JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0f:ca80:b00b:b63c::5

Recent Activity IPv6 SLAAC Note

Abuse Confidence Score

100% Critical

357 reports

145 reporters · latest 40 minutes ago

ISP: TechTies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS197170
Domain Name: tech-ties.net
Country: 🇳🇱 Netherlands
City: Lelystad, Flevoland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

357 from 145 distinct reporters

First reported

September 12th 2026

Most recent report

40 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 95 🇳🇱 Netherlands 82 🇺🇸 United States of America 60

Most common categories Web App Attack 267 Bad Web Bot 119 Brute-Force 111 Hacking 58 Port Scan 21

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-10 01:02:26 UTC · (40 minutes ago)	Fail2ban jail=webexploits banned IP=2a0f:ca80:b00b:b63c::5 after 1 hits. Reason=web probing.	Brute-Force Web App Attack
🇻🇮 Axel	2026-11-09 18:54:32 UTC · (6 hours ago)	WAF/ModSecurity blocked 103 malicious request(s) (HTTP 403) from this IP. Activity: request_uri: .ENV Files x55; request_uri: read wordpress configuration file x12; request_uri: .git config x12; blocked sensitive path x7; request_uri: AWS Credentials ... show more WAF/ModSecurity blocked 103 malicious request(s) (HTTP 403) from this IP. Activity: request_uri: .ENV Files x55; request_uri: read wordpress configuration file x12; request_uri: .git config x12; blocked sensitive path x7; request_uri: AWS Credentials x6; Wordpress Plugin - Gravity SMTP Plugin Sensitive Information Exposure x6; Block *.env x5. Latest: 2026-11-09T18:54:32Z. show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-11-09 15:59:56 UTC · (9 hours ago)	5.906 requests from abuseipdb.com blacklisted IP (1w6d23h)	Brute-Force Bad Web Bot
🇫🇷 dynamix	2026-11-09 13:14:49 UTC · (12 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 Agaman	2026-11-09 02:01:06 UTC · (23 hours ago)	Exploit and secret-file scanning on HTTP(S) port 80/443. 25 requests across 5 of our servers, 2026-11-08 23:59 to 2026-11-09 02:01 UTC. Samples: GET /.git/config 444; GET /phpinfo 444; GET /_profiler/phpinfo 444. UA: Mozilla/5.0 (Macintosh; Intel Mac ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 25 requests across 5 of our servers, 2026-11-08 23:59 to 2026-11-09 02:01 UTC. Samples: GET /.git/config 444; GET /phpinfo 444; GET /_profiler/phpinfo 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14.7; rv:138.0) Gecko/20100101 Firefox/13. Detected by fail2ban. show less	Web App Attack
🇺🇸 Agaman	2026-11-08 23:36:23 UTC · (1 day ago)	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-08 23:36 UTC. Samples: GET /.git/config 444; GET /phpinfo 444; GET /_profiler/phpinfo 444. UA: Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0. Detect ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-08 23:36 UTC. Samples: GET /.git/config 444; GET /phpinfo 444; GET /_profiler/phpinfo 444. UA: Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0. Detected by fail2ban. show less	Web App Attack
🇦🇺 Klaverstyn	2026-11-08 15:11:47 UTC · (1 day ago)	Excessive HTTP request rate	Web App Attack
🇬🇧 KTSTechnology	2026-11-07 22:10:32 UTC · (2 days ago)	Web vulnerability scanning detected by our ISP firewall	Web App Attack
Anonymous	2026-11-07 17:06:02 UTC · (2 days ago)	2a0f:ca80:b00b:b63c::5 - - [07/Nov/2026:17:06:00 +0000] "GET /robots.txt HTTP/1.1" 302 445 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 2a0f:ca80:b00b:b63c::5 - - [07/Nov/ ... show more 2a0f:ca80:b00b:b63c::5 - - [07/Nov/2026:17:06:00 +0000] "GET /robots.txt HTTP/1.1" 302 445 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 2a0f:ca80:b00b:b63c::5 - - [07/Nov/2026:17:06:00 +0000] "GET /robots.txt HTTP/1.1" 404 17223 "http://pensagarden.com/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 2a0f:ca80:b00b:b63c::5 - - [07/Nov/2026:17:06:01 +0000] "GET /sitemap.xml HTTP/1.1" 302 447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 2a0f:ca80:b00b:b63c::5 - - [07/Nov/2026:17:06:02 +0000] "GET /sitemap.xml HTTP/1.1" 404 21237 "http://pensagarden.com/sitemap.xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 2a0f:ca80:b00b:b63c::5 - - [07/Nov/2026:17:06:02 +0000] "GET /sitemap_index.xml H ... show less	Bad Web Bot
🇺🇸 Agaman	2026-11-06 20:45:51 UTC · (3 days ago)	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-06 20:45 UTC. Samples: GET /.git/config 444; GET /phpinfo 444; GET /_profiler/phpinfo 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-06 20:45 UTC. Samples: GET /.git/config 444; GET /phpinfo 444; GET /_profiler/phpinfo 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban. show less	Web App Attack
🇳🇱 Alt255	2026-11-06 07:05:23 UTC · (3 days ago)	[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a0f:ca80:b00b:b63c::5 - - [06/Nov/2026:08:05:03 +0100] "GET /.git/config HTTP/1.1" 404 2063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ... show more [ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a0f:ca80:b00b:b63c::5 - - [06/Nov/2026:08:05:03 +0100] "GET /.git/config HTTP/1.1" 404 2063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0" ... show less	Bad Web Bot Web App Attack
🇫🇮 sibahota	2026-11-05 21:05:17 UTC · (4 days ago)	2a0f:ca80:b00b:b63c::5 - - [05/Nov/2026:21:05:15 +0000] admin.nidandiagnostic.com "GET /.git/config HTTP/1.1" 403 37 0.000 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" - - - ... show more 2a0f:ca80:b00b:b63c::5 - - [05/Nov/2026:21:05:15 +0000] admin.nidandiagnostic.com "GET /.git/config HTTP/1.1" 403 37 0.000 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" - - - "http://admin.nidandiagnostic.com" ... show less	Web App Attack Brute-Force
🇩🇪 dbmwebdesign	2026-11-05 20:40:11 UTC · (4 days ago)	Repeated probing for non-existent PHP exploit paths blocked by Fail2Ban	Web App Attack
🇨🇦 SoteriaCovenant	2026-11-05 17:29:25 UTC · (4 days ago)	Automated probe: /server-info.php on Soteria Global infrastructure. No vulnerable software present.	Hacking
🇩🇪 FD-IX	2026-11-05 17:03:21 UTC · (4 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack

Showing 1 to 15 of 357 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 219.129.96.2

🇨🇳 101.66.161.105

🇫🇷 85.217.140.5

🇷🇺 31.173.31.19

🇺🇸 2604:a940:300:5b6:0:13::

🇺🇸 222.167.102.52

🇧🇪 207.175.218.17

🇯🇵 203.25.124.177

🇰🇿 188.244.115.45

🇧🇷 177.124.14.82

🇺🇸 173.188.87.172

🇫🇷 169.40.142.93

🇺🇸 45.156.129.172

🇵🇱 45.138.12.51

🇩🇪 45.10.232.137

🇧🇷 38.76.233.173

🇺🇸 2620:24:c040:4::210

🇧🇾 178.172.147.146

🇫🇷 84.46.252.220

🇻🇪 38.43.254.35