JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2001:470:6d:792::1

Recent Activity IPv6 SLAAC Note

Abuse Confidence Score

79% Critical

56 reports

14 reporters · latest 22 hours ago

ISP: Hurricane Electric LLC
Usage Type: Fixed Line ISP
ASN: AS6939
Domain Name: he.net
Country: 🇩🇪 Germany
City: Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

56 from 14 distinct reporters

First reported

October 22nd 2026

Most recent report

22 hours ago

Last 60 days

Top reporter locations 🇵🇱 Poland 32 🇧🇪 Belgium 5 🇦🇺 Australia 4

Most common categories Web App Attack 51 Bad Web Bot 26 Hacking 17 Brute-Force 8 SSH 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Klaverstyn	2026-11-09 11:24:50 UTC · (22 hours ago)	Excessive HTTP request rate	Web App Attack
🇵🇱 Budyn	2026-11-09 11:21:03 UTC · (22 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: forum.teddypot.tech \| Path: /config.json \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: forum.teddypot.tech \| Path: /config.json \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-11-09 09:13:38 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: api.astropot.site \| Path: /.git/config \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 1 ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: api.astropot.site \| Path: /.git/config \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-11-09 05:40:41 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: cloud.teddypot.space \| Path: /actuator/env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: cloud.teddypot.space \| Path: /actuator/env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-11-09 02:52:18 UTC · (1 day ago)	Try to access /.env	Web App Attack
🇵🇱 Budyn	2026-11-09 02:28:34 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: cloud.teddypot.space \| Path: /actuator/env \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac O ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: cloud.teddypot.space \| Path: /actuator/env \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-09 00:17:19 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: cloud.teddypot.space \| Path: /.git/config \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: cloud.teddypot.space \| Path: /.git/config \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇦🇺 Klaverstyn	2026-11-08 23:10:55 UTC · (1 day ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking
🇺🇸 JonathanYoung2161	2026-11-08 22:14:16 UTC · (1 day ago)	trekgalactic.org 2001:470:6d:792::1 - - [08/Nov/2026:16:14:14 -0600] "GET /.git/config HTTP/2.0" 403 3220 "http://trekgalactic.org/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0" trekgalactic.org 2001:4 ... show more trekgalactic.org 2001:470:6d:792::1 - - [08/Nov/2026:16:14:14 -0600] "GET /.git/config HTTP/2.0" 403 3220 "http://trekgalactic.org/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0" trekgalactic.org 2001:470:6d:792::1 - - [08/Nov/2026:16:14:15 -0600] "GET /.git/config HTTP/2.0" 403 3220 "http://trekgalactic.org/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" trekgalactic.org 2001:470:6d:792::1 - - [08/Nov/2026:16:14:15 -0600] "GET /.git/config.orig HTTP/2.0" 403 3220 "http://trekgalactic.org/.git/config.orig" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0" ... show less	Brute-Force Web App Attack
🇳🇱 ipoac.nl	2026-11-08 22:04:24 UTC · (1 day ago)	-:443 2001:470:6d:792::1 - - [08/Nov/2026:23:04:23 +0100] - "GET /.git/config HTTP/2.0" 404 1822 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"	Bad Web Bot
🇩🇰 swrlly	2026-11-08 21:58:59 UTC · (1 day ago)	2 unauthorized webserver connections (30d)	Web App Attack
🇩🇰 swrlly	2026-11-08 21:10:10 UTC · (1 day ago)	1 unauthorized webserver connection	Web App Attack
🇩🇪 Blexyel	2026-11-08 20:03:55 UTC · (1 day ago)	2001:470:6d:792::1 - - [08/Nov/2026:21:03:54 +0100] "GET /.git/config HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" ...	Brute-Force Web App Attack
Anonymous	2026-11-08 10:14:21 UTC · (1 day ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇦🇺 Klaverstyn	2026-11-08 08:31:37 UTC · (2 days ago)	Excessive HTTP request rate	Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 200.223.25.122

🇺🇸 184.105.139.70

🇺🇸 172.69.67.71

🇺🇸 156.235.89.153

🇭🇰 154.92.2.59

🇻🇳 115.76.108.233

🇮🇩 114.4.78.106

🇨🇳 101.68.7.145

🇷🇺 91.212.137.236

🇳🇱 31.58.179.200

🇬🇧 185.216.145.189

🇺🇸 137.184.137.165

🇮🇹 78.213.122.77

🇺🇸 68.225.58.201

🇨🇳 49.79.167.210

🇧🇪 35.210.161.103

🇧🇪 35.206.191.67

🇧🇪 34.22.173.23

🇩🇪 2a02:c202:2359:1002::1

🇺🇸 217.216.46.4