Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
This IP address has been reported a total of
12
times from
8 distinct
sources.
2a01:e0a:f66:cd40:104d:bc91:92d9:8f84 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 6
reports;
Germany
with 2
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
9
times;
Bad Web Bot
7
times;
Brute-Force
5
times;
SQL Injection
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[fail2ban]
2026-10-13T13:54:31.903620+00:00 arson caddy[1697]: {"level":"info","ts":1791899671.90357 ...
show more[fail2ban]
2026-10-13T13:54:31.903620+00:00 arson caddy[1697]: {"level":"info","ts":1791899671.9035757,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"2a01:e0a:f66:cd40:104d:bc91:92d9:8f84","remote_port":"64638","client_ip":"2a01:e0a:f66:cd40:104d:bc91:92d9:8f84","proto":"HTTP/1.1","method":"GET","host":"tc14.space","uri":"/.env","headers":{"Connection":["Close"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"tc14.space","ech":false}},"bytes_read":0,"user_id":"","duration":0.000120637,"size":7,"status":467,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}}
...
show less
(mod_security) mod_security (id:210492) triggered by 2a01:e0a:f66:cd40:104d:bc91:92d9:8f84 (Unknown) ...
show more(mod_security) mod_security (id:210492) triggered by 2a01:e0a:f66:cd40:104d:bc91:92d9:8f84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 19:09:51.910666 2026] [security2:error] [pid 20276:tid 20276] [client 2a01:e0a:f66:cd40:104d:bc91:92d9:8f84:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdn-7.socialstudiesforkids.com"] [uri "/.env"] [unique_id "as1ov_vk645VzSfKavrE-gAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 2a01:e0a:f66:cd40:104d:bc91:92d9:8f84 ( ...
show more(mod_security) mod_security triggered on hostname [redacted] 2a01:e0a:f66:cd40:104d:bc91:92d9:8f84 (Unknown)
show less
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a01:e0a:f66:cd40:104d:bc91:92d9:8f84 - - [12/Oct/2026:23:44:42 +0200] "GET /roundcube//.env.production HTTP/1.1" 404 7383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
