JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a06:a880:5:2ae2::1

Neutral Activity IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

42 reports

24 reporters · latest 4 months ago

ISP: STYLISH BY A&L SRL
Usage Type: Data Center/Web Hosting/Transit
ASN: AS9009
Domain Name: 07internet.ro
Country: 🇳🇱 Netherlands
City: The Hague, South Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a06:a880:5:2ae2::1 has been reported 42 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

42 from 24 distinct reporters

First reported

June 18th 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ger-stg-sifi1	2026-06-19 00:01:42 UTC · (4 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Mangelot Hosting	2026-06-18 22:53:37 UTC · (4 months ago)	(modsecurity) srv104 ModSecurity 2a06:a880:5:2ae2::1 (NL/The Netherlands/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇦🇺 nzhost.co.nz	2026-06-18 22:07:25 UTC · (4 months ago)	$f2bV_matches	Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-06-18 21:55:28 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 17:55:24.548923 2026] [security2:error] [pid 27157:tid 27157] [client 2a06:a880: ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 17:55:24.548923 2026] [security2:error] [pid 27157:tid 27157] [client 2a06:a880:5:2ae2::1:58240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.powerkiteforum.com"] [uri "/.env.example"] [unique_id "ajRpTOvaHtfCXHSW2oyF4wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 21:35:39 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 17:35:33.512730 2026] [security2:error] [pid 28946:tid 28946] [client 2a06:a880: ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 17:35:33.512730 2026] [security2:error] [pid 28946:tid 28946] [client 2a06:a880:5:2ae2::1:37450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "poland-yacht-registration.com"] [uri "/api/.env"] [unique_id "ajRkpWISD3YFyjO9iwdroAAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-06-18 21:05:38 UTC · (4 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-18 20:30:50 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 16:30:42.171462 2026] [security2:error] [pid 16816:tid 16816] [client 2a06:a880: ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 16:30:42.171462 2026] [security2:error] [pid 16816:tid 16816] [client 2a06:a880:5:2ae2::1:37804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.perthdps.com"] [uri "/.env.example"] [unique_id "ajRVcn5c25ozxYGAMXUU6QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 20:14:16 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 16:14:10.680981 2026] [security2:error] [pid 5022:tid 5026] [client 2a06:a880:5: ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 16:14:10.680981 2026] [security2:error] [pid 5022:tid 5026] [client 2a06:a880:5:2ae2::1:43674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.peapageprod.pwrcoupling.com"] [uri "/api/.env"] [unique_id "ajRRknUkUTVHng4P1p2pgwAAAQA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 19:52:54 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 15:52:51.728503 2026] [security2:error] [pid 27143:tid 27143] [client 2a06:a880: ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 15:52:51.728503 2026] [security2:error] [pid 27143:tid 27143] [client 2a06:a880:5:2ae2::1:55934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.parkplacemotel.com"] [uri "/.env.local"] [unique_id "ajRMk5sOwFCzDawaYzuUjwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-18 19:34:03 UTC · (4 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 19:26:16 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 15:26:11.793706 2026] [security2:error] [pid 32607:tid 32607] [client 2a06:a880: ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 15:26:11.793706 2026] [security2:error] [pid 32607:tid 32607] [client 2a06:a880:5:2ae2::1:47918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ozarkshousing.com"] [uri "/admin/.env"] [unique_id "ajRGU8r5BSavMXACSCPggQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-06-18 18:55:12 UTC · (4 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-18 18:21:31 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 14:21:27.121664 2026] [security2:error] [pid 32145:tid 32145] [client 2a06:a880: ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 14:21:27.121664 2026] [security2:error] [pid 32145:tid 32145] [client 2a06:a880:5:2ae2::1:49574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ofertasdetrabajosyempleos.com"] [uri "/api/.env"] [unique_id "ajQ3JzUETWICaFLHi8BargAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 17:49:18 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 13:49:14.530312 2026] [security2:error] [pid 13095:tid 13095] [client 2a06:a880: ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:2ae2::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 13:49:14.530312 2026] [security2:error] [pid 13095:tid 13095] [client 2a06:a880:5:2ae2::1:34072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notariapenco.cl"] [uri "/.env"] [unique_id "ajQvmvoEN0Vuptpkq6HjQwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 www.nomadomia.com	2026-06-18 17:39:12 UTC · (4 months ago)	Hack attack .env	Port Scan Hacking Bad Web Bot Web App Attack

Showing 16 to 30 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.89.97

🇺🇸 199.165.159.115

🇳🇱 195.178.110.30

🇦🇷 181.25.203.12

🇮🇩 157.66.16.57

🇺🇸 142.93.112.45

🇺🇸 136.116.119.138

🇸🇪 46.59.91.85

🇺🇸 35.145.75.179

🇺🇸 207.172.88.60

🇧🇷 205.210.31.201

🇺🇸 73.129.57.71

🇺🇸 71.6.134.204

🇵🇭 64.81.72.109

🇺🇸 50.6.200.152

🇩🇪 47.254.179.178

🇧🇪 35.210.159.255

🇬🇧 35.203.210.225

🇺🇸 34.74.205.242

🇧🇪 34.22.146.232