JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:f4c2::3

2a0b:f4c2::3 was found in our database!

This IP was reported 233 times. Confidence of Abuse is 18%: ?

18%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Hostname(s)	berlin01.tor-exit.artikel10.org
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:f4c2::3

Whois 2a0b:f4c2::3

IP Abuse Reports for 2a0b:f4c2::3:

This IP address has been reported a total of 233 times from 34 distinct sources. 2a0b:f4c2::3 was first reported on September 20th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-03-13 20:49:10 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 16:49:04.971416 2024] [security2:error] [pid 10403] [client 2a0b:f4c2::3:30852] [client 2a0b:f4c2::3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.christinepeat.com"] [uri "/.git/config"] [unique_id "ZfIRQO-6KYnPFzWzVNftiAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-28 06:48:32 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::3 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 28 01:48:26.466702 2023] [security2:error] [pid 2639125] [client 2a0b:f4c2::3:29306] [client 2a0b:f4c2::3] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|grandriverhomes.com\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grandriverhomes.com"] [uri "/wp-config.inc"] [unique_id "ZWWNOiOYTJzdCPXPL7H7oQAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 chronos	2023-11-12 22:31:12 (2 years ago)	[[12/11/2023 - 19:31:10 -03:00 UTC] Attack from [2a0b:f4c2::3][berlin01.tor-exit.artikel10.org] Act ... show more [[12/11/2023 - 19:31:10 -03:00 UTC] Attack from [2a0b:f4c2::3][berlin01.tor-exit.artikel10.org] Action: BLocKed Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing. ] ... show less	Bad Web Bot
🇺🇸 chronos	2023-11-12 22:30:48 (2 years ago)	[[12/11/2023 - 19:30:47 -03:00 UTC] Attack from [2a0b:f4c2::3][berlin01.tor-exit.artikel10.org] Act ... show more [[12/11/2023 - 19:30:47 -03:00 UTC] Attack from [2a0b:f4c2::3][berlin01.tor-exit.artikel10.org] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other ] ... show less	Hacking Web App Attack
🇺🇸 chronos	2023-10-11 10:16:24 (2 years ago)	[[11/10/2023 - 07:16:23 -03:00 UTC] Attack from [2a0b:f4c2::3][berlin01.tor-exit.artikel10.org] Act ... show more [[11/10/2023 - 07:16:23 -03:00 UTC] Attack from [2a0b:f4c2::3][berlin01.tor-exit.artikel10.org] Action: BLocKed Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing. ] ... show less	Bad Web Bot
🇨🇳 ThreatBook.io	2023-09-25 23:19:51 (2 years ago)	2023-09-25 11:54:11 http://d3sspl5ropfzm8.cloudfront.net/ 2023-09-25 11:54:42 //d3sspl5ropfzm8.cloud ... show more 2023-09-25 11:54:11 http://d3sspl5ropfzm8.cloudfront.net/ 2023-09-25 11:54:42 //d3sspl5ropfzm8.cloudfront.net:80 show less	Web App Attack
🇨🇳 ThreatBook.io	2023-09-23 23:09:45 (2 years ago)	2023-09-23 22:54:56 / 2023-09-23 22:54:53 / 2023-09-23 22:54:57 https://d3sspl5ropfzm8.cloudfront.ne ... show more 2023-09-23 22:54:56 / 2023-09-23 22:54:53 / 2023-09-23 22:54:57 https://d3sspl5ropfzm8.cloudfront.net/ 2023-09-23 22:54:58 http://d3sspl5ropfzm8.cloudfront.net/ show less	Web App Attack
🇨🇳 ThreatBook.io	2023-09-20 23:29:08 (2 years ago)	2023-09-20 12:44:04 /	Web App Attack

Showing 226 to 233 of 233 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇬 197.253.54.22

🇺🇸 163.181.145.196

🇺🇸 148.59.129.127

🇫🇷 92.205.229.83

🇹🇷 45.87.174.4

🇸🇬 43.156.228.27

🇦🇷 200.59.113.73

🇵🇪 181.65.211.141

🇺🇸 144.172.107.23

🇨🇳 113.247.102.135

🇸🇬 104.28.254.47

🇧🇩 103.159.172.76

🇩🇪 8.209.97.27

🇨🇦 198.245.62.60

🇩🇪 167.172.165.251

🇮🇩 103.162.1.80

🇧🇷 34.39.220.251

🇨🇳 124.88.72.49

🇮🇩 103.154.81.166

🇷🇺 91.188.185.101