JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:df5:d340:14::229

2001:df5:d340:14::229 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 59%: ?

59%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	PT Carel Mitra Komunika
Usage Type	Fixed Line ISP
ASN	AS137428
Domain Name	kampoengdigital.net
Country	🇮🇩 Indonesia
City	Manado, North Sulawesi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:df5:d340:14::229

Whois 2001:df5:d340:14::229

IP Abuse Reports for 2001:df5:d340:14::229:

This IP address has been reported a total of 13 times from 9 distinct sources. 2001:df5:d340:14::229 was first reported on July 30th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 e.fierstra	2026-07-31 17:50:04 (20 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-07-31 16:46:40 (21 hours ago)	716 requests with url.path *.env	Brute-Force Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-07-31 16:44:42 (22 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-31 16:44:06 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 12:43:56.051027 2026] [security2:error] [pid 4371:tid 4400] [client 2001:df5:d340:14::229:48268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "switchbl8.nl"] [uri "/.env"] [unique_id "amzQzBhsz74znqk7-zuNHAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-31 15:44:56 (23 hours ago)	Try to access /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 07:03:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 03:03:19.716711 2026] [security2:error] [pid 2196118:tid 2196118] [client 2001:df5:d340:14::229:50156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.comsew.com.au"] [uri "/.env"] [unique_id "amxItxbVfOGbJiSYmepBVAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-07-31 06:09:50 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇬🇧 openstrike.co.uk	2026-07-31 05:13:38 (1 day ago)	4 attacks on PHP URLs, env grabbing URLs: GET /login/index.php HTTP/1.1 GET /.env HTTP/1.1	Web App Attack Hacking
🇮🇹 VHosting	2026-07-30 19:35:03 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 17:45:50 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 13:45:38.958400 2026] [security2:error] [pid 1107487:tid 1107487] [client 2001:df5:d340:14::229:49718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aarce.me"] [uri "/.env"] [unique_id "amuNwighseE-abkB2WO2OwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 17:26:34 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 13:26:21.530241 2026] [security2:error] [pid 2698076:tid 2698076] [client 2001:df5:d340:14::229:36698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.victorg.me"] [uri "/.env"] [unique_id "amuJPdSzdzN2YYNBipzBeAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 17:06:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2001:df5:d340:14::229 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 13:06:28.790831 2026] [security2:error] [pid 1373564:tid 1373564] [client 2001:df5:d340:14::229:35354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.robhoward.me"] [uri "/.env"] [unique_id "amuElFR7Y7eWRlKlUcabfQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 origrata	2026-07-30 12:23:31 (2 days ago)	[OGWAF] path_traversal attack blocked \| severity: high \| GET /.env \| UA: Mozilla/5.0 (Windows NT 10. ... show more [OGWAF] path_traversal attack blocked \| severity: high \| GET /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Sa show less	Hacking Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇮🇳 159.65.148.158

🇭🇰 47.86.179.73

🇩🇪 43.228.157.161

🇴🇲 37.40.90.252

🇷🇴 2.57.121.25

🇰🇷 211.225.139.200

🇷🇴 193.46.255.86

🇧🇬 193.24.211.76

🇻🇪 190.204.32.79

🇺🇸 173.201.47.50

🇺🇸 162.210.245.77

🇺🇸 161.35.124.85

🇫🇮 147.185.133.87

🇨🇳 112.27.38.203

🇮🇶 65.20.163.103

🇫🇷 51.44.22.209

🇬🇧 31.14.254.36

🇷🇴 2.57.121.112

🇹🇭 184.22.182.1