JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::30

2a0b:f4c2::30 was found in our database!

This IP was reported 219 times. Confidence of Abuse is 16%: ?

16%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	Commercial
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::30

Whois 2a0b:f4c2::30

IP Abuse Reports for 2a0b:f4c2::30:

This IP address has been reported a total of 219 times from 26 distinct sources. 2a0b:f4c2::30 was first reported on September 20th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-05-22 23:41:00 (3 weeks ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-06 19:17:12 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 15:17:05.279369 2026] [security2:error] [pid 28904:tid 28904] [client 2a0b:f4c2::30:14140] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bluemarineboats.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluemarineboats.com"] [uri "/bluemarineboats_com.sql"] [unique_id "afuTsbzxqFJaLjKzfCdfZwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-30 11:02:41 (1 month ago)	Blocked by UFW (TCP on 39750) Source port: 9002 Packet length: 120 This report (for 2a0b:f4c2:0000: ... show more Blocked by UFW (TCP on 39750) Source port: 9002 Packet length: 120 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0030) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-28 09:13:43 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 18574 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 18574 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0030) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-27 15:42:16 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 11:42:11.828442 2026] [security2:error] [pid 30946:tid 30946] [client 2a0b:f4c2::30:25500] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|americanexportimport.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "americanexportimport.com"] [uri "/a.sql"] [unique_id "ae-D05QEvRr5O15d0UOaFgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:04:38 (1 month ago)	2026-04-26 08:00:55,302 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::30 2026-04-26 1 ... show more 2026-04-26 08:00:55,302 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::30 2026-04-26 12:01:42,632 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::30 2026-04-26 18:01:40,280 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::30 2026-04-26 21:01:39,544 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::30 2026-04-27 00:04:34,152 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::30 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-26 12:24:59 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 08:24:53.117517 2026] [security2:error] [pid 5824:tid 5847] [client 2a0b:f4c2::30:10670] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|iacsb.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "iacsb.com"] [uri "/wp-config-sample.php.bak"] [unique_id "ae4EFZjKp4T9frP0H9RBhgAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-14 22:13:51 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 31238 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 31238 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0030) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-03 13:42:13 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 37958 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 37958 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0030) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ketovoila.pl	2026-04-01 19:38:16 (2 months ago)	ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/bck.sql; UA=Mozilla/5.0 (i ... show more ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/bck.sql; UA=Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1; window=2026-04-01T18:55:55Z..2026-04-01T18:55:55Z show less	Port Scan Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-03-29 12:47:43 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 08:47:34.649336 2026] [security2:error] [pid 1515:tid 1515] [client 2a0b:f4c2::30:41428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.julisaadams.com"] [uri "/.git/config"] [unique_id "ackfZgsSZLE8G4djQQDh6AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-25 07:12:10 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 27870 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 27870 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0030) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-03-09 01:39:55 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 21:39:47.777510 2026] [security2:error] [pid 18556:tid 18556] [client 2a0b:f4c2::30:29756] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mobileonlinecasinos.co\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mobileonlinecasinos.co"] [uri "/db_os.sql"] [unique_id "aa4k4xfjLwWToSfpWPXvtQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-27 11:58:09 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 06:58:04.420923 2026] [security2:error] [pid 19126:tid 19145] [client 2a0b:f4c2::30:45312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.rainbowbb.com"] [uri "/.git/config"] [unique_id "aaGGzKKUHuOHLy46iT4vNQAAAQ8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 09:29:44 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 04:29:37.028140 2026] [security2:error] [pid 2744:tid 2750] [client 2a0b:f4c2::30:19198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.threeoakscenter.org"] [uri "/.git/config"] [unique_id "aZ1vgWb3yARs7fL7vRvmTAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 219 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 2600:1900:4260:40e::124

🇱🇰 202.124.164.130

🇨🇳 175.30.48.246

🇨🇳 116.228.233.93

🇳🇱 91.92.40.5

🇺🇸 45.3.38.114

🇸🇬 8.219.238.77

🇰🇷 211.219.243.53

🇨🇦 209.50.178.215

🇧🇷 205.210.31.193

🇿🇦 197.245.56.157

🇵🇪 190.119.63.81

🇬🇧 188.166.152.155

🇫🇷 104.249.10.33

🇨🇳 101.126.54.167

🇪🇸 79.117.43.184

🇺🇸 66.132.186.236

🇳🇱 45.198.224.141

🇺🇸 20.102.97.100

🇨🇳 14.103.126.73