JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a06:a880:5:bbe3::1

2a06:a880:5:bbe3::1 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 56%: ?

56%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	STYLISH BY A&L SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	07internet.ro
Country	🇳🇱 Netherlands
City	The Hague, South Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a06:a880:5:bbe3::1

Whois 2a06:a880:5:bbe3::1

IP Abuse Reports for 2a06:a880:5:bbe3::1:

This IP address has been reported a total of 11 times from 10 distinct sources. 2a06:a880:5:bbe3::1 was first reported on June 16th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-17 18:24:53 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:bbe3::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:bbe3::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 14:24:48.575324 2026] [security2:error] [pid 27591:tid 27591] [client 2a06:a880:5:bbe3::1:41632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accu-tuner.com"] [uri "/.env"] [unique_id "ajLmcKRNAeBedgqNZdtvfgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-17 16:43:30 (3 hours ago)	2a06:a880:5:bbe3::1 - - [17/Jun/2026:16:43:09 +0000] "GET /robots.txt HTTP/2.0" 444 0 "http://suann. ... show more 2a06:a880:5:bbe3::1 - - [17/Jun/2026:16:43:09 +0000] "GET /robots.txt HTTP/2.0" 444 0 "http://suann.net/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 2a06:a880:5:bbe3::1 - - [17/Jun/2026:16:43:15 +0000] "GET /secrets.json HTTP/2.0" 444 0 "http://suann.net/secrets.json" "Mozilla/5.0 (compatible; Claude-Web/1.0; +https://www.anthropic.com)" 2a06:a880:5:bbe3::1 - - [17/Jun/2026:16:43:28 +0000] "GET /sitemap.xml HTTP/2.0" 444 0 "http://suann.net/sitemap.xml" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-17 16:35:26 (3 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /.env.bak	Web App Attack
🇮🇹 zenmorro	2026-06-17 15:27:53 (5 hours ago)	Honeypot hit (imperocms:0) — [honeypot] Tentativo lettura .env \| GET /.env \| UA: Mozilla/5.0 AppleWe ... show more Honeypot hit (imperocms:0) — [honeypot] Tentativo lettura .env \| GET /.env \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot. Automated report from honeypot infrastructure show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-17 14:33:06 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:bbe3::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:bbe3::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 10:33:00.114109 2026] [security2:error] [pid 9734:tid 9734] [client 2a06:a880:5:bbe3::1:53848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.homebuilt.org"] [uri "/.env"] [unique_id "ajKwHLlRzEeo3qUaduUUcQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 wearenotplayinghere	2026-06-16 20:42:11 (23 hours ago)	CrowdSec: Ip 2a06:a880:5:bbe3::1 performed 'crowdsecurity/http-sensitive-files' (6 events over 9.396 ... show more CrowdSec: Ip 2a06:a880:5:bbe3::1 performed 'crowdsecurity/http-sensitive-files' (6 events over 9.39655646s) at 2026-06-16 20:42:10.583893129 +0000 UTC show less	Web App Attack
🇮🇹 VHosting	2026-06-16 17:45:03 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-06-16 17:04:41 (1 day ago)	2a06:a880:5:bbe3::1 - - [16/Jun/2026:11:08:43 -0500] "GET /.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (c ... show more 2a06:a880:5:bbe3::1 - - [16/Jun/2026:11:08:43 -0500] "GET /.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 172.71.95.115 2a06:a880:5:bbe3::1 - - [16/Jun/2026:11:08:43 -0500] "GET /.env.example HTTP/1.1" 403 12 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 172.71.95.116 2a06:a880:5:bbe3::1 - - [16/Jun/2026:11:08:45 -0500] "GET /.env.production HTTP/1.1" 403 12 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 172.71.95.116 2a06:a880:5:bbe3::1 - - [16/Jun/2026:11:08:45 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot" 172.71.95.116 2a06:a880:5:bbe3::1 - - [16/Jun/2026:11:08:45 -0500] "GET /.env.local HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)" 172.7 ... show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Halux	2026-06-16 16:29:20 (1 day ago)	2a06:a880:5:bbe3::1 Probing protected path or service	Web App Attack
🇺🇸 ipblock.com	2026-06-16 15:24:00 (1 day ago)	IPBlock protected site ID [3390-wh]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-16 15:13:13 (1 day ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.219.230.59

🇺🇸 142.111.152.144

🇩🇪 85.190.98.35

🇫🇷 2a10:4646:190::aea5:c389

🇺🇸 2607:f8b0:4001:c14::12c

🇮🇶 195.7.11.3

🇳🇱 188.166.20.164

🇬🇧 86.12.197.158

🇺🇸 68.183.141.81

🇳🇱 45.153.34.32

🇺🇸 34.75.21.124

🇹🇷 31.145.131.202

🇺🇸 20.163.15.177

🇹🇷 5.27.7.106

🇵🇸 213.6.65.118

🇩🇪 193.36.84.205

🇩🇪 167.94.145.31

🇹🇳 154.110.148.200

🇬🇧 141.195.139.100

🇺🇸 124.198.131.231