JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0e:97c0:3e3:c62::1

2a0e:97c0:3e3:c62::1 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 66%: ?

66%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Datalix
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58087
Domain Name	datalix.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0e:97c0:3e3:c62::1

Whois 2a0e:97c0:3e3:c62::1

IP Abuse Reports for 2a0e:97c0:3e3:c62::1:

This IP address has been reported a total of 29 times from 13 distinct sources. 2a0e:97c0:3e3:c62::1 was first reported on June 28th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-30 13:14:33 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 09:14:27.171267 2026] [security2:error] [pid 11179:tid 11179] [client 2a0e:97c0:3e3:c62::1:39434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juniperhills.net"] [uri "/.git/HEAD"] [unique_id "akPBM3NMkTGm8ItYTaITZgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 stypr	2026-06-30 12:24:17 (1 week ago)	Malicious activity detected on HTTP/HTTPS	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 12:17:23 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 08:17:19.643725 2026] [security2:error] [pid 11279:tid 11279] [client 2a0e:97c0:3e3:c62::1:35916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jkperis.com"] [uri "/.git/HEAD"] [unique_id "akOzz7R8IoOeVdhp21yNgQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 11:46:26 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 07:46:21.166256 2026] [security2:error] [pid 27418:tid 27418] [client 2a0e:97c0:3e3:c62::1:48176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnpratt.net"] [uri "/.git/HEAD"] [unique_id "akOsjdHsPn-tKllg1jEeQAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 11:24:04 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 07:23:59.287338 2026] [security2:error] [pid 16907:tid 16907] [client 2a0e:97c0:3e3:c62::1:35120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimrussell2010.russellforcongress.com"] [uri "/.env"] [unique_id "akOnT2j_Scb4zNYn-Z9gHAAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xserverx.ru	2026-06-30 09:22:39 (1 week ago)	Honeypot triggered: IP: 2a0e:97c0:3e3:c62::1 Request to: https://xserverx.ru/.git/HEAD Method: GET H ... show more Honeypot triggered: IP: 2a0e:97c0:3e3:c62::1 Request to: https://xserverx.ru/.git/HEAD Method: GET Host: xserverx.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Referer: Direct Country: DE ASN: Unknown Triggered rules: (\.git/\|\.gitignore\|\.git/config), /\.git, (127\.0\.0\.1\|localhost\|0\.0\.0\.0\|::1\|169\.254\.169\.254) Timestamp: 2026-06-30T09:22:39.075Z show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 08:41:51 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 04:41:47.005066 2026] [security2:error] [pid 7384:tid 7384] [client 2a0e:97c0:3e3:c62::1:53454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yakarinc.com"] [uri "/.env"] [unique_id "akOBS8v0OqtvjqqXrsmIjQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 interbiznw.com	2026-06-30 07:02:20 (1 week ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 ger-stg-sifi1	2026-06-30 06:52:30 (1 week ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 03:27:38 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 23:27:32.679547 2026] [security2:error] [pid 8283:tid 8283] [client 2a0e:97c0:3e3:c62::1:34164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yaseminomer.com.kircali.net"] [uri "/.env"] [unique_id "akM3pFjxoxoTnoj4uKe0bAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-29 21:59:58 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-28. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-29 16:18:02 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 12:17:53.891026 2026] [security2:error] [pid 1535:tid 1545] [client 2a0e:97c0:3e3:c62::1:52382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "callaplusfirst.uoexpanse.com"] [uri "/.git/HEAD"] [unique_id "akKasdyTXHDMdEEpScy5xgAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-29 14:00:10 (1 week ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-06-29 13:03:45 (1 week ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇺🇸 TPI-Abuse	2026-06-29 10:20:46 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:3e3:c62::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 06:20:42.959115 2026] [security2:error] [pid 6540:tid 6546] [client 2a0e:97c0:3e3:c62::1:42670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "n30ew.com"] [uri "/.env.development"] [unique_id "akJG-mmZhl8mXqgkQpg3KAAAAMQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.69

🇺🇸 195.184.76.54

🇳🇱 45.148.10.141

🇹🇼 198.235.24.94

🇭🇰 194.187.178.154

🇩🇪 178.27.90.142

🇺🇸 167.99.148.102

🇺🇸 148.153.53.232

🇺🇸 128.203.202.233

🇳🇱 91.92.40.176

🇺🇸 72.81.139.163

🇲🇳 66.181.171.136

🇩🇴 45.172.152.74

🇰🇷 14.47.200.242

🇺🇸 198.98.62.211

🇩🇪 193.124.20.254

🇵🇱 176.53.159.196

🇺🇸 173.255.223.32

🇺🇸 172.104.19.160

🇮🇩 163.7.1.156