JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:f4c2::9

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

238 reports

31 reporters · latest 1 month ago

ISP	Artikel10 e.V.
Usage Type	University/College/School
ASN	AS60729
Domain Name	artikel10.org
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a0b:f4c2::9

Export CSV

This IP address has been reported a total of 238 times from 31 distinct sources. 2a0b:f4c2::9 was first reported on February 7th 2022, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: United States of America with 1 report. The only category in these recent reports was: Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-03-21 08:10:01 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 04:09:56.601011 2024] [security2:error] [pid 25510] [client 2a0b:f4c2::9:16928] [client 2a0b:f4c2::9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.individualhealth.com"] [uri "/.git/config"] [unique_id "ZfvrVFVeAqqodxjUiy7oEAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-21 07:54:32 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 03:54:28.684895 2024] [security2:error] [pid 10323:tid 47734926812928] [client 2a0b:f4c2::9:19112] [client 2a0b:f4c2::9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.isoceansl.com"] [uri "/.git/config"] [unique_id "ZfvntIhPegySOmPmXm0XawAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-19 18:58:08 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 19 14:58:00.104064 2024] [security2:error] [pid 27392] [client 2a0b:f4c2::9:65326] [client 2a0b:f4c2::9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.televisonic.com"] [uri "/.git/config"] [unique_id "ZfngOEVXRbaBJ93Aav-C1gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-14 01:24:04 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 21:24:01.575830 2024] [security2:error] [pid 19892] [client 2a0b:f4c2::9:48342] [client 2a0b:f4c2::9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.swim6.com"] [uri "/.git/config"] [unique_id "ZfJRsc0afWeijhmMIPYFGgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-13 21:24:17 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 17:24:12.392032 2024] [security2:error] [pid 4054801] [client 2a0b:f4c2::9:10576] [client 2a0b:f4c2::9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.memorialcityzen.com"] [uri "/.git/config"] [unique_id "ZfIZfBBJNMrge3XvDjQcrAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-12 18:48:11 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 12 14:48:05.522708 2024] [security2:error] [pid 8935:tid 47918724163328] [client 2a0b:f4c2::9:10388] [client 2a0b:f4c2::9] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|strengthsmatter.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "strengthsmatter.com"] [uri "/trengthsmatter.sql"] [unique_id "ZfCjZYTH1SEPU_N8zEAxowAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-30 05:07:23 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::9 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 30 00:07:17.554915 2023] [security2:error] [pid 28933] [client 2a0b:f4c2::9:7552] [client 2a0b:f4c2::9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.globalsolutions.technology"] [uri "/.git/HEAD"] [unique_id "ZWgYhYr9vQ0D-plORc9qsgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 chronos	2023-11-12 22:29:42 (2 years ago)	[[12/11/2023 - 19:29:41 -03:00 UTC] Attack from [2a0b:f4c2::9][berlin01.tor-exit.artikel10.org] Act ... show more [[12/11/2023 - 19:29:41 -03:00 UTC] Attack from [2a0b:f4c2::9][berlin01.tor-exit.artikel10.org] Action: BLocKed Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing. ] ... show less	Bad Web Bot
🇺🇸 chronos	2023-11-12 22:29:35 (2 years ago)	[[12/11/2023 - 19:29:34 -03:00 UTC] Attack from [2a0b:f4c2::9][berlin01.tor-exit.artikel10.org] Act ... show more [[12/11/2023 - 19:29:34 -03:00 UTC] Attack from [2a0b:f4c2::9][berlin01.tor-exit.artikel10.org] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other ] ... show less	Hacking Web App Attack
🇺🇸 chronos	2023-10-11 10:18:44 (2 years ago)	[[11/10/2023 - 07:18:43 -03:00 UTC] Attack from [2a0b:f4c2::9][berlin01.tor-exit.artikel10.org] Act ... show more [[11/10/2023 - 07:18:43 -03:00 UTC] Attack from [2a0b:f4c2::9][berlin01.tor-exit.artikel10.org] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other ] ... show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2023-09-25 23:20:31 (3 years ago)	2023-09-25 00:24:25 / 2023-09-25 00:24:24 /	Web App Attack
🇫🇷 geot	2022-11-05 09:18:37 (3 years ago)	GET /mailto:<<removed>>@<<removed>>.com HTTP/1.1	Web App Attack
🇩🇪 rstular	2022-02-07 22:41:45 (4 years ago)	[2022-02-08T03:41:45.523704689+00:00] 2a0b:f4c2::9 - GET /.env?test.asdf	Hacking Bad Web Bot Web App Attack

Showing 226 to 238 of 238 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 201.79.36.73

🇫🇮 212.112.19.164

🇺🇸 201.79.36.94

🇺🇸 201.79.29.94

🇺🇸 201.79.29.80

🇳🇱 193.176.31.216

🇨🇳 175.11.73.76

🇺🇸 167.99.229.190

🇺🇸 89.19.35.131

🇮🇳 20.244.17.248

🇺🇸 20.55.22.145

🇺🇸 201.79.29.85

🇺🇸 165.245.171.220

🇺🇸 165.245.165.232

🇺🇸 165.245.164.170

🇺🇸 162.216.149.27

🇸🇬 138.2.92.229

🇺🇸 136.66.0.6

🇨🇳 121.29.149.218

🇲🇦 105.159.154.171