JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::31

2a0b:f4c2::31 was found in our database!

This IP was reported 241 times. Confidence of Abuse is 20%: ?

20%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	Fixed Line ISP
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::31

Whois 2a0b:f4c2::31

IP Abuse Reports for 2a0b:f4c2::31:

This IP address has been reported a total of 241 times from 35 distinct sources. 2a0b:f4c2::31 was first reported on October 11th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-07-30 13:06:18 (1 day ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-28 02:19:38 (3 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-26 19:50:51 (4 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 xmission.com	2026-07-05 18:15:15 (3 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 1110 Packet length: 80 This report (for 2a0b:f4c2:0000:00 ... show more Blocked by UFW (TCP on 8333) Source port: 1110 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0031) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 1gz	2026-06-27 23:35:50 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-16 16:00:31 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 12:00:24.628738 2026] [security2:error] [pid 15479:tid 15479] [client 2a0b:f4c2::31:9430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.oligofoundry.com"] [uri "/.git/config"] [unique_id "ajFzGCMzgBZ5ic5c-w-XMAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 03:23:54 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:949110) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 23:23:51.366859 2026] [security2:error] [pid 8095:tid 8095] [client 2a0b:f4c2::31:64512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dcagroup.armstrongenvironmental.com"] [uri "/index.php"] [unique_id "ajDBx3abSO-yEIxuGO_01QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 23:54:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 19:53:54.536998 2026] [security2:error] [pid 6395:tid 6395] [client 2a0b:f4c2::31:21258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.honweneedthis.com"] [uri "/.git/config"] [unique_id "ajCQkh1tXZMsssnQ0EHXngAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 11:40:59 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 07:40:54.089506 2026] [security2:error] [pid 27890:tid 27890] [client 2a0b:f4c2::31:12472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.reimaginingchess.com"] [uri "/.git/config"] [unique_id "ai_kxvIjcd9FLtJyL_09dgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-12 11:22:22 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 60948 Packet length: 80 This report (for 2a0b:f4c2:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 60948 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0031) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 gnom4ik	2026-05-10 07:55:59 (2 months ago)	ban-reviewer auto report; ip=2a0b:f4c2::31; scenario=http:scan; verdict=valid_ban; confidence=0.92; ... show more ban-reviewer auto report; ip=2a0b:f4c2::31; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-09 14:11:36 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 10:11:29.010145 2026] [security2:error] [pid 2661:tid 2661] [client 2a0b:f4c2::31:13414] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|capitalswisscorp.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/capitalswissco.sql"] [unique_id "af9AkW9M_Hs5gg5_Ykq3lwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 09:02:19 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:02:13.834496 2026] [security2:error] [pid 16038:tid 16038] [client 2a0b:f4c2::31:37008] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|customhumanrobots.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "customhumanrobots.com"] [uri "/obots_com.sql"] [unique_id "af2mlcqTzQHbE9CnV2eoCAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-29 14:05:49 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 10:05:42.902252 2026] [security2:error] [pid 29229:tid 29229] [client 2a0b:f4c2::31:35746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fernfield.com"] [uri "/wp-config.php.txt"] [unique_id "afIQNkHcJsp1NJmO01VP-AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-26 21:59:08 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org) ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::31 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 17:59:01.776355 2026] [security2:error] [pid 22953:tid 22953] [client 2a0b:f4c2::31:33586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theseventhcongregationofladderdayvixens.org"] [uri "/wp-config.phptmp"] [unique_id "ae6KpYOxhooTEJvDMo27CgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 241 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 186.113.246.227

🇺🇸 173.231.200.81

🇺🇸 20.80.105.83

🇸🇬 2600:3c15::2000:4eff:fe2c:67ea

🇫🇷 195.154.59.122

🇧🇷 186.232.110.92

🇺🇸 162.216.149.179

🇺🇸 74.125.72.28

🇨🇳 14.103.112.35

🇺🇸 216.25.89.77

🇦🇺 203.196.42.114

🇨🇱 186.64.123.124

🇵🇱 176.53.159.198

🇵🇱 176.53.159.197

🇮🇳 122.177.244.101

🇨🇳 120.48.90.166

🇺🇸 72.180.241.103

🇺🇸 20.98.164.209

🇮🇳 14.98.67.210

🇳🇱 185.242.226.90