JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::30

2a0b:f4c2::30 was found in our database!

This IP was reported 245 times. Confidence of Abuse is 16%: ?

16%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::30

Whois 2a0b:f4c2::30

IP Abuse Reports for 2a0b:f4c2::30:

This IP address has been reported a total of 245 times from 28 distinct sources. 2a0b:f4c2::30 was first reported on September 20th 2023, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-16 22:32:18 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 18:32:12.375676 2025] [security2:error] [pid 7848:tid 7848] [client 2a0b:f4c2::30:49032] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gerrytolentino.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gerrytolentino.net"] [uri "/g.sql"] [unique_id "aMnlbD9gMvl1tMfST9Z1ewAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-16 18:25:14 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 14:25:09.307911 2025] [security2:error] [pid 15536:tid 15536] [client 2a0b:f4c2::30:25210] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|margheritafaulkner.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "margheritafaulkner.org"] [uri "/backups.sql"] [unique_id "aMmrhfssFRsx-Q_yaRLkDgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-09 02:04:17 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 08 22:04:11.386421 2025] [security2:error] [pid 32009:tid 32009] [client 2a0b:f4c2::30:52024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oshadega.com"] [uri "/wp-config.php.zip"] [unique_id "aL-LG-nC9aE8e2akK_8bVgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-07 12:19:07 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 08:18:59.994627 2025] [security2:error] [pid 6173:tid 6173] [client 2a0b:f4c2::30:1240] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cayman-islands-real-estate.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cayman-islands-real-estate.com"] [uri "/cayman-islands-real-estate.sql"] [unique_id "aL14M7rNd2zCpB1YNq4UfAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-07 04:45:32 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 00:45:24.609909 2025] [security2:error] [pid 17872:tid 17872] [client 2a0b:f4c2::30:42164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "linuxforpoets.com"] [uri "/wp-config.php.zip"] [unique_id "aL0N5N91OAqqsOGOO060KgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2025-09-07 00:15:55 (1 year ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-06 17:19:58 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 13:19:53.673767 2025] [security2:error] [pid 29721:tid 29721] [client 2a0b:f4c2::30:35226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thenolangroup.llc"] [uri "/wp-config.php.zip"] [unique_id "aLxtOV9UsdwdggJTRB6jaAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-05 19:39:40 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 05 15:39:35.894876 2025] [security2:error] [pid 30645:tid 30645] [client 2a0b:f4c2::30:36634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webersource.com"] [uri "/wp-config.php.zip"] [unique_id "aLs8dyBvRA6ZVcVDjtDd5wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-05 08:13:07 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 05 04:13:04.174164 2025] [security2:error] [pid 7276:tid 7276] [client 2a0b:f4c2::30:16790] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ncrcs.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ncrcs.org"] [uri "/nc.sql"] [unique_id "aLqbkMc2ZFVNzAyMP2Vg3QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-04 08:14:05 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 04:14:01.059995 2025] [security2:error] [pid 25397:tid 25397] [client 2a0b:f4c2::30:12374] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|inverzona.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "inverzona.com"] [uri "/daily.sql"] [unique_id "aLlKSR1QpTwosZPZ1QErFQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-01 15:21:23 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 01 11:21:19.715550 2025] [security2:error] [pid 27470:tid 27470] [client 2a0b:f4c2::30:8678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "floridafrontiersmen.org"] [uri "/wp-config.php.zip"] [unique_id "aLW57xPWuILs4zxR5NObAgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-31 03:02:53 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 23:02:46.969491 2025] [security2:error] [pid 2657396:tid 2657420] [client 2a0b:f4c2::30:12366] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.northtexaslive.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.northtexaslive.com"] [uri "/rthtexaslive.sql"] [unique_id "aLO7Vrki_fAFGxnxwOPsewAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-30 10:35:03 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 06:34:54.755871 2025] [security2:error] [pid 3944:tid 3944] [client 2a0b:f4c2::30:11434] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thesmithcouple.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thesmithcouple.com"] [uri "/t.sql"] [unique_id "aLLTzj3l294BS_hjAZIuHgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-30 07:40:06 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 03:39:59.567383 2025] [security2:error] [pid 14119:tid 14119] [client 2a0b:f4c2::30:21880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.robertgregorybrowne.com"] [uri "/wp-config.php2.zip"] [unique_id "aLKqzw-xEZUyNr4f8_EaLAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 agenciahypelab.com.br	2025-08-29 03:09:15 (1 year ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH

Showing 121 to 135 of 245 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.47.82

🇦🇷 179.36.142.111

🇬🇷 176.58.136.47

🇮🇳 122.187.227.145

🇸🇬 118.139.165.208

🇨🇳 101.227.203.162

🇫🇷 91.231.89.0

🇺🇦 31.148.149.224

🇺🇸 9.234.8.246

🇹🇼 198.235.24.82

🇺🇸 192.161.49.2

🇧🇷 191.37.76.156

🇬🇧 185.247.137.19

🇺🇸 172.233.219.44

🇫🇷 141.255.134.38

🇳🇱 34.141.229.34

🇺🇸 34.138.171.76

🇯🇵 20.89.68.9

🇸🇬 18.142.231.227

🇮🇩 180.251.182.32