JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0e:97c0:3e3:9a5::1

2a0e:97c0:3e3:9a5::1 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 15%: ?

15%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Datalix
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58087
Domain Name	datalix.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0e:97c0:3e3:9a5::1

Whois 2a0e:97c0:3e3:9a5::1

IP Abuse Reports for 2a0e:97c0:3e3:9a5::1:

This IP address has been reported a total of 52 times from 19 distinct sources. 2a0e:97c0:3e3:9a5::1 was first reported on June 27th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-16 22:49:00 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 18:48:47.698351 2026] [security2:error] [pid 21626:tid 21626] [client 2a0e:97c0:3e3:9a5::1:45318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "erkan.net"] [uri "/.env.backup"] [unique_id "ajHSz6hcBIWpW2rAjHZW-wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-10 21:59:03 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2024-07-10 20:58:29 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 10 16:58:21.331550 2024] [security2:error] [pid 20522] [client 2a0e:97c0:3e3:9a5::1:58467] [client 2a0e:97c0:3e3:9a5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.williamcline.com"] [uri "/.env"] [unique_id "Zo717VB4sAKla6e8XcnCxQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2024-07-10 12:44:50 (1 year ago)	Multiple critical ModSecurity events ...	Web Spam Bad Web Bot
🇫🇷 conseilgouz	2024-07-10 08:59:17 (1 year ago)	sie-17 : Block hidden directories=>/.env(/)	Hacking
🇳🇿 Tripwire	2024-07-10 08:20:21 (1 year ago)	Scanning for exploits - /.env	Web App Attack
🇦🇺 advena	2024-07-10 07:00:59 (1 year ago)	2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:46:09Z after violatin ... show more 2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:46:09Z after violating WAF directive: 23548ee2b36547a1be09bb2c0550c529. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-07-10 06:45:57 (1 year ago)	2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:43:11Z after violatin ... show more 2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:43:11Z after violating WAF directive: 23548ee2b36547a1be09bb2c0550c529. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-07-10 06:32:26 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:9a5::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 10 02:32:20.864662 2024] [security2:error] [pid 12217] [client 2a0e:97c0:3e3:9a5::1:63054] [client 2a0e:97c0:3e3:9a5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "polymermembranes.com"] [uri "/.env"] [unique_id "Zo4q9HfhxTqyUKpRx-TGMQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 advena	2024-07-10 06:15:57 (1 year ago)	2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:04:11Z after violatin ... show more 2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-10T06:04:11Z after violating WAF directive: dd85fad4506443cd840737a22a7a7a26. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇨🇭 teamsecure	2024-07-10 06:05:56 (1 year ago)	Banned for trying to access env	Web App Attack
🇺🇸 MortimerCat	2024-07-09 01:29:11 (1 year ago)	Attempting to download environment file	Web App Attack
🇨🇭 teamsecure	2024-07-09 00:25:03 (1 year ago)	Banned for trying to access env	Web App Attack
🇩🇪 ioanm.ro	2024-07-08 20:43:16 (1 year ago)	Threat Blocked by Cloudflare WAF from (ASN:213250) (Network:ITP-SOLUTIONS) (Host:www.ioanm.ro) (Meth ... show more Threat Blocked by Cloudflare WAF from (ASN:213250) (Network:ITP-SOLUTIONS) (Host:www.ioanm.ro) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2024-07-08T20:43:16Z) show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇦🇺 advena	2024-07-08 16:00:59 (1 year ago)	2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-08T15:49:40Z after violatin ... show more 2a0e:97c0:3e3:9a5::1 (AS213250 ITP-SOLUTIONS) was intercepted at 2024-07-08T15:49:40Z after violating WAF directive: 23548ee2b36547a1be09bb2c0550c529. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:2cc:1::267

🇫🇮 147.185.133.109

🇨🇳 222.222.73.70

🇩🇪 209.38.247.93

🇷🇺 194.176.114.36

🇫🇷 193.187.129.119

🇦🇪 87.201.237.40

🇺🇸 72.240.125.133

🇺🇸 66.132.224.227

🇺🇸 66.132.195.35

🇳🇱 45.148.10.121

🇺🇸 37.19.220.47

🇸🇬 206.189.149.87

🇧🇷 205.210.31.180

🇧🇪 198.235.24.249

🇧🇷 186.237.127.212

🇳🇱 174.138.8.238

🇨🇳 121.229.156.71

🇨🇳 116.117.80.126

🇨🇳 112.86.225.242