JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a00:1169:111:7de0::

2a00:1169:111:7de0:: was found in our database!

This IP was reported 11 times. Confidence of Abuse is 58%: ?

58%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Host Europe GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS21499
Domain Name	hosteurope.de
Country	🇫🇷 France
City	Strasbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a00:1169:111:7de0::

Whois 2a00:1169:111:7de0::

IP Abuse Reports for 2a00:1169:111:7de0:::

This IP address has been reported a total of 11 times from 9 distinct sources. 2a00:1169:111:7de0:: was first reported on June 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-06-16 05:15:30 (1 day ago)	3 attacks on env grabbing URLs: GET /database/.env HTTP/1.1	Hacking
🇧🇪 cmbplf	2026-06-15 18:36:39 (1 day ago)	2.266 requests with url.path *.env	Brute-Force Bad Web Bot
🇩🇪 4server	2026-06-15 18:16:36 (1 day ago)	[MonJun1520:16:32.2114012026][security2:error][pid72762:tid72812][client2a00:1169:111:7de0:::0]ModSe ... show more [MonJun1520:16:32.2114012026][security2:error][pid72762:tid72812][client2a00:1169:111:7de0:::0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"atelier-lara.ch\"][uri\"/database/.env\"][unique_id\"ajBBgJVVSGfNHMGayDC34AAAAAM\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-15 18:05:08 (1 day ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 17:59:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a00:1169:111:7de0:: (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a00:1169:111:7de0:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 13:59:25.485419 2026] [security2:error] [pid 22831:tid 22831] [client 2a00:1169:111:7de0:::56228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "impressionista.net"] [uri "/api/.env"] [unique_id "ajA9fb93TJLhriP0a8dXGgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-06-15 17:48:12 (1 day ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 on-com	2026-06-15 17:47:49 (1 day ago)	URL scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 16:57:27 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a00:1169:111:7de0:: (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a00:1169:111:7de0:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 12:57:19.542952 2026] [security2:error] [pid 31222:tid 31222] [client 2a00:1169:111:7de0:::51598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "westernweddingnapkins.com"] [uri "/database/.env"] [unique_id "ajAu79DqYlstTNqwQpuqHQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 16:42:16 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a00:1169:111:7de0:: (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a00:1169:111:7de0:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 12:42:11.416675 2026] [security2:error] [pid 24225:tid 24225] [client 2a00:1169:111:7de0:::44474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "askthetarot.cards"] [uri "/api/.env"] [unique_id "ajArYza69MBwx8LGGXXDsQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-06-15 16:18:08 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-06-15 16:00:11 (1 day ago)	HTTP vulnerability scanning	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 151.229.158.88

🇺🇸 146.70.183.204

🇨🇳 109.244.96.105

🇪🇸 79.116.23.158

🇪🇬 41.128.181.199

🇺🇸 20.169.49.249

🇻🇳 14.191.183.28

🇵🇭 202.137.113.204

🇮🇳 122.168.127.153

🇨🇳 120.48.104.37

🇺🇸 108.181.4.175

🇷🇺 95.165.84.70

🇺🇸 72.18.83.107

🇿🇼 41.175.92.241

🇺🇸 34.239.244.15

🇺🇸 20.112.233.74

🇮🇹 4.232.80.255

🇺🇸 3.210.29.96

🇺🇸 2600:1f18:3120:f504:27d5:5f0d:4081:fd6a

🇺🇸 191.96.254.64