JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a05:4140:3::4ecc

2a05:4140:3::4ecc was found in our database!

This IP was reported 51 times. Confidence of Abuse is 53%: ?

53%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Lumanex
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212271
Hostname(s)	it-pom.server-by.c1vhosting.it
Domain Name	c1vhosting.it
Country	🇮🇹 Italy
City	Pomezia, Lazio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a05:4140:3::4ecc

Whois 2a05:4140:3::4ecc

IP Abuse Reports for 2a05:4140:3::4ecc:

This IP address has been reported a total of 51 times from 25 distinct sources. 2a05:4140:3::4ecc was first reported on July 3rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Vianpyro	2026-10-16 16:07:09 (1 day ago)	Honeypot: 34 request(s) in 4 min. Paths: /, /%C0, /.aws/credentials, /.env, /.env.bak. Method(s): GE ... show more Honeypot: 34 request(s) in 4 min. Paths: /, /%C0, /.aws/credentials, /.env, /.env.bak. Method(s): GET. UA: python-requests/2.31.0. ASN: 212271 (C1V Cloud Istances subnet.). show less	Hacking Bad Web Bot Web App Attack
🇨🇦 Vianpyro	2026-10-12 16:43:03 (5 days ago)	Honeypot: 34 request(s) in 3 min. Paths: /, /%C0, /.aws/credentials, /.env, /.env.bak. Method(s): GE ... show more Honeypot: 34 request(s) in 3 min. Paths: /, /%C0, /.aws/credentials, /.env, /.env.bak. Method(s): GET. UA: python-requests/2.31.0. ASN: 212271 (C1V Cloud Istances subnet.). show less	Hacking Bad Web Bot Web App Attack
🇨🇦 Vianpyro	2026-10-10 17:20:07 (6 days ago)	Honeypot: 34 request(s) in 2 min. Paths: /, /%C0, /.aws/credentials, /.env, /.env.bak. Method(s): GE ... show more Honeypot: 34 request(s) in 2 min. Paths: /, /%C0, /.aws/credentials, /.env, /.env.bak. Method(s): GET. UA: python-requests/2.31.0. ASN: 212271 (C1V Cloud Istances subnet.). show less	Hacking Bad Web Bot Web App Attack
🇫🇷 Jimbo67	2026-10-08 07:49:48 (1 week ago)	Cloudflare WAF: 4 hits in 30s \| action=block \| abuse=confirmed_abuse \| categories=21 \| rule_id=0189a ... show more Cloudflare WAF: 4 hits in 30s \| action=block \| abuse=confirmed_abuse \| categories=21 \| rule_id=0189a8c2c2ab4a60bc709bad14577d18 \| URIs=/.env,/.env.development,/.env.local,/.env.production \| confidence=0.95 show less	Web App Attack
🇺🇸 ambor	2026-10-07 14:12:34 (1 week ago)	Honeypot access: Environment file access attempt. Path: /.env	Web App Attack
🇩🇪 sfmet-admin	2026-10-06 05:20:34 (1 week ago)	2a05:4140:3::4ecc - - [06/Oct/2026:05:20:33 +0000] "GET /.env HTTP/2.0" 200 55 "-" "Mozilla/5.0 (Win ... show more 2a05:4140:3::4ecc - - [06/Oct/2026:05:20:33 +0000] "GET /.env HTTP/2.0" 200 55 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇨🇦 Vianpyro	2026-10-05 22:38:20 (1 week ago)	Honeypot: 103 request(s) in 0 min. Paths: /, /.aws/config, /.aws/credentials, /.credentials, /.docke ... show more Honeypot: 103 request(s) in 0 min. Paths: /, /.aws/config, /.aws/credentials, /.credentials, /.docker/config.json. Method(s): GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36. ASN: 212271 (C1V Cloud Istances subnet.). show less	Hacking Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-10-04 01:03:41 (1 week ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-09-28 15:17:00 (2 weeks ago)		Hacking
🇫🇷 Jimbo67	2026-09-28 01:33:48 (2 weeks ago)	Cloudflare WAF: 4 hits in 30s \| action=block \| abuse=confirmed_abuse \| categories=21 \| rule_id=0189a ... show more Cloudflare WAF: 4 hits in 30s \| action=block \| abuse=confirmed_abuse \| categories=21 \| rule_id=0189a8c2c2ab4a60bc709bad14577d18 \| URIs=/.env,/.env.development,/.env.local,/.env.production \| confidence=0.95 show less	Web App Attack
🇺🇸 oralunal	2026-09-27 18:35:08 (2 weeks ago)	IP banned by Fail2Ban in jail oral-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇩🇪 roxyapi	2026-09-25 15:09:25 (3 weeks ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /.env.production	Web App Attack Bad Web Bot
🇩🇪 roxyapi	2026-09-24 13:02:58 (3 weeks ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /.env.production	Web App Attack Bad Web Bot
🇫🇷 Jimbo67	2026-09-23 08:48:48 (3 weeks ago)	Cloudflare WAF: 4 hits in 30s \| action=block \| abuse=confirmed_abuse \| categories=21 \| rule_id=0189a ... show more Cloudflare WAF: 4 hits in 30s \| action=block \| abuse=confirmed_abuse \| categories=21 \| rule_id=0189a8c2c2ab4a60bc709bad14577d18 \| URIs=/.env,/.env.development,/.env.local,/.env.production \| confidence=0.95 show less	Web App Attack
🇩🇪 yitzhaq	2026-09-22 20:32:28 (3 weeks ago)	2a05:4140:3::4ecc - - [22/Sep/2026:22:31:59 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4575 " ... show more 2a05:4140:3::4ecc - - [22/Sep/2026:22:31:59 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4575 "-" "python-requests/2.31.0" 2a05:4140:3::4ecc - - [22/Sep/2026:22:31:59 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 403 4576 "https://[site]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 2a05:4140:3::4ecc - - [22/Sep/2026:22:32:00 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 403 520 "https://[site]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 2a05:4140:3::4ecc - - [22/Sep/2026:22:32:01 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 403 520 "https://[site]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack Hacking

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.211.22

🇺🇸 209.87.169.104

🇺🇸 209.38.69.12

🇬🇧 200.138.46.153

🇳🇴 193.90.12.122

🇺🇦 178.151.92.87

🇩🇪 172.71.172.51

🇰🇷 115.140.161.61

🇳🇱 89.248.165.203

🇮🇷 85.133.217.136

🇺🇸 70.167.235.215

🇳🇱 45.148.10.151

🇪🇬 196.202.102.116

🇨🇱 186.78.19.113

🇺🇸 162.216.149.170

🇫🇷 91.231.89.159

🇳🇱 77.239.124.31

🇺🇸 45.206.93.144

🇵🇰 39.61.97.180

🇨🇭 20.250.43.245