JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a06:a880:5:ed5b::1

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

32 reports

22 reporters · latest 4 months ago

ISP	STYLISH BY A&L SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	07internet.ro
Country	🇳🇱 Netherlands
City	The Hague, South Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a06:a880:5:ed5b::1 has been reported 32 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a06:a880:5:ed5b::1

Export CSV

This IP address has been reported a total of 32 times from 22 distinct sources. 2a06:a880:5:ed5b::1 was first reported on June 19th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-22 22:02:57 (4 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-21. show less	Web App Attack SSH Hacking
🇬🇧 Aetherweb Ark	2026-06-21 19:53:47 (4 months ago)	(mod_security) mod_security (id:949110) triggered by 2a06:a880:5:ed5b::1 (Unknown): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 2a06:a880:5:ed5b::1 (Unknown): N in the last X secs show less	Web App Attack
🇩🇰 Leif Neland	2026-06-21 18:00:04 (4 months ago)	Detected by CrowdSec on slim	Brute-Force
🇩🇪 dbmwebdesign	2026-06-21 15:55:11 (4 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 BlueWire Hosting	2026-06-21 08:05:36 (4 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-21 06:36:10 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:ed5b::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:ed5b::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 02:36:02.418739 2026] [security2:error] [pid 8318:tid 8318] [client 2a06:a880:5:ed5b::1:48368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psychtraining.org"] [uri "/.env.example"] [unique_id "ajeGUi_NUVAcummnIkTdsgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 05:26:33 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:ed5b::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:ed5b::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 01:26:29.600991 2026] [security2:error] [pid 2554:tid 2554] [client 2a06:a880:5:ed5b::1:60252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.henhousebbq.com"] [uri "/.env"] [unique_id "ajd2BSc0l5Yih5uO6ZySJgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 23:05:21 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:ed5b::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:ed5b::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 19:05:14.602678 2026] [security2:error] [pid 2044:tid 2044] [client 2a06:a880:5:ed5b::1:36920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manty.com"] [uri "/.env.production"] [unique_id "ajccquyFdZvHWbqY7PpdaAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-06-20 22:30:19 (4 months ago)		Brute-Force Web App Attack
🇩🇪 macrob	2026-06-20 21:46:35 (4 months ago)	2026/06/20 21:46:33 [error] 3257585#3257585: 319402196 access forbidden by rule, client: 2a06:a880: ... show more 2026/06/20 21:46:33 [error] 3257585#3257585: 319402196 access forbidden by rule, client: 2a06:a880:5:ed5b::1, server: binixo.pl, request: "GET /.env.example HTTP/2.0", host: "binixo.pl" 2026/06/20 21:46:33 [error] 3257587#3257587: 319404111 access forbidden by rule, client: 2a06:a880:5:ed5b::1, server: binixo.pl, request: "GET /.env HTTP/2.0", host: "binixo.pl" 2026/06/20 21:46:34 [error] 3257583#3257583: 319401069 access forbidden by rule, client: 2a06:a880:5:ed5b::1, server: binixo.pl, request: "GET /.aws/credentials HTTP/2.0", host: "binixo.pl" ... show less	Web App Attack
Anonymous	2026-06-20 20:55:04 (4 months ago)	"GET /api/.env HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 19:41:05 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:a880:5:ed5b::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:a880:5:ed5b::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 15:41:02.330751 2026] [security2:error] [pid 25295:tid 25295] [client 2a06:a880:5:ed5b::1:58316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.landjudging.com"] [uri "/api/.env"] [unique_id "ajbszmB7ESaThVheNexbggAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-06-20 19:37:09 (4 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇫🇷 dynamix	2026-06-20 19:35:09 (4 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 macrob	2026-06-20 18:45:38 (4 months ago)	2026/06/20 18:45:32 [error] 3211638#3211638: 319191553 access forbidden by rule, client: 2a06:a880: ... show more 2026/06/20 18:45:32 [error] 3211638#3211638: 319191553 access forbidden by rule, client: 2a06:a880:5:ed5b::1, server: binixo.lk, request: "GET /.aws/credentials HTTP/2.0", host: "binixo.lk" 2026/06/20 18:45:36 [error] 3211638#3211638: 319191553 access forbidden by rule, client: 2a06:a880:5:ed5b::1, server: binixo.lk, request: "GET /.env HTTP/2.0", host: "binixo.lk" 2026/06/20 18:45:36 [error] 3211637#3211637: 319191658 access forbidden by rule, client: 2a06:a880:5:ed5b::1, server: binixo.lk, request: "GET /.env.example HTTP/2.0", host: "binixo.lk" ... show less	Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 210.212.136.3

🇺🇸 167.253.19.91

🇧🇷 131.0.13.108

🇺🇸 24.247.220.26

🇺🇸 20.65.178.231

🇺🇸 2001:470:1:c84::14

🇰🇷 210.114.22.126

🇨🇳 182.113.118.153

🇨🇦 104.207.49.5

🇨🇳 61.142.255.146

🇩🇪 51.89.71.82

🇳🇱 45.225.135.20

🇧🇷 45.166.185.222

🇦🇪 217.164.235.90

🇺🇸 216.180.246.13

🇨🇭 209.99.190.200

🇨🇴 201.233.8.50

🇺🇸 173.54.68.118

🇮🇳 122.168.197.138

🇰🇷 118.41.205.179