JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:6ea0:1508:2::d001

2a02:6ea0:1508:2::d001 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 50%: ?

50%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	datacamp.co.uk
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:6ea0:1508:2::d001

Whois 2a02:6ea0:1508:2::d001

IP Abuse Reports for 2a02:6ea0:1508:2::d001:

This IP address has been reported a total of 28 times from 10 distinct sources. 2a02:6ea0:1508:2::d001 was first reported on May 4th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 11:52:29 (1 hour ago)	(mod_security) mod_security (id:949110) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:949110) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 07:52:25.074223 2026] [security2:error] [pid 32395:tid 32395] [client 2a02:6ea0:1508:2::d001:40450] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chuckwagon.org"] [uri "/.git/index"] [unique_id "aqvUeXTTQ6PCT0oQPNXZ0AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 10:26:55 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:26:49.738889 2026] [security2:error] [pid 28821:tid 28821] [client 2a02:6ea0:1508:2::d001:34704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centuryabsinthe.com"] [uri "/.git/index"] [unique_id "aqvAaTck4PLWMTs76TIccQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 08:01:36 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:01:30.907342 2026] [security2:error] [pid 25395:tid 25395] [client 2a02:6ea0:1508:2::d001:41130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cameronwv.com"] [uri "/.git/index"] [unique_id "aqueWpI0UDCLE51un-cn2QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 05:51:49 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 01:51:45.043298 2026] [security2:error] [pid 5865:tid 5865] [client 2a02:6ea0:1508:2::d001:46086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowerwood.com"] [uri "/.git/index"] [unique_id "aqt_8amSCu9E-GGrS_iiVwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-09-17 05:17:08 (8 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇳🇱 Alt255	2026-09-17 05:16:44 (8 hours ago)	[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a02:6ea0:1508:2::d001 - - [17/Sep/2026:07:16:29 +0200] "GET /.git/index HTTP/2.0" 404 401 "-" "moving-to-bins/1.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 05:11:25 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 01:11:17.659968 2026] [security2:error] [pid 28405:tid 28405] [client 2a02:6ea0:1508:2::d001:52080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boblog111.com"] [uri "/.git/index"] [unique_id "aqt2dZE1fW72KSEv-GwESAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 03:47:45 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:47:37.939528 2026] [security2:error] [pid 21187:tid 21187] [client 2a02:6ea0:1508:2::d001:57948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigredgraphicdesign.com"] [uri "/.git/index"] [unique_id "aqti2c5HM9Nq_xUPlM0zdgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 02:02:16 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:02:11.015944 2026] [security2:error] [pid 11231:tid 11231] [client 2a02:6ea0:1508:2::d001:54072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "batw.net"] [uri "/.git/index"] [unique_id "aqtKIz3lSnyUMPUn7kvzywAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Major Hostility	2026-09-16 22:53:22 (14 hours ago)	"GET /.git/index HTTP/1.1" 404 "GET /.git/index HTTP/1.1" 404	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 21:46:20 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:46:12.776288 2026] [security2:error] [pid 16868:tid 16868] [client 2a02:6ea0:1508:2::d001:34830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aokatheists.org"] [uri "/.git/index"] [unique_id "aqsOJPtXWFqs__VgN9LMzAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 21:20:22 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:20:17.586129 2026] [security2:error] [pid 9078:tid 9078] [client 2a02:6ea0:1508:2::d001:53332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ankitoner.com"] [uri "/.git/index"] [unique_id "aqsIEaUja4ngjyFw9zm0IAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 21:02:00 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a02:6ea0:1508:2::d001 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:01:52.973394 2026] [security2:error] [pid 1964:tid 1964] [client 2a02:6ea0:1508:2::d001:39759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andrewweigel.name"] [uri "/.git/index"] [unique_id "aqsDwOBnynaNGhlIahEvPwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-09-16 21:00:08 (16 hours ago)	Triggered Cloudflare WAF (firewallCustom) from SE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/index UA: moving-to-bins/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 Anytech	2026-09-16 20:40:12 (16 hours ago)	Blocked by ConnMonitor	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.90.33.195

🇺🇿 185.213.230.147

🇲🇾 150.228.145.77

🇺🇸 192.177.122.93

🇺🇸 169.136.32.201

🇺🇸 137.184.198.71

🇨🇦 85.217.149.35

🇨🇦 45.194.92.103

🇺🇸 3.129.187.38

🇺🇸 2a0a:4cc0:2000:3eb0:34af:18ff:fe02:1b26

🇳🇵 2400:1a00:6b63:f035:7cb6:b4ba:d894:d3d

🇮🇩 114.6.128.61

🇮🇳 113.193.234.210

🇫🇷 91.231.89.152

🇳🇱 45.148.10.141

🇳🇱 45.138.12.24

🇪🇨 186.47.77.39

🇭🇰 152.32.171.213

🇳🇴 146.70.170.3

🇯🇵 130.94.65.153