JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a00:c98:400f:113:1c00:46ff:fe00:d46

2a00:c98:400f:113:1c00:46ff:fe00:d46

Neutral Activity IPv6 SLAAC Note

40 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Leaseweb Deutschland GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS28753

Domain Name

leaseweb.com

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a00:c98:400f:113:1c00:46ff:fe00:d46 has been reported 40 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a00:c98:400f:113:1c00:46ff:fe00:d46:

This IP address has been reported a total of 40 times from 22 distinct sources. 2a00:c98:400f:113:1c00:46ff:fe00:d46 was first reported on April 12th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pscriptos	2026-04-13 05:38:49 (4 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 WizardsToolkit	2026-04-13 05:30:13 (4 months ago)	tried to access forbidden files; attempted to access /app/.env	Web App Attack
🇩🇪 simsung	2026-04-13 05:23:01 (4 months ago)	2a00:c98:400f:113:1c00:46ff:fe00:d46 - - [13/Apr/2026:05:23:00 +0000] "GET /.env.production HTTP/1.1 ... show more 2a00:c98:400f:113:1c00:46ff:fe00:d46 - - [13/Apr/2026:05:23:00 +0000] "GET /.env.production HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇩🇪 betternews.app	2026-04-13 04:13:22 (4 months ago)	"a web request contained keyword ".env"; Suspicious URL: /backend/.env"	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack
🇺🇸 rafled	2026-04-13 03:58:38 (4 months ago)	attempt to scan and scrape for env files and or files that expose the web app version	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-13 03:01:23 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:01:17.848163 2026] [security2:error] [pid 101483:tid 101483] [client 2a00:c98:400f:113:1c00:46ff:fe00:d46:64732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bethanpearce.com"] [uri "/config/.env"] [unique_id "adxcfRpz6u_4TE6Q5ep9vwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-04-13 02:33:35 (4 months ago)	1.531 requests with url.path .env 640 requests with url.path config.json 252 requests with url. ... show more 1.531 requests with url.path .env 640 requests with url.path config.json 252 requests with url.path secrets.json 250 requests with url.path credentials.json 244 requests with url.path compose.yml 189 requests with url.path .npmrc show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-13 01:14:37 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 21:14:32.117767 2026] [security2:error] [pid 2900585:tid 2900585] [client 2a00:c98:400f:113:1c00:46ff:fe00:d46:44684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "berklie.com"] [uri "/.env.dev"] [unique_id "adxDeCvt9nmWYNc_-N1tdwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-13 00:43:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 20:43:25.585672 2026] [security2:error] [pid 1079769:tid 1079769] [client 2a00:c98:400f:113:1c00:46ff:fe00:d46:14082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benlbrown.com"] [uri "/.env.bak"] [unique_id "adw8La5i6uFDXBMQo6_B7gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-04-13 00:09:07 (4 months ago)	[ISILIA Protection v2.1] Tentative d'accès: /config/.env \| Pays: DE \| UA: Mozilla/5.0 (Macintosh; In ... show more [ISILIA Protection v2.1] Tentative d'accès: /config/.env \| Pays: DE \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0. show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-12 23:46:54 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 19:46:49.587540 2026] [security2:error] [pid 2793371:tid 2793371] [client 2a00:c98:400f:113:1c00:46ff:fe00:d46:35056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belize-boat-registration.com"] [uri "/.env"] [unique_id "adwu6TtzZ3Duy9L_6JQyiwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-04-12 23:45:08 (4 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-12 22:51:58 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 18:51:51.973706 2026] [security2:error] [pid 3493885:tid 3493885] [client 2a00:c98:400f:113:1c00:46ff:fe00:d46:55384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agapeaccountingllc.com"] [uri "/src/.env"] [unique_id "adwiB9_KVsHsWySa5eGzqwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-12 21:57:16 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a00:c98:400f:113:1c00:46ff:fe00:d46 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 17:57:10.960497 2026] [security2:error] [pid 124745:tid 124745] [client 2a00:c98:400f:113:1c00:46ff:fe00:d46:40966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afdfurniture.com"] [uri "/src/.env"] [unique_id "adwVNp1VtM__e7STn4xTPgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 IloGus	2026-04-12 21:30:03 (4 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.114.105.59

🇬🇧 86.163.93.64

🇹🇼 60.199.224.55

🇳🇱 45.225.135.21

🇺🇸 34.134.219.50

🇹🇷 195.174.188.11

🇺🇦 194.0.89.139

🇮🇳 180.151.51.162

🇮🇳 160.187.54.84

🇸🇬 159.65.2.17

🇺🇸 143.20.253.117

🇳🇱 92.112.127.220

🇸🇬 84.75.148.146

🇺🇸 74.82.47.62

🇲🇾 47.250.194.184

🇺🇸 47.132.208.21

🇳🇱 35.204.193.72

🇺🇸 34.172.86.47

🇰🇷 220.92.179.226

🇫🇷 195.154.170.30