JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:2968::1c00:34ff:fe00:e53

2a02:2968::1c00:34ff:fe00:e53 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 17%: ?

17%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Your Hosting B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48635
Domain Name	flexwebhosting.nl
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:2968::1c00:34ff:fe00:e53

Whois 2a02:2968::1c00:34ff:fe00:e53

IP Abuse Reports for 2a02:2968::1c00:34ff:fe00:e53:

This IP address has been reported a total of 65 times from 8 distinct sources. 2a02:2968::1c00:34ff:fe00:e53 was first reported on July 4th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-26 22:01:12 (2 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-25. show less	Web App Attack SSH Hacking
🇩🇪 BlueWire Hosting	2026-09-25 10:18:28 (3 weeks ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 07:55:45 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 03:55:36.979625 2026] [security2:error] [pid 267988:tid 267988] [client 2a02:2968::1c00:34ff:fe00:e53:48186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theholographicseed.com"] [uri "/.env"] [unique_id "arYo-PE7Jfu9zlP3hPnHqAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 07:26:10 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 03:26:03.068507 2026] [security2:error] [pid 18765:tid 18765] [client 2a02:2968::1c00:34ff:fe00:e53:45890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildcomaui.com"] [uri "/.env"] [unique_id "arYiC_ZafD1o7QHbSsxSagAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 06:40:36 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 02:40:32.357309 2026] [security2:error] [pid 29454:tid 29547] [client 2a02:2968::1c00:34ff:fe00:e53:54172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vnbcares.com"] [uri "/.env"] [unique_id "arYXYKWmkWsUK5kLBW_8HQAAAgY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 21:29:38 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:29:29.860143 2026] [security2:error] [pid 30374:tid 30374] [client 2a02:2968::1c00:34ff:fe00:e53:56324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.networklivemusic.com"] [uri "/wp-config.php.bak"] [unique_id "arLzOTavWtOrFg_q3KIFEwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 19:49:13 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:49:02.546735 2026] [security2:error] [pid 29864:tid 29864] [client 2a02:2968::1c00:34ff:fe00:e53:47842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eric-grant.com"] [uri "/wp-config.php.bak"] [unique_id "arLbriOiU3qY3oiMr-qmPQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 17:34:57 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:34:49.002058 2026] [security2:error] [pid 16493:tid 16493] [client 2a02:2968::1c00:34ff:fe00:e53:60640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backstore.com"] [uri "/backstore/Index_Products.htm/wp-config.php.bak"] [unique_id "arK8OdHtoAEsgRUxemsmQwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 16:31:42 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:31:38.133223 2026] [security2:error] [pid 1177:tid 1177] [client 2a02:2968::1c00:34ff:fe00:e53:44446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xyncom.com"] [uri "/wp-config.php.bak"] [unique_id "arKtahmVwSOWZQ1FQygQ3QAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 15:33:41 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:33:36.054820 2026] [security2:error] [pid 27545:tid 27545] [client 2a02:2968::1c00:34ff:fe00:e53:43744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiireservations.com"] [uri "/wp-config.php.bak"] [unique_id "arKf0K_HyvtkDVrQreYXMAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 13:36:34 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:36:28.735717 2026] [security2:error] [pid 13720:tid 13864] [client 2a02:2968::1c00:34ff:fe00:e53:37314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khalessilaw.com"] [uri "/wp-config.php.bak"] [unique_id "arKEXCrMyVdROKIIOGLRVAAAApc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 12:07:43 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:07:35.485017 2026] [security2:error] [pid 16649:tid 16649] [client 2a02:2968::1c00:34ff:fe00:e53:60800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andreas-villa.com"] [uri "/wp-config.php.bak"] [unique_id "arJvh-iQmoHf2GL4TzigPAAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 08:39:02 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:38:56.962138 2026] [security2:error] [pid 21694:tid 21694] [client 2a02:2968::1c00:34ff:fe00:e53:42486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rmhpolarracing.com"] [uri "/wp-config.php.bak"] [unique_id "arI-oNQQVH7bBddb0NlSlQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 03:47:41 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:47:27.814009 2026] [security2:error] [pid 32268:tid 32268] [client 2a02:2968::1c00:34ff:fe00:e53:46480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buffalogunsaz.com"] [uri "/.env"] [unique_id "arH6T20N-IP5g0Ptt8ZycgAAADQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 02:12:46 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.n ... show more (mod_security) mod_security (id:210492) triggered by 2a02:2968::1c00:34ff:fe00:e53 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:12:38.635471 2026] [security2:error] [pid 9274:tid 9274] [client 2a02:2968::1c00:34ff:fe00:e53:35366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willymoc.com"] [uri "/.env"] [unique_id "arHkFshfeTaNhEVfz2uT3AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 162.158.120.189

🇯🇵 125.199.11.32

🇰🇷 220.76.220.247

🇨🇳 203.83.231.93

🇺🇸 162.216.149.176

🇺🇸 162.216.149.172

🇹🇷 78.163.110.253

🇦🇺 20.5.85.204

🇨🇭 209.99.190.215

🇦🇷 181.20.151.223

🇺🇸 162.216.149.168

🇺🇸 147.185.132.157

🇳🇱 109.160.32.34

🇧🇷 45.237.116.166

🇯🇵 43.165.170.119

🇬🇧 31.14.254.30

🇻🇳 123.21.0.52

🇨🇳 120.48.90.166

🇰🇷 220.119.37.141

🇺🇸 162.216.149.161