JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a05:8b81:1000:2::6e0a:317

2a05:8b81:1000:2::6e0a:317 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 47%: ?

47%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Droptop GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201206
Domain Name	linevast.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a05:8b81:1000:2::6e0a:317

Whois 2a05:8b81:1000:2::6e0a:317

IP Abuse Reports for 2a05:8b81:1000:2::6e0a:317:

This IP address has been reported a total of 12 times from 7 distinct sources. 2a05:8b81:1000:2::6e0a:317 was first reported on August 28th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-01 21:59:11 (18 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-31. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-31 08:26:30 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:26:16.331477 2026] [security2:error] [pid 12075:tid 12075] [client 2a05:8b81:1000:2::6e0a:317:34584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.multilize.com"] [uri "/.git/config"] [unique_id "apU6qHPZgCmFkRWNA6FYEwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 07:12:41 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:12:37.128689 2026] [security2:error] [pid 28575:tid 28575] [client 2a05:8b81:1000:2::6e0a:317:58012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.solarfarms.info"] [uri "/.git/config"] [unique_id "apUpZUKyUeCHk4rb73VzVgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 05:37:44 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:37:32.002581 2026] [security2:error] [pid 4916:tid 4916] [client 2a05:8b81:1000:2::6e0a:317:50022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.noemontes.com"] [uri "/.git/config"] [unique_id "apUTHIsa6x1ZW0XknnOAIAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-08-31 04:48:53 (2 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 04:09:28 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 00:09:23.031907 2026] [security2:error] [pid 23964:tid 23964] [client 2a05:8b81:1000:2::6e0a:317:41206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.remote911.net"] [uri "/.git/config"] [unique_id "apT-cz6qrj7w_qhEyctF-wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 03:09:34 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 23:09:28.554532 2026] [security2:error] [pid 14051:tid 14051] [client 2a05:8b81:1000:2::6e0a:317:57174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.winders.name"] [uri "/.git/config"] [unique_id "apTwaB_bLXHxArM2lDPZIwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-31 02:40:03 (2 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 02:26:07 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a05:8b81:1000:2::6e0a:317 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 22:26:02.494537 2026] [security2:error] [pid 6404:tid 6407] [client 2a05:8b81:1000:2::6e0a:317:40878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.potterpuppetpals.com"] [uri "/.git/config"] [unique_id "apTmOnZtLHlSARuZ8TwergAAAUE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Kiwi Bloke	2026-08-30 02:38:07 (3 days ago)	Unauthorized connection attempt(s) from IP address 2a05:8b81:1000:2::6e0a:317	Brute-Force Web App Attack
🇪🇸 alferez	2026-08-29 19:52:24 (3 days ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
🇩🇪 SCHAPPY	2026-08-28 11:30:21 (5 days ago)	Probing for wp2shell vulnerabilities.	Hacking Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.77.14.194

🇷🇴 80.94.92.206

🇺🇸 202.8.40.13

🇰🇷 175.203.179.136

🇵🇪 161.132.87.96

🇺🇸 144.24.47.42

🇺🇸 86.48.18.41

🇺🇦 83.142.111.247

🇱🇹 62.60.130.253

🇸🇻 45.152.217.81

🇩🇪 43.228.157.161

🇦🇿 37.61.120.93

🇦🇷 200.112.142.169

🇹🇳 197.6.2.60

🇧🇷 187.13.147.130

🇺🇸 172.174.235.99

🇮🇳 162.4.81.4

🇨🇳 124.94.126.158

🇻🇳 103.72.56.174

🇳🇱 81.19.216.92