JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a06:c480:3200:0:fadb:88ff:fe00:b802

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

157 reports

28 reporters · latest 4 months ago

ISP	MOJI FTTO Enterprise
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47160
Domain Name	moji.fr
Country	🇫🇷 France
City	Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a06:c480:3200:0:fadb:88ff:fe00:b802 has been reported 157 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a06:c480:3200:0:fadb:88ff:fe00:b802

Export CSV

This IP address has been reported a total of 157 times from 28 distinct sources. 2a06:c480:3200:0:fadb:88ff:fe00:b802 was first reported on October 31st 2025, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-05-25 15:51:00 (4 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-25 03:37:30 (4 months ago)	Blocked by UFW (TCP on 8333) Source port: 48424 Packet length: 80 This report (for 2a06:c480:3200:0 ... show more Blocked by UFW (TCP on 8333) Source port: 48424 Packet length: 80 This report (for 2a06:c480:3200:0000:fadb:88ff:fe00:b802) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 4server	2026-05-25 00:12:26 (4 months ago)	[MonMay2502:12:21.0787362026][security2:error][pid3276157:tid3276221][client2a06:c480:3200:0:fadb:88 ... show more [MonMay2502:12:21.0787362026][security2:error][pid3276157:tid3276221][client2a06:c480:3200:0:fadb:88ff:fe00:b802:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autoeuro.lv\"][uri\"/\"][unique_id\"ahOT5SErsXJx-dy_RQ1H9AAAAII\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 LRob	2026-05-24 20:00:25 (4 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇨🇭 4server	2026-05-23 17:12:47 (4 months ago)	[SatMay2319:12:41.6976962026][security2:error][pid3168049:tid3168178][client2a06:c480:3200:0:fadb:88 ... show more [SatMay2319:12:41.6976962026][security2:error][pid3168049:tid3168178][client2a06:c480:3200:0:fadb:88ff:fe00:b802:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"avvnicolaurbani.ch\"][uri\"/\"][unique_id\"ahHgCeq6_Wf_CxRiHM-_NwAAAJU\"] show less	Hacking Web App Attack
🇫🇮 as211431.net	2026-05-20 21:14:39 (4 months ago)	Triggered Cloudflare WAF (linkMaze) from FR. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (linkMaze) from FR. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/2 (GET method) Endpoint: / UA: req/v3 (https://github.com/imroc/req) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 wpwoodo	2026-05-17 04:44:11 (4 months ago)	Webpage crawler	Bad Web Bot
🇺🇸 xmission.com	2026-05-15 22:07:03 (4 months ago)	Blocked by UFW (TCP on 8333) Source port: 59938 Packet length: 80 This report (for 2a06:c480:3200:0 ... show more Blocked by UFW (TCP on 8333) Source port: 59938 Packet length: 80 This report (for 2a06:c480:3200:0000:fadb:88ff:fe00:b802) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-15 05:59:05 (4 months ago)	Blocked by UFW (TCP on 8333) Source port: 41252 Packet length: 80 This report (for 2a06:c480:3200:0 ... show more Blocked by UFW (TCP on 8333) Source port: 41252 Packet length: 80 This report (for 2a06:c480:3200:0000:fadb:88ff:fe00:b802) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-14 06:44:30 (5 months ago)	Blocked by UFW (TCP on 8333) Source port: 38768 Packet length: 80 This report (for 2a06:c480:3200:0 ... show more Blocked by UFW (TCP on 8333) Source port: 38768 Packet length: 80 This report (for 2a06:c480:3200:0000:fadb:88ff:fe00:b802) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-13 07:07:28 (5 months ago)	Blocked by UFW (TCP on 8333) Source port: 38664 Packet length: 80 This report (for 2a06:c480:3200:0 ... show more Blocked by UFW (TCP on 8333) Source port: 38664 Packet length: 80 This report (for 2a06:c480:3200:0000:fadb:88ff:fe00:b802) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 Peter-Johann Sarbach	2026-05-13 05:23:01 (5 months ago)	May 12 03:47:50 imap-login: Info: Disconnected: Connection closed (no auth attempts in 1 secs): user ... show more May 12 03:47:50 imap-login: Info: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=2a06:c480:3200:0:fadb:88ff:fe00:b802, lip=x.x.x.x, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) show less	Hacking
🇺🇸 xmission.com	2026-05-10 16:56:27 (5 months ago)	Blocked by UFW (TCP on 8333) Source port: 46080 Packet length: 80 This report (for 2a06:c480:3200:0 ... show more Blocked by UFW (TCP on 8333) Source port: 46080 Packet length: 80 This report (for 2a06:c480:3200:0000:fadb:88ff:fe00:b802) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-09 23:19:56 (5 months ago)	Blocked by UFW (TCP on 8333) Source port: 45474 Packet length: 80 This report (for 2a06:c480:3200:0 ... show more Blocked by UFW (TCP on 8333) Source port: 45474 Packet length: 80 This report (for 2a06:c480:3200:0000:fadb:88ff:fe00:b802) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-09 08:27:08 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2a06:c480:3200:0:fadb:88ff:fe00:b802 (Unknown): ... show more (mod_security) mod_security (id:210730) triggered by 2a06:c480:3200:0:fadb:88ff:fe00:b802 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 04:26:59.734624 2026] [security2:error] [pid 11254:tid 11254] [client 2a06:c480:3200:0:fadb:88ff:fe00:b802:46362] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kaldaragroup.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kaldaragroup.com"] [uri "/latest.sql"] [unique_id "af7v0978pZDYbQEPXPrf0gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.103

🇨🇳 119.96.174.235

🇮🇳 223.178.208.40

🇩🇪 213.209.159.208

🇧🇷 205.210.31.205

🇨🇳 183.228.56.34

🇺🇸 162.216.150.234

🇺🇸 162.216.150.62

🇫🇮 147.185.133.41

🇨🇳 121.46.244.22

🇨🇳 119.96.158.87

🇺🇸 109.105.209.14

🇷🇺 91.79.36.254

🇮🇳 74.225.203.7

🇬🇧 35.246.107.124

🇦🇺 35.244.127.16

🇸🇬 35.240.166.58

🇧🇪 35.240.80.129

🇫🇮 35.228.164.224

🇰🇷 218.51.148.194