JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0a:4cc0:c2:5bbb:8fe:2dff:fe72:8bfb

2a0a:4cc0:c2:5bbb:8fe:2dff:fe72:8bfb was found in our database!

This IP was reported 15 times. Confidence of Abuse is 29%: ?

29%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0a:4cc0:c2:5bbb:8fe:2dff:fe72:8bfb

Whois 2a0a:4cc0:c2:5bbb:8fe:2dff:fe72:8bfb

IP Abuse Reports for 2a0a:4cc0:c2:5bbb:8fe:2dff:fe72:8bfb:

This IP address has been reported a total of 15 times from 4 distinct sources. 2a0a:4cc0:c2:5bbb:8fe:2dff:fe72:8bfb was first reported on September 14th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-09-16 17:27:50 (6 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.definitelynotahoneypot.xyz \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇷🇴 clauss	2026-09-16 16:02:11 (8 hours ago)	2a0a:4cc0:c2:5bbb:8fe:2dff:fe72:8bfb - - [16/Sep/2026:19:02:10 +0300] "GET /config.json HTTP/2.0" 40 ... show more 2a0a:4cc0:c2:5bbb:8fe:2dff:fe72:8bfb - - [16/Sep/2026:19:02:10 +0300] "GET /config.json HTTP/2.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 2a0a:4cc0:c2:5bbb:8fe:2dff:fe72:8bfb - - [16/Sep/2026:19:02:11 +0300] "GET /config.json HTTP/2.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
🇵🇱 Budyn	2026-09-16 13:07:59 (11 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.definitelynotahoneypot.xyz \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-09-16 07:34:33 (16 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.definitelynotahoneypot.xyz \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-09-16 00:53:34 (23 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.teddypot.cloud \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇳🇱 middelkoopcc	2026-09-15 22:15:06 (1 day ago)	2026-09-16 00:13:24 GET /asset-manifest.json [301] && 2026-09-16 00:13:25 GET /vite-manifest.json [3 ... show more 2026-09-16 00:13:24 GET /asset-manifest.json [301] && 2026-09-16 00:13:25 GET /vite-manifest.json [301] && 2026-09-16 00:13:25 GET /_next/build-manifest.json [301] && 110 more within 20 minutes show less	Web App Attack
🇵🇱 Budyn	2026-09-15 19:21:43 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.sweetpuddingtrap.xyz \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-09-15 14:23:51 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: test.teddypot.cloud \| URI: /.env.mainnet \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-15 10:07:59 (1 day ago)	Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_11 \| Action: AWS API Call \| Token: 7lg ... show more Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_11 \| Action: AWS API Call \| Token: 7lggvodiip8vznhits5cv0986 \| Client Tool: Boto3/1.43.42 md/Botocore#1.43.42 ua/2.1 os/linux#6.12.90+deb13.1-amd64 md/arch#x86_64 lang/python#3.13.5 md/pyimpl#CPython m/b,D,e,Z cfg/retry-mode#legacy B... show less	Hacking Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-15 07:38:32 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.teddypot.cloud \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-09-15 03:30:16 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.sweetpuddingtrap.xyz \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇫🇷 dynamix	2026-09-15 02:55:16 (1 day ago)	Multiple WAF Violations	Web App Attack
🇵🇱 Budyn	2026-09-14 23:25:59 (2 days ago)	Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_5 \| Action: AWS API Call \| Token: oivi ... show more Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_5 \| Action: AWS API Call \| Token: oivim5afqu4p15ffms5ex4pv4 \| Client Tool: Boto3/1.43.42 md/Botocore#1.43.42 ua/2.1 os/linux#6.12.90+deb13.1-amd64 md/arch#x86_64 lang/python#3.13.5 md/pyimpl#CPython m/b,D,e,Z cfg/retry-mode#legacy B... show less	Hacking Bad Web Bot Web App Attack
🇳🇱 middelkoopcc	2026-09-14 22:12:02 (2 days ago)	2026-09-15 00:10:02 GET /vite-manifest.json [301] && 2026-09-15 00:10:02 GET /build-manifest.json [3 ... show more 2026-09-15 00:10:02 GET /vite-manifest.json [301] && 2026-09-15 00:10:02 GET /build-manifest.json [301] && 2026-09-15 00:10:02 GET /_next/routes-manifest.json [301] && 257 more within 20 minutes show less	Web App Attack
🇵🇱 Budyn	2026-09-14 21:45:04 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.sweetpuddingtrap.xyz \| URI: /.well-known/security.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.77

🇹🇼 220.133.95.63

🇳🇱 185.223.235.7

🇧🇴 181.188.161.177

🇵🇰 160.30.142.217

🇩🇪 144.31.94.129

🇺🇸 136.115.115.13

🇫🇷 91.231.89.162

🇳🇱 84.26.0.88

🇺🇸 74.7.241.8

🇺🇸 64.62.197.163

🇦🇺 51.161.148.12

🇺🇸 34.63.100.92

🇧🇬 5.188.206.30

🇺🇸 216.25.89.78

🇵🇦 200.46.212.202

🇺🇸 195.184.76.202

🇺🇸 162.216.149.181

🇲🇾 149.118.135.252

🇫🇮 147.185.133.93