Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
2a0f:ca81:b00b::b5c9:1a87 has been reported 82
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
This IP address has been reported a total of
82
times from
40 distinct
sources.
2a0f:ca81:b00b::b5c9:1a87 was first reported on
, and the most recent report was
.
WAF block action triggered by rule set "Version Control - Information Disclosure" (4 occurrences obs ...
show moreWAF block action triggered by rule set "Version Control - Information Disclosure" (4 occurrences observed).
show less
Web vuln/secret scanner vs mobile-only REST API (no CMS/PHP); blocked+banned. 1 req 2026-08-04 20:28 ...
show moreWeb vuln/secret scanner vs mobile-only REST API (no CMS/PHP); blocked+banned. 1 req 2026-08-04 20:28 - 2026-08-04 20:28 UTC. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML; like Gecko) Chrome/14 Paths: /.env
show less
CrowdSec: crowdsecurity/http-sensitive-files | req: ["/.git/HEAD","/.env","/.env.local","/api/.env", ...
show moreCrowdSec: crowdsecurity/http-sensitive-files | req: ["/.git/HEAD","/.env","/.env.local","/api/.env","/.git/config"] | UA: ["Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (
show less
Hacking
Anonymous
2a0f:ca81:b00b::b5c9:1a87 - - [07/Jul/2026:13:49:08 +0000] "GET /.env HTTP/1.1" 404 381 "-" "Mozilla ...
show more2a0f:ca81:b00b::b5c9:1a87 - - [07/Jul/2026:13:49:08 +0000] "GET /.env HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"
...
show less
{"ClientAddr":"172.71.148.10:11521","ClientHost":"2a0f:ca81:b00b::b5c9:1a87","ClientPort":"11521","C ...
show more{"ClientAddr":"172.71.148.10:11521","ClientHost":"2a0f:ca81:b00b::b5c9:1a87","ClientPort":"11521","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":564004,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":564004,"RequestAddr":"phpmyadmin.timvdberg.dev","RequestContentSize":0,"RequestCount":196042,"RequestHost":"phpmyadmin.timvdberg.dev","RequestMethod":"GET","RequestPath":"/","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"https-0-g781j1l22qyid4grmjq8a0lf-phpmyadmin@docker","StartLocal":"2026-07-07T11:38:08.151068479Z","StartUTC":"2026-07-07T11:38:08.151068479Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"2a0f:ca81:b00b::b5c9:1a87","request_X-Forwarded-For":"2a0f:ca81:b00b::b5c9:1a87","request_X-Real-Ip":"172.71.148.10","time":"2026-07-07T11:38:08Z"}
{"ClientAddr":"172.71.148.18:13300","ClientHo
...
show less
[TueJul0713:19:19.2441182026][security2:error][pid1284534:tid1284659][client2a0f:ca81:b00b::b5c9:1a8 ...
show more[TueJul0713:19:19.2441182026][security2:error][pid1284534:tid1284659][client2a0f:ca81:b00b::b5c9:1a87:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"pluriball.ch\"][uri\"/.git/HEAD\"][unique_id\"akzgtz7bg00GPVTH_uw4oQAAAQ4\"]
show less