JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a13:7c00:5:23:f816:3eff:febb:2748

2a13:7c00:5:23:f816:3eff:febb:2748 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 83%: ?

83%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	as56971 network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56971
Domain Name	as56971.net
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a13:7c00:5:23:f816:3eff:febb:2748

Whois 2a13:7c00:5:23:f816:3eff:febb:2748

IP Abuse Reports for 2a13:7c00:5:23:f816:3eff:febb:2748:

This IP address has been reported a total of 23 times from 14 distinct sources. 2a13:7c00:5:23:f816:3eff:febb:2748 was first reported on October 14th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-10-17 03:11:17 (12 hours ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a13:7c00:5:23:f816:3eff:febb:2748 104.23.229.94 - - [15/ ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a13:7c00:5:23:f816:3eff:febb:2748 104.23.229.94 - - [15/Oct/2026:12:14:34 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 show less	Bad Web Bot
🇳🇱 Alt255	2026-10-16 17:52:12 (22 hours ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a13:7c00:5:23:f816:3eff:febb:2748 - - [16/Oct/2026:19:52:04 +0200] "GET /.git/HEAD HTTP/1.1" 301 6387 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" ... show less	Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-10-16 15:50:44 (1 day ago)	ipoac.nl:80 2a13:7c00:5:23:f816:3eff:febb:2748 - - [16/Oct/2026:17:50:43 +0200] ipoac.nl "GET /.git/ ... show more ipoac.nl:80 2a13:7c00:5:23:f816:3eff:febb:2748 - - [16/Oct/2026:17:50:43 +0200] ipoac.nl "GET /.git/HEAD HTTP/1.1" 302 882 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-16 14:59:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a13:7c00:5:23:f816:3eff:febb:2748 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a13:7c00:5:23:f816:3eff:febb:2748 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:59:48.771267 2026] [security2:error] [pid 27082:tid 27082] [client 2a13:7c00:5:23:f816:3eff:febb:2748:36922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lertap5.com"] [uri "/.git/logs/HEAD"] [unique_id "atI75BSSZ2cnpAxnS-ioPAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 13:55:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a13:7c00:5:23:f816:3eff:febb:2748 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a13:7c00:5:23:f816:3eff:febb:2748 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:55:38.713726 2026] [security2:error] [pid 18738:tid 18738] [client 2a13:7c00:5:23:f816:3eff:febb:2748:60514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modmove.com"] [uri "/.env"] [unique_id "atIs2ufyzkRXD7mXXUqh5QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Anytech	2026-10-16 03:58:38 (1 day ago)	Blocked by ConnMonitor	Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 01:53:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a13:7c00:5:23:f816:3eff:febb:2748 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a13:7c00:5:23:f816:3eff:febb:2748 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 21:52:59.193415 2026] [security2:error] [pid 7321:tid 7321] [client 2a13:7c00:5:23:f816:3eff:febb:2748:37940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tijuana-bibles.com"] [uri "/.git/config"] [unique_id "atGDe4e2EAp3-HkrUIc44wAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-10-15 15:14:45 (2 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a13:7c00:5:23:f816:3eff:febb:2748 104.23.229.94 - - [15/ ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a13:7c00:5:23:f816:3eff:febb:2748 104.23.229.94 - - [15/Oct/2026:12:14:34 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 show less	Bad Web Bot
🇳🇱 BlueWire Hosting	2026-10-15 14:27:22 (2 days ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇧🇷 ICS Labs	2026-10-15 13:44:51 (2 days ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-15 UTC.	Brute-Force
Anonymous	2026-10-15 13:35:42 (2 days ago)	Web probing (2 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CR ... show more Web probing (2 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON. show less	Web App Attack
🇩🇪 pltcldvlpr	2026-10-15 12:32:25 (2 days ago)	CMS/framework probe: 2a13:7c00:5:23:f816:3eff:febb:2748 - - [15/Oct/2026:14:32:25 +0200] "GET /.git/ ... show more CMS/framework probe: 2a13:7c00:5:23:f816:3eff:febb:2748 - - [15/Oct/2026:14:32:25 +0200] "GET /.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0: Win64: x64: rv:140.0) Gecko/20100101 Firefox/140.0" asn=56971 org="CGI GLOBAL LIMITED" country=FR ... show less	Web App Attack
Anonymous	2026-10-15 11:24:16 (2 days ago)	[15/Oct/2026:14:22:31 +0300] 179206335187.561634 2a13:7c00:5:23:f816:3eff:febb:2748 42648 2a01:4f8:2 ... show more [15/Oct/2026:14:22:31 +0300] 179206335187.561634 2a13:7c00:5:23:f816:3eff:febb:2748 42648 2a01:4f8:202:41d3::2 80 [15/Oct/2026:14:24:15 +0300] 179206345590.956015 2a13:7c00:5:23:f816:3eff:febb:2748 34602 2a01:4f8:202:41d3::2 443 show less	Web App Attack
🇩🇪 ghostwarriors	2026-10-15 02:50:10 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-15 01:21:04 (2 days ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a13:7c00:5:23:f816:3eff:febb:2748 - - [15/Oct/2026:03:20:50 +0200] "GET /.git/logs/HEAD HTTP/1.1" 301 462 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.249

🇸🇬 212.73.148.35

🇹🇼 210.61.216.167

🇮🇳 203.193.137.250

🇦🇷 186.131.51.136

🇩🇪 136.92.32.59

🇧🇩 103.126.219.239

🇮🇳 103.88.76.27

🇨🇦 85.217.149.40

🇩🇪 85.155.15.14

🇳🇱 77.91.71.10

🇺🇸 71.233.135.222

🇺🇸 47.194.25.2

🇺🇸 35.235.121.35

🇺🇸 34.171.2.71

🇰🇷 34.64.56.172

🇳🇱 34.13.203.48

🇺🇸 2a10:7b01:5747:a307:c420:4bb1:a7bc:a5de

🇹🇼 211.20.70.64

🇵🇭 202.69.169.162