AbuseIPDB » 240d:c010:77:8::b2
240d:c010:77:8::b2
This IP was reported 3 times. Confidence of
Abuse
is 4% : ?
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
ISP
ACEVILLE PTE.LTD.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS139341
Domain Name
tencent.com
Country
🇩🇪
Germany
City
Frankfurt am Main, Hesse
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 240d:c010:77:8::b2 :
This IP address has been reported a total of
3
times from
1 distinct
source.
240d:c010:77:8::b2 was first reported on
June 10th 2026 , and the most recent report was
10 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇮
oh.mg
2026-06-12 17:41:52
(10 hours ago)
240d:c010:77:8::b2 - - [12/Jun/2026:19:41:50 +0200] "GET /core/.env HTTP/1.1" 403 2251 "-" "Mozilla/ ...
show more
240d:c010:77:8::b2 - - [12/Jun/2026:19:41:50 +0200] "GET /core/.env HTTP/1.1" 403 2251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
240d:c010:77:8::b2 - - [12/Jun/2026:19:41:50 +0200] "GET /_profiler/phpinfo HTTP/1.1" 403 2251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
240d:c010:77:8::b2 - - [12/Jun/2026:19:41:50 +0200] "GET /.git/config HTTP/1.1" 403 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
240d:c010:77:8::b2 - - [12/Jun/2026:19:41:50 +0200] "GET /nextjs-app/.env HTTP/1.1" 403 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-06-10 21:59:44
(2 days ago)
240d:c010:77:8::b2 - - [10/Jun/2026:23:59:44 +0200] "GET /.docker/.env HTTP/1.1" 403 2251 "-" "TLM-A ...
show more
240d:c010:77:8::b2 - - [10/Jun/2026:23:59:44 +0200] "GET /.docker/.env HTTP/1.1" 403 2251 "-" "TLM-Audit-Scanner/1.0"
240d:c010:77:8::b2 - - [10/Jun/2026:23:59:44 +0200] "GET /.docker/secrets.json HTTP/1.1" 403 2251 "-" "TLM-Audit-Scanner/1.0"
240d:c010:77:8::b2 - - [10/Jun/2026:23:59:44 +0200] "GET /.env-example HTTP/1.1" 403 561 "-" "TLM-Audit-Scanner/1.0"
240d:c010:77:8::b2 - - [10/Jun/2026:23:59:44 +0200] "GET /.env.bak HTTP/1.1" 403 561 "-" "TLM-Audit-Scanner/1.0"
240d:c010:77:8::b2 - - [10/Jun/2026:23:59:44 +0200] "GET /.env.development HTTP/1.1" 403 561 "-" "TLM-Audit-Scanner/1.0"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-06-10 01:58:28
(3 days ago)
[Wed Jun 10 03:58:25.642507 2026] [security2:error] [pid 2229961:tid 2229963] [client 240d:c010:77:8 ...
show more
[Wed Jun 10 03:58:25.642507 2026] [security2:error] [pid 2229961:tid 2229963] [client 240d:c010:77:8::b2:59345] [client 240d:c010:77:8::b2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env"] [unique_id "aijEwYJ7gh4PLHOET7Bf_AAAAAA"]
[Wed Jun 10 03:58:27.610235 2026] [security2:error] [pid 2229961:tid 2229964] [client 240d:c010:77:8::b2:59345] [client 240d:c010:77:8::b2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP
...
show less
Web App Attack
Bad Web Bot
Showing 1 to
3
of 3 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: