JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0e:97c0:3e3:9a5::1

2a0e:97c0:3e3:9a5::1

Neutral Activity IPv6 SLAAC Note

54 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Datalix

Usage Type

Data Center/Web Hosting/Transit

ASN

AS58087

Domain Name

datalix.de

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a0e:97c0:3e3:9a5::1 has been reported 54 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a0e:97c0:3e3:9a5::1:

This IP address has been reported a total of 54 times from 20 distinct sources. 2a0e:97c0:3e3:9a5::1 was first reported on June 27th 2024, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-24 18:51:34 (2 months ago)	path attack /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 19:21:19 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 15:21:14.625996 2026] [security2:error] [pid 1644:tid 1644] [client 2a0e:97c0:3e3:9a5::1:38734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zacharyschwartzman.com"] [uri "/wp-config.php"] [unique_id "ajrcqo2lOfiPgLAI02Kl3QAAAA8"], referer: https://www.google.com/search?q=zacharyschwartzman.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 22:49:00 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 18:48:47.698351 2026] [security2:error] [pid 21626:tid 21626] [client 2a0e:97c0:3e3:9a5::1:45318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "erkan.net"] [uri "/.env.backup"] [unique_id "ajHSz6hcBIWpW2rAjHZW-wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-10 21:59:03 (3 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2024-07-10 20:58:29 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 10 16:58:21.331550 2024] [security2:error] [pid 20522] [client 2a0e:97c0:3e3:9a5::1:58467] [client 2a0e:97c0:3e3:9a5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.williamcline.com"] [uri "/.env"] [unique_id "Zo717VB4sAKla6e8XcnCxQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2024-07-10 12:44:50 (2 years ago)	Multiple critical ModSecurity events ...	Web Spam Bad Web Bot
🇫🇷 conseilgouz	2024-07-10 08:59:17 (2 years ago)	sie-17 : Block hidden directories=>/.env(/)	Hacking
🇳🇿 Tripwire	2024-07-10 08:20:21 (2 years ago)	Scanning for exploits - /.env	Web App Attack
🇦🇺 advena	2024-07-10 07:00:59 (2 years ago)	2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:46:09Z after violatin ... show more 2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:46:09Z after violating WAF directive: 23548ee2b36547a1be09bb2c0550c529. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-07-10 06:45:57 (2 years ago)	2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:43:11Z after violatin ... show more 2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:43:11Z after violating WAF directive: 23548ee2b36547a1be09bb2c0550c529. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-07-10 06:32:26 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 10 02:32:20.864662 2024] [security2:error] [pid 12217] [client 2a0e:97c0:3e3:9a5::1:63054] [client 2a0e:97c0:3e3:9a5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "polymermembranes.com"] [uri "/.env"] [unique_id "Zo4q9HfhxTqyUKpRx-TGMQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 advena	2024-07-10 06:15:57 (2 years ago)	2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:04:11Z after violatin ... show more 2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:04:11Z after violating WAF directive: dd85fad4506443cd840737a22a7a7a26. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇨🇭 teamsecure	2024-07-10 06:05:56 (2 years ago)	Banned for trying to access env	Web App Attack
🇺🇸 MortimerCat	2024-07-09 01:29:11 (2 years ago)	Attempting to download environment file	Web App Attack
🇨🇭 teamsecure	2024-07-09 00:25:03 (2 years ago)	Banned for trying to access env	Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a00:1450:4013:c20::125

🇺🇿 83.222.7.102

🇶🇦 34.18.47.238

🇫🇷 2a02:c207:2357:8431::1

🇨🇳 218.4.247.98

🇺🇸 172.237.150.127

🇺🇸 172.234.218.210

🇩🇪 130.12.182.197

🇻🇳 116.110.21.251

🇨🇳 101.43.143.14

🇪🇸 82.159.3.57

🇺🇸 24.238.123.134

🇨🇳 14.103.20.9

🇨🇳 220.182.14.60

🇰🇷 220.90.220.204

🇬🇧 157.245.36.108

🇳🇱 151.243.212.58

🇵🇭 103.206.80.78

🇺🇸 91.230.168.188

🇺🇿 81.95.233.78