JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:448a:a071:df9:f555:f43c:fcc2:7a2b

2001:448a:a071:df9:f555:f43c:fcc2:7a2b was found in our database!

This IP was reported 33 times. Confidence of Abuse is 73%: ?

73%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	PT Telekomunikasi Indonesia
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Warungpeuteuy, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:448a:a071:df9:f555:f43c:fcc2:7a2b

Whois 2001:448a:a071:df9:f555:f43c:fcc2:7a2b

IP Abuse Reports for 2001:448a:a071:df9:f555:f43c:fcc2:7a2b:

This IP address has been reported a total of 33 times from 15 distinct sources. 2001:448a:a071:df9:f555:f43c:fcc2:7a2b was first reported on June 20th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-22 03:38:41 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 23:38:38.313952 2026] [security2:error] [pid 22898:tid 22898] [client 2001:448a:a071:df9:f555:f43c:fcc2:7a2b:64372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cathybermanmft.com"] [uri "/.env/.env.bak"] [unique_id "ajiuPhtH0RPl8T9-3o0mfQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-22 03:07:03 (6 days ago)	Automated web scanner. Requested suspicious paths: /phpinfo.php. UTC: 2026-06-22 03:04:42.	Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 02:36:42 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 22:36:39.665848 2026] [security2:error] [pid 20307:tid 20307] [client 2001:448a:a071:df9:f555:f43c:fcc2:7a2b:50480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brigittecavanagh.com"] [uri "/.env/.env.bak"] [unique_id "ajift8aYEytwBNuD83P14QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-21 23:55:08 (6 days ago)	[MonJun2201:55:03.2090222026][security2:error][pid1362735:tid1362750][client2001:448a:a071:df9:f555: ... show more [MonJun2201:55:03.2090222026][security2:error][pid1362735:tid1362750][client2001:448a:a071:df9:f555:f43c:fcc2:7a2b:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"casacarmen.ch\"][uri\"/.env/.env.bak\"][unique_id\"ajh515X6WTT87FScGC7rYAAAAMw\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 22:51:19 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 18:51:11.362703 2026] [security2:error] [pid 19088:tid 19088] [client 2001:448a:a071:df9:f555:f43c:fcc2:7a2b:56354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carolmaalouf.com"] [uri "/.env/.env.bak"] [unique_id "ajhq3-a5YfYxPfXlntQ9MwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-06-21 22:42:09 (6 days ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (IPv6) \| Port: N/A \| Country: Indonesia \| ISP: TELKOMNET-20050901 \| rDNS: None === TARGET === Host: lg.goline.ch \| IP: lg.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-06-22 00:42:09 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-21 22:18:48 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 18:18:42.359918 2026] [security2:error] [pid 23579:tid 23579] [client 2001:448a:a071:df9:f555:f43c:fcc2:7a2b:60132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carlgrauelcsw.com.onyxcc.com"] [uri "/.env/.env.bak"] [unique_id "ajhjQhOguE_7ALK2jZLc2wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-21 22:00:15 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-20. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-21 17:18:18 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 13:18:13.480863 2026] [security2:error] [pid 21315:tid 21315] [client 2001:448a:a071:df9:f555:f43c:fcc2:7a2b:62365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bookofraphael.com"] [uri "/.env/.env.bak"] [unique_id "ajgc1RjIgrcq-SZGOYg-eQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 0x44	2026-06-21 08:21:01 (1 week ago)	Abusive host detected - Web probing for vulnerabilities	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-21 07:50:54 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 03:50:50.352158 2026] [security2:error] [pid 9667:tid 9667] [client 2001:448a:a071:df9:f555:f43c:fcc2:7a2b:54343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "balirealestateadvertiser.com"] [uri "/.env/.env.bak"] [unique_id "ajeX2mp3i8CQttgryU9SMAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-21 07:30:34 (1 week ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env/.env.bak	Web App Attack
🇬🇧 openstrike.co.uk	2026-06-21 05:13:32 (1 week ago)	5 attacks on PHP URLs, env grabbing URLs, password grabbing URLs: GET /index.php HTTP/1.1 GET /.env/ ... show more 5 attacks on PHP URLs, env grabbing URLs, password grabbing URLs: GET /index.php HTTP/1.1 GET /.env/.env.bak HTTP/1.1 GET /.aws/credentials HTTP/1.1 show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-21 04:09:42 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:448a:a071:df9:f555:f43c:fcc2:7a2b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 00:09:37.323911 2026] [security2:error] [pid 30962:tid 30962] [client 2001:448a:a071:df9:f555:f43c:fcc2:7a2b:57053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackjobsnetwork.com"] [uri "/.env/.env.bak"] [unique_id "ajdkASr-OMxEe5tW-JTmeQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-21 00:05:06 (1 week ago)	PHP file probing detected by Fail2Ban	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.139

🇭🇰 199.45.154.188

🇩🇪 167.94.146.33

🇸🇬 129.212.236.209

🇮🇳 103.230.220.148

🇬🇧 92.207.4.157

🇨🇦 2607:f8b0:4023:1803::123

🇹🇼 198.235.24.118

🇳🇱 185.242.226.60

🇷🇴 92.180.22.207

🇺🇦 91.225.162.154

🇺🇸 62.132.18.53

🇺🇸 34.203.14.67

🇮🇩 8.215.84.228

🇹🇼 198.235.24.119

🇭🇰 165.154.41.115

🇸🇬 152.32.218.149

🇰🇷 125.138.166.217

🇺🇸 107.150.105.153

🇳🇱 89.21.67.157