AbuseIPDB » 2a02:4780:5e:60d7::1
2a02:4780:5e:60d7::1
This IP was reported 7 times. Confidence of
Abuse
is 28% : ?
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
ISP
Hostinger International Limited
Usage Type
Content Delivery Network
ASN
AS47583
Hostname(s)
srv1672729.hstgr.cloud
Domain Name
hostinger.com
Country
🇲🇾
Malaysia
City
Kuala Lumpur, Kuala Lumpur
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 2a02:4780:5e:60d7::1 :
This IP address has been reported a total of
7
times from
4 distinct
sources.
2a02:4780:5e:60d7::1 was first reported on
June 18th 2026 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
4server
2026-06-19 23:10:10
(1 week ago)
[SatJun2001:10:04.0805542026][security2:error][pid2406920:tid2407014][client2a02:4780:5e:60d7::1:0]M ...
show more
[SatJun2001:10:04.0805542026][security2:error][pid2406920:tid2407014][client2a02:4780:5e:60d7::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"agilityrossoblu.ch\"][uri\"/agilityrossoblu.ch.sql\"][unique_id\"ajXMTEl4uVbVV4E6Z8OcWgAAAMg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 12:44:49
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2a02:4780:5e:60d7::1 (srv1672729.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:4780:5e:60d7::1 (srv1672729.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 08:44:40.638457 2026] [security2:error] [pid 21747:tid 21747] [client 2a02:4780:5e:60d7::1:43106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||activethinkers.net|F|2"] [data ".net.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "activethinkers.net"] [uri "/activethinkers.net.sql"] [unique_id "ajU5uJVvGLr3POUm9HwLCAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 09:41:45
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2a02:4780:5e:60d7::1 (srv1672729.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:4780:5e:60d7::1 (srv1672729.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 05:41:42.080934 2026] [security2:error] [pid 3703:tid 3703] [client 2a02:4780:5e:60d7::1:50184] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||accommodation-perthairport.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accommodation-perthairport.com"] [uri "/translate.sql"] [unique_id "ajUO1hcbd73o2h2MNShoZgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-06-19 05:46:16
(1 week ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
🇫🇮
6kilowatti
2026-06-19 00:21:54
(1 week ago)
2a02:4780:5e:60d7::1 - - [19/Jun/2026:03:21:53 +0300] "GET /mysqldump.sql HTTP/1.1" 404 41 "-" "Mozi ...
show more
2a02:4780:5e:60d7::1 - - [19/Jun/2026:03:21:53 +0300] "GET /mysqldump.sql HTTP/1.1" 404 41 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15"
2a02:4780:5e:60d7::1 - - [19/Jun/2026:03:21:53 +0300] "GET /db.sql HTTP/1.1" 404 41 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 00:13:16
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2a02:4780:5e:60d7::1 (srv1672729.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:4780:5e:60d7::1 (srv1672729.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 20:13:13.589103 2026] [security2:error] [pid 14245:tid 14245] [client 2a02:4780:5e:60d7::1:35272] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||67ronin.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "67ronin.com"] [uri "/1.sql"] [unique_id "ajSJmay9hip4jmyUY0AyHAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 20:34:03
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2a02:4780:5e:60d7::1 (srv1672729.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:4780:5e:60d7::1 (srv1672729.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 16:33:56.439711 2026] [security2:error] [pid 32035:tid 32035] [client 2a02:4780:5e:60d7::1:37930] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||3beeze.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3beeze.com"] [uri "/www.sql"] [unique_id "ajRWNIkRJcGVJ3NrvaWOWwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: