JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2001:448a:3064:11ac:b441:b3d:570b:3ef8

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

12 reports

6 reporters · latest 5 months ago

ISP	PT Telekomunikasi Indonesia
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Sumedang, West Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2001:448a:3064:11ac:b441:b3d:570b:3ef8 has been reported 12 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2001:448a:3064:11ac:b441:b3d:570b:3ef8

Export CSV

This IP address has been reported a total of 12 times from 6 distinct sources. 2001:448a:3064:11ac:b441:b3d:570b:3ef8 was first reported on May 26th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-05-27 21:59:02 (5 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-26. show less	Web App Attack SSH Hacking
🇩🇪 filstal.org	2026-05-26 14:44:28 (5 months ago)	Automated security scan or exploit attempt detected by Fail2Ban	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 11:03:26 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 07:03:21.380576 2026] [security2:error] [pid 22041:tid 22041] [client 2001:448a:3064:11ac:b441:b3d:570b:3ef8:56167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joy.joebankx.com"] [uri "/.env/.env.bak"] [unique_id "ahV9-XF0Tdap-ux6bOKXjwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 08:33:04 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 04:32:57.461934 2026] [security2:error] [pid 16573:tid 16573] [client 2001:448a:3064:11ac:b441:b3d:570b:3ef8:51466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jolka.org"] [uri "/.env/.env.bak"] [unique_id "ahVaufZz6lCUgwdYWVZhkAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 06:57:55 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 02:57:49.448106 2026] [security2:error] [pid 4814:tid 4814] [client 2001:448a:3064:11ac:b441:b3d:570b:3ef8:56601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnatuttle.us"] [uri "/.env/.env.bak"] [unique_id "ahVEbb6_C_8ey3fSEfbWTwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 06:41:28 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 02:41:22.931675 2026] [security2:error] [pid 19743:tid 19743] [client 2001:448a:3064:11ac:b441:b3d:570b:3ef8:64572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jogmabogadospenalistas.com"] [uri "/.env/.env.bak"] [unique_id "ahVAklIMjTc4AGE9_pJq3wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 05:30:38 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 01:30:31.773933 2026] [security2:error] [pid 1490:tid 1490] [client 2001:448a:3064:11ac:b441:b3d:570b:3ef8:64332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jodstar.com"] [uri "/.env/.env.bak"] [unique_id "ahUv95Tw_wjlE-uZQgENQgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 04:12:40 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 00:12:34.123540 2026] [security2:error] [pid 10730:tid 10730] [client 2001:448a:3064:11ac:b441:b3d:570b:3ef8:52182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lightupaustralia.org"] [uri "/.env/.env.bak"] [unique_id "ahUdsqVlEXLMcb8rJw2JvwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 luluwaffless	2026-05-26 03:40:39 (5 months ago)	Malicious crawler. Attempted to fetch multiple blocked paths (/phpinfo.php, /.env/.env.bak, /_profil ... show more Malicious crawler. Attempted to fetch multiple blocked paths (/phpinfo.php, /.env/.env.bak, /_profiler/phpinfo, /.aws/credentials, /test.php). show less	Bad Web Bot
🇫🇮 smallhost_helsinki	2026-05-26 03:20:41 (5 months ago)	Tried to access non existent path: /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 02:52:11 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:3064:11ac:b441:b3d:570b:3ef8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 22:52:07.012786 2026] [security2:error] [pid 24429:tid 24429] [client 2001:448a:3064:11ac:b441:b3d:570b:3ef8:53475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kurtkaufman.com"] [uri "/.env/.env.bak"] [unique_id "ahUK18waHdz39mvCD35dnAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-05-26 02:26:02 (5 months ago)	272 requests with url.path /phpinfo.php 272 requests with url.path phpinfo.php 245 requests with ... show more 272 requests with url.path /phpinfo.php 272 requests with url.path phpinfo.php 245 requests with url.path .aws/ show less	Brute-Force Bad Web Bot

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.136.15.80

🇫🇷 178.20.30.127

🇺🇸 147.185.132.54

🇩🇪 64.89.160.19

🇹🇼 43.213.73.123

🇹🇿 41.93.82.201

🇳🇱 213.177.179.35

🇹🇼 198.235.24.126

🇩🇪 167.94.146.78

🇺🇸 129.146.103.198

🇰🇷 110.172.98.2

🇳🇱 86.38.187.168

🇷🇴 80.94.95.109

🇮🇷 46.38.146.46

🇹🇼 43.212.240.51

🇸🇬 43.134.99.149

🇿🇦 41.135.5.177

🇬🇧 35.203.210.185

🇬🇧 35.203.210.139

🇮🇪 20.13.164.162