202.113.155