JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a11:3b80::9253:15a9:e034:f4a2

2a11:3b80::9253:15a9:e034:f4a2

Recent Activity IPv6 SLAAC Note

7 reports found in our database

25% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

SmartApe OU

Usage Type

Data Center/Web Hosting/Transit

ASN

AS62212

Domain Name

smartape.net

Country

🇨🇿 Czechia

City

Veseli nad Luznici, South Bohemian Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a11:3b80::9253:15a9:e034:f4a2:

This IP address has been reported a total of 7 times from 4 distinct sources. 2a11:3b80::9253:15a9:e034:f4a2 was first reported on August 12th 2026, and the most recent report was 6 days ago. In the last 60 days, the top reporter locations were: United States of America with 4 reports; Germany with 2 reports; Poland with 1 report. The most common categories in these recent reports were: Web App Attack 7 times; Brute-Force 5 times; Bad Web Bot 4 times; Hacking 2 times; Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-08-24 08:48:38 (6 days ago)	Probing for exploits 2a11:3b80::9253:15a9:e034:f4a2 - - [24/Aug/2026:10:48:28 +0200] "GET /hellgatea ... show more Probing for exploits 2a11:3b80::9253:15a9:e034:f4a2 - - [24/Aug/2026:10:48:28 +0200] "GET /hellgateaus.tar.gz HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 2a11:3b80::9253:15a9:e034:f4a2 - - [24/Aug/2026:10:48:28 +0200] "GET /hellgateaus.tar.gz HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 11:01:22 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 2a11:3b80::9253:15a9:e034:f4a2 (Unknown): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 2a11:3b80::9253:15a9:e034:f4a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 07:01:18.197231 2026] [security2:error] [pid 28727:tid 28747] [client 2a11:3b80::9253:15a9:e034:f4a2:50104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cargowebstore.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cargowebstore.com"] [uri "/log/access.log"] [unique_id "aoWM_kE_L31T0-kXUkbPoAAAARA"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-18 13:54:52 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.store \| URI: /logs/access.log \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 21:31:18 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 2a11:3b80::9253:15a9:e034:f4a2 (Unknown): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 2a11:3b80::9253:15a9:e034:f4a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 17:31:11.836663 2026] [security2:error] [pid 14283:tid 14283] [client 2a11:3b80::9253:15a9:e034:f4a2:57809] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|3dstores.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3dstores.com"] [uri "/logs/combined.log"] [unique_id "aoN9nzxwUjPQtfWfrGh-7wAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 17:02:34 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 2a11:3b80::9253:15a9:e034:f4a2 (Unknown): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 2a11:3b80::9253:15a9:e034:f4a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 13:02:28.341028 2026] [security2:error] [pid 25579:tid 25579] [client 2a11:3b80::9253:15a9:e034:f4a2:54547] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|navigateworklife.org\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "navigateworklife.org"] [uri "/logs/combined.log"] [unique_id "aoM-pCHllc70sdJ7pVHmZAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-12 21:06:06 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 2a11:3b80::9253:15a9:e034:f4a2 (Unknown): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 2a11:3b80::9253:15a9:e034:f4a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 17:05:59.789734 2026] [security2:error] [pid 1737440:tid 1737440] [client 2a11:3b80::9253:15a9:e034:f4a2:54886] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|joycecarta.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "joycecarta.com"] [uri "/log/access.log"] [unique_id "anzgN-ST23d0FWOhA0V3jwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-12 19:47:03 (2 weeks ago)	[WedAug1221:47:00.3347972026][security2:error][pid3520490:tid3520514][client2a11:3b80::9253:15a9:e03 ... show more [WedAug1221:47:00.3347972026][security2:error][pid3520490:tid3520514][client2a11:3b80::9253:15a9:e034:f4a2:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"ilcartiglio.ch\"][uri\"/access.log\"][unique_id\"anzNtOuZuk94IZIeR8t9YwAAABU\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 202.88.222.110

🇲🇾 195.86.192.66

🇵🇱 91.227.63.231

🇩🇪 65.111.26.84

🇲🇦 41.250.197.154

🇰🇷 211.56.131.186

🇦🇷 181.23.43.42

🇺🇸 172.104.11.51

🇫🇷 141.101.68.228

🇵🇰 103.82.120.201

🇺🇸 66.132.186.166

🇸🇰 46.229.233.132

🇺🇸 198.12.89.243

🇿🇦 197.83.245.245

🇨🇳 117.72.76.203

🇹🇼 59.126.127.117

🇰🇷 59.16.212.232

🇺🇸 34.34.229.5

🇺🇸 20.150.197.117

🇷🇺 95.188.91.101