JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a00:5da0:1:201::305

2a00:5da0:1:201::305 was found in our database!

This IP was reported 372 times. Confidence of Abuse is 46%: ?

46%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	PS Internet Company LLP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48716
Domain Name	ps.kz
Country	🇰🇿 Kazakhstan
City	Almaty, Almaty

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a00:5da0:1:201::305

Whois 2a00:5da0:1:201::305

IP Abuse Reports for 2a00:5da0:1:201::305:

This IP address has been reported a total of 372 times from 104 distinct sources. 2a00:5da0:1:201::305 was first reported on February 28th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Baking333	2026-04-22 14:51:47 (1 month ago)	[redacted] 2a00:5da0:1:201::305 - - [22/Apr/2026:15:51:45 +0100] "GET /campaign/.env HTTP/1.1" 302 5 ... show more [redacted] 2a00:5da0:1:201::305 - - [22/Apr/2026:15:51:45 +0100] "GET /campaign/.env HTTP/1.1" 302 5273 0/53487 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [redacted] 2a00:5da0:1:201::305 - - [22/Apr/2026:15:51:45 +0100] "GET /staff/.env HTTP/1.1" 302 5273 0/52084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [redacted] 2a00:5da0:1:201::305 - - [22/Apr/2026:15:51:45 +0100] "GET /portal/.env HTTP/1.1" 302 5273 0/48377 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [redacted] 2a00:5da0:1:201::305 - - [22/Apr/2026:15:51:45 +0100] "GET /.env HTTP/1.1" 302 5273 0/50662 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-04-22 12:54:59 (1 month ago)	[WedApr2214:54:56.5293102026][security2:error][pid340641:tid340743][client2a00:5da0:1:201::305:0]Mod ... show more [WedApr2214:54:56.5293102026][security2:error][pid340641:tid340743][client2a00:5da0:1:201::305:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"pulispina.ch\"][uri\"/client/.env\"][unique_id\"aejFIKuafCKIZnesgdUxtQAAAIk\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-04-22 11:20:44 (1 month ago)	2a00:5da0:1:201::305 - - [22/Apr/2026:11:20:44 +0000] "GET /campaign/.env HTTP/1.1" 404 2754 "-" "Mo ... show more 2a00:5da0:1:201::305 - - [22/Apr/2026:11:20:44 +0000] "GET /campaign/.env HTTP/1.1" 404 2754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-04-22 09:18:16 (1 month ago)	[ISILIA Protection v2.1] Tentative d'accès: /portal/.env \| Pays: KZ \| UA: Mozilla/5.0 (Macintosh; In ... show more [ISILIA Protection v2.1] Tentative d'accès: /portal/.env \| Pays: KZ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4 show less	Hacking Web App Attack
🇩🇪 LRob.fr	2026-04-22 03:15:04 (1 month ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇩🇪 Didier Lagaert	2026-04-22 01:48:27 (1 month ago)	lie-17 : Block hidden directories=>/staff/.env(/)	Hacking
🇫🇷 LRob.fr	2026-04-22 01:45:02 (1 month ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-04-22 01:36:56 (1 month ago)	IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Se ... show more IDS Alert: IDS High-Severity Alert === ATTACK === Signature: IDS High-Severity Alert \| SID: N/A \| Severity: 1-2 \| Category: Security Threat === SOURCE === IP: 2a00:5da0:1:201::305 (IPv6) \| Port: N/A \| Country: Kazakhstan \| ISP: PS-DC2 \| rDNS: None === TARGET === Host: lg.goline.ch \| IP: lg.goline.ch \| Port: multiple \| Protocol: TCP/UDP \| App: N/A === RESPONSE === Time: 2026-04-22 03:36:56 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇩🇪 Viveronese	2026-04-22 01:29:22 (1 month ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 BlueWire Hosting	2026-04-21 19:27:50 (1 month ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇩🇪 dbmwebdesign	2026-04-21 17:10:04 (1 month ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇬🇧 Aetherweb Ark	2026-04-21 16:14:47 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 2a00:5da0:1:201::305 (Unknown): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 2a00:5da0:1:201::305 (Unknown): N in the last X secs show less	Web App Attack
🇦🇹 René Hickersberger	2026-04-21 15:23:34 (1 month ago)	[2026-04-21T15:23:34Z] Malicious request to /.env	Hacking Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-04-21 12:10:39 (1 month ago)	[redacted] 2a00:5da0:1:201::305 - - [21/Apr/2026:13:10:38 +0100] "GET /client/.env HTTP/1.1" 302 528 ... show more [redacted] 2a00:5da0:1:201::305 - - [21/Apr/2026:13:10:38 +0100] "GET /client/.env HTTP/1.1" 302 5287 0/50939 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [redacted] 2a00:5da0:1:201::305 - - [21/Apr/2026:13:10:38 +0100] "GET /staff/.env HTTP/1.1" 302 5287 0/46017 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-04-21 10:52:23 (1 month ago)	2a00:5da0:1:201::305 - - [21/Apr/2026:18:52:22 +0800] "GET /portal/.env HTTP/1.1" 200 19012 "-" "Moz ... show more 2a00:5da0:1:201::305 - - [21/Apr/2026:18:52:22 +0800] "GET /portal/.env HTTP/1.1" 200 19012 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 372 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 152.59.38.177

🇸🇬 94.231.206.7

🇲🇾 47.250.130.240

🇺🇸 40.76.124.110

🇦🇺 202.62.129.18

🇺🇸 174.35.25.179

🇨🇭 144.2.91.96

🇨🇳 120.85.112.178

🇮🇳 103.176.160.146

🇮🇱 77.124.95.73

🇰🇷 59.21.37.60

🇨🇳 14.103.111.135

🇨🇳 222.247.32.186

🇺🇸 192.178.115.217

🇳🇱 185.223.235.9

🇦🇫 180.94.74.82

🇫🇷 178.170.38.56

🇳🇱 176.65.139.130

🇮🇩 103.219.73.193

🇻🇳 103.195.236.35