JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:448a:3051:8c9:fca3:92b6:69db:ee9

2001:448a:3051:8c9:fca3:92b6:69db:ee9

Neutral Activity IPv6 SLAAC Note

14 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

PT Telekomunikasi Indonesia

Usage Type

Fixed Line ISP

ASN

AS7713

Domain Name

telkom.co.id

Country

🇮🇩 Indonesia

City

Padalarang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2001:448a:3051:8c9:fca3:92b6:69db:ee9 has been reported 14 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2001:448a:3051:8c9:fca3:92b6:69db:ee9:

This IP address has been reported a total of 14 times from 9 distinct sources. 2001:448a:3051:8c9:fca3:92b6:69db:ee9 was first reported on April 22nd 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 jjnxpct	2026-04-24 03:50:38 (4 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /credentials.json (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-04-23 22:00:27 (4 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-22. show less	Web App Attack SSH Hacking
🇳🇱 jjnxpct	2026-04-23 03:47:46 (4 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env] show less	Web App Attack Hacking
🇺🇸 Mundo Bueno	2026-04-23 00:38:59 (4 months ago)	[ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: ID \| UA: Mozilla/5.0 (X11; Linux x86_64) C ... show more [ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: ID \| UA: Mozilla/5.0 (X11; Linux x86_64) CrackEnv/1.2 show less	Hacking Web App Attack
Anonymous	2026-04-22 22:20:01 (4 months ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-22 19:30:18 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3051:8c9:fca3:92b6:69db:ee9 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3051:8c9:fca3:92b6:69db:ee9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 15:30:10.994502 2026] [security2:error] [pid 19586:tid 19586] [client 2001:448a:3051:8c9:fca3:92b6:69db:ee9:58319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.firstlegend.info"] [uri "/.env"] [unique_id "aekhwjLBQ8PVdpg36F3sqQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-22 19:00:58 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3051:8c9:fca3:92b6:69db:ee9 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3051:8c9:fca3:92b6:69db:ee9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 15:00:51.416115 2026] [security2:error] [pid 3000748:tid 3000748] [client 2001:448a:3051:8c9:fca3:92b6:69db:ee9:22647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.verenacastle.com"] [uri "/.env"] [unique_id "aeka48SqXaOGPfqi7H2dxwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-04-22 17:26:18 (4 months ago)	Cloudflare WAF: Request Path: /.htaccess Request Query: Host: ns2.elhacker.net userAgent: Mozilla/5 ... show more Cloudflare WAF: Request Path: /.htaccess Request Query: Host: ns2.elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) CrackEnv/1.2 Action: block Source: firewallManaged ASN Description: TELKOMNET-AS-AP PT Telekomunikasi Indonesia Country: ID Method: GET Timestamp: 2026-04-22T17:26:18Z ruleId: c2a2f414a67c409f90cccb6c5bba0215. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2026-04-22 16:43:09 (4 months ago)	[22/Apr/2026:19:43:07 +0300] 177687618734.718437 2001:448a:3051:8c9:fca3:92b6:69db:ee9 53601 2a01:4f ... show more [22/Apr/2026:19:43:07 +0300] 177687618734.718437 2001:448a:3051:8c9:fca3:92b6:69db:ee9 53601 2a01:4f8:202:41d3::2 80 [22/Apr/2026:19:43:08 +0300] 17768761886.401323 2001:448a:3051:8c9:fca3:92b6:69db:ee9 53628 2a01:4f8:202:41d3::2 443 show less	Web App Attack
🇪🇸 el-brujo	2026-04-22 12:55:49 (4 months ago)	Cloudflare WAF: Request Path: /.env Request Query: Host: ns2.elhacker.net userAgent: python-request ... show more Cloudflare WAF: Request Path: /.env Request Query: Host: ns2.elhacker.net userAgent: python-requests/2.32.5 Action: block Source: firewallManaged ASN Description: TELKOMNET-AS-AP PT Telekomunikasi Indonesia Country: ID Method: GET Timestamp: 2026-04-22T12:55:49Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-04-22 12:35:47 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3051:8c9:fca3:92b6:69db:ee9 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3051:8c9:fca3:92b6:69db:ee9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 08:35:39.693571 2026] [security2:error] [pid 17538:tid 17591] [client 2001:448a:3051:8c9:fca3:92b6:69db:ee9:24504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luxury.management"] [uri "/.env"] [unique_id "aejAm-JmCz0nIwbsBNzobAAAARg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 deskpass.com	2026-04-22 10:36:22 (4 months ago)	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Web App Attack
🇩🇪 betternews.app	2026-04-22 09:57:46 (4 months ago)	"a web request contained keyword ".htaccess"; Suspicious URL: /.htaccess"	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack
🇺🇸 deskpass.com	2026-04-22 09:53:23 (4 months ago)	GET /phpinfo.php	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.75.156.89

🇮🇩 203.153.108.67

🇧🇴 190.129.122.185

🇦🇷 186.128.194.76

🇧🇷 177.125.218.134

🇳🇱 176.65.148.226

🇻🇳 171.244.5.210

🇦🇷 153.67.15.97

🇿🇦 105.242.209.14

🇲🇩 93.115.137.227

🇫🇮 65.109.178.234

🇷🇺 62.148.235.133

🇸🇦 51.223.133.114

🇺🇸 20.163.3.22

🇺🇸 8.231.244.28

🇮🇩 202.93.27.37

🇺🇦 195.60.71.91

🇷🇴 193.32.162.84

🇳🇱 188.166.50.125

🇫🇷 185.142.55.27