JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::3

2a0b:f4c2::3 was found in our database!

This IP was reported 220 times. Confidence of Abuse is 19%: ?

19%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	Fixed Line ISP
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::3

Whois 2a0b:f4c2::3

IP Abuse Reports for 2a0b:f4c2::3:

This IP address has been reported a total of 220 times from 33 distinct sources. 2a0b:f4c2::3 was first reported on September 20th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-07-31 01:06:18 (1 day ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-29 20:19:38 (2 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-26 19:50:51 (5 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-24 15:30:03 (1 week ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 17:03:05 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 13:02:57.711067 2026] [security2:error] [pid 12927:tid 12927] [client 2a0b:f4c2::3:36116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.islandsuperbook.net"] [uri "/.git/config"] [unique_id "akvfwTGgMeqPnrz5HfzRhQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 03:52:22 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 23:52:19.378944 2026] [security2:error] [pid 20246:tid 20246] [client 2a0b:f4c2::3:22794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.celebrationofmike.com"] [uri "/.git/config"] [unique_id "akcx80lbMmJX63xKmEo_ggAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-18 12:21:17 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 16954 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 16954 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0003) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-12 12:13:41 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 08:13:35.117148 2026] [security2:error] [pid 22864:tid 22864] [client 2a0b:f4c2::3:47936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.gsrsv.org"] [uri "/.git/config"] [unique_id "aiv377mJEridFacH9IWQQAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 22:59:20 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 18:59:15.191358 2026] [security2:error] [pid 1844:tid 1844] [client 2a0b:f4c2::3:49248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.pizzadata.com"] [uri "/.git/config"] [unique_id "ais9w_vrvmba3LTIJCcCFQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2026-06-10 08:27:29 (1 month ago)	20 attempts against mh-misbehave-ban on web-new	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-09 21:29:39 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 26482 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 26482 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0003) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-05 17:02:40 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 13:02:32.680058 2026] [security2:error] [pid 15796:tid 15796] [client 2a0b:f4c2::3:28948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.agrollum.com"] [uri "/.git/config"] [unique_id "aiMBKJDHqcM28n8QvYqRlwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-20 23:35:01 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 14410 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 14410 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0003) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 4server	2026-05-09 04:37:27 (2 months ago)	[SatMay0906:37:22.9497272026][security2:error][pid3025856:tid3025969][client2a0b:f4c2::3:0]ModSecuri ... show more [SatMay0906:37:22.9497272026][security2:error][pid3025856:tid3025969][client2a0b:f4c2::3:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"craniosacraltherapy.ch\"][uri\"/.sql\"][unique_id\"af66AqQ20bhK78i3cQzWTgAAANE\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 09:01:38 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:01:34.117303 2026] [security2:error] [pid 16038:tid 16038] [client 2a0b:f4c2::3:1846] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|customhumanrobots.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "customhumanrobots.com"] [uri "/customhumanrobo.sql"] [unique_id "af2mbsqTzQHbE9CnV2eoAQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 220 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.38.131.131

🇷🇺 178.204.232.102

🇺🇸 152.32.182.8

🇨🇳 122.13.25.186

🇺🇸 104.196.126.199

🇷🇺 81.24.94.160

🇩🇪 69.5.169.141

🇺🇸 34.94.33.230

🇺🇸 172.253.85.219

🇫🇮 147.185.133.67

🇨🇳 123.163.114.58

🇨🇳 101.35.210.162

🇹🇭 58.10.161.161

🇸🇬 43.134.30.159

🇦🇺 35.201.18.57

🇹🇼 34.81.51.170

🇩🇪 34.32.47.6

🇺🇸 34.20.178.12

🇮🇳 185.100.212.141

🇮🇩 182.253.50.142