JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0e:97c0:711:20f::1

2a0e:97c0:711:20f::1 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Datalix
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58087
Domain Name	datalix.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0e:97c0:711:20f::1

Whois 2a0e:97c0:711:20f::1

IP Abuse Reports for 2a0e:97c0:711:20f::1:

This IP address has been reported a total of 25 times from 14 distinct sources. 2a0e:97c0:711:20f::1 was first reported on May 28th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 on-com	2026-05-30 02:34:51 (3 months ago)	URL scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 02:07:08 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 22:07:01.320935 2026] [security2:error] [pid 26214:tid 26214] [client 2a0e:97c0:711:20f::1:45064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "layoverinamsterdam.thinkingepic.com"] [uri "/backend/.env"] [unique_id "ahpGRS-hBdFGGbOZlxU5LgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dklueh79	2026-05-29 23:53:05 (3 months ago)	Probe for vulnerabilities. Path attempted: /.git/HEAD	Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 23:30:59 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 19:30:51.869298 2026] [security2:error] [pid 21254:tid 21254] [client 2a0e:97c0:711:20f::1:56222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnerakhareedu.com.alanmariotti.com"] [uri "/api/.env"] [unique_id "ahohq95IZ7Rwo-utw4N41wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-05-29 22:30:59 (3 months ago)		Brute-Force Web App Attack
🇳🇱 Site.eu	2026-05-29 19:33:43 (3 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-05-29 19:29:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 15:29:53.530721 2026] [security2:error] [pid 1681:tid 1681] [client 2a0e:97c0:711:20f::1:48862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "learnlabs.academy.worldchat.global"] [uri "/.git/HEAD"] [unique_id "ahnpMUe-2QXQ_se-qEQHYgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-05-29 18:01:00 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 58087 (Florian Kolb) Pro ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 58087 (Florian Kolb) Protocol: HTTP/1.1 (GET method) Endpoint: /js/config.js Timestamp: 2026-05-29T16:07:37Z Ray ID: a036c0c91bf9d247 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-29 17:50:02 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 13:49:55.176361 2026] [security2:error] [pid 9059:tid 9059] [client 2a0e:97c0:711:20f::1:45250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ileronde.com"] [uri "/.git/config"] [unique_id "ahnRw6piMEk2DLEt1OcpMgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-05-29 17:33:11 (3 months ago)	222 requests with url.path .env 170 requests with url.path .git/*	Brute-Force Bad Web Bot
🇩🇪 macrob	2026-05-29 13:57:26 (3 months ago)	2026/05/29 13:57:23 [error] 4160934#4160934: 265743580 access forbidden by rule, client: 2a0e:97c0: ... show more 2026/05/29 13:57:23 [error] 4160934#4160934: 265743580 access forbidden by rule, client: 2a0e:97c0:711:20f::1, server: infinsa.com, request: "GET /.git/HEAD HTTP/2.0", host: "infinsa.com" 2026/05/29 13:57:24 [error] 4160931#4160931: 265743540 access forbidden by rule, client: 2a0e:97c0:711:20f::1, server: infinsa.com, request: "GET /.env HTTP/2.0", host: "infinsa.com" 2026/05/29 13:57:24 [error] 4160934#4160934: 265743610 access forbidden by rule, client: 2a0e:97c0:711:20f::1, server: infinsa.com, request: "GET /backend/.env HTTP/2.0", host: "infinsa.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 13:36:17 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 09:36:12.049608 2026] [security2:error] [pid 7531:tid 7531] [client 2a0e:97c0:711:20f::1:42310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "imbrasacademic.com"] [uri "/.env"] [unique_id "ahmWTOMx907-dto8qsvlngAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-05-29 12:35:31 (3 months ago)	2a0e:97c0:711:20f::1 - - [29/May/2026:15:35:30 +0300] "GET /backend/.env HTTP/1.1" 404 3297 "-" "Moz ... show more 2a0e:97c0:711:20f::1 - - [29/May/2026:15:35:30 +0300] "GET /backend/.env HTTP/1.1" 404 3297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a0e:97c0:711:20f::1 - - [29/May/2026:15:35:30 +0300] "GET /.env HTTP/1.1" 404 732 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 11:24:55 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0e:97c0:711:20f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 07:24:50.620900 2026] [security2:error] [pid 2296:tid 2296] [client 2a0e:97c0:711:20f::1:41078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inlinesoftware.net"] [uri "/.git/HEAD"] [unique_id "ahl3gjs1gl4IyAVMtvXYCQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-05-29 10:43:03 (3 months ago)	2a0e:97c0:711:20f::1 - - [29/May/2026:04:43:03 -0600] "GET /.git/config HTTP/1.1" 300 11255 "https:/ ... show more 2a0e:97c0:711:20f::1 - - [29/May/2026:04:43:03 -0600] "GET /.git/config HTTP/1.1" 300 11255 "https://www.rmbs.org/.git/config" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 165.22.254.227

🇮🇩 2a09:bac5:3a0a:15f::23:49b

🇧🇷 2804:14c:bb80:4645:464e:89ea:9baa:b685

🇳🇬 154.118.5.175

🇺🇸 108.162.245.30

🇷🇺 62.16.41.154

🇺🇸 47.39.209.51

🇺🇸 23.94.206.233

🇬🇧 2a01:4020:1:1:103::619

🇬🇧 2a01:4020:1:1:103::60a

🇬🇧 2a01:4020:1:1:103::53e

🇺🇸 204.8.96.147

🇸🇬 188.239.10.112

🇵🇱 134.112.56.47

🇮🇳 122.187.234.56

🇮🇳 103.89.136.111

🇳🇱 94.154.43.234

🇹🇷 93.157.189.119

🇷🇺 88.201.241.104

🇺🇸 48.216.218.65