JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a14:c380:1300:c6::a

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

54% Elevated

14 reports

9 reporters · latest 1 day ago

ISP	10GIG.host
Usage Type	Unknown
ASN	AS401626
Domain Name	10gig.host
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a14:c380:1300:c6::a

Export CSV

This IP address has been reported a total of 14 times from 9 distinct sources. 2a14:c380:1300:c6::a was first reported on September 27th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 9 reports; United States of America with 2 reports; Denmark with 1 report. Over the same time period, 2a14:c380:1300:c6::a has changed country of origin 2 times. The most common categories in these recent reports were: Web App Attack 14 times; Brute-Force 5 times; Bad Web Bot 4 times; Hacking 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-02 14:11:52 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a14:c380:1300:c6::a (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a14:c380:1300:c6::a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 10:11:47.587225 2026] [security2:error] [pid 9313:tid 9313] [client 2a14:c380:1300:c6::a:62449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "logosformacion.net"] [uri "/.env"] [unique_id "ar-7owrxvyAIaluMDQQacgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-02 13:38:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a14:c380:1300:c6::a (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a14:c380:1300:c6::a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 09:38:02.463097 2026] [security2:error] [pid 10222:tid 10222] [client 2a14:c380:1300:c6::a:65468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaire-construction-4-0.com"] [uri "/.env"] [unique_id "ar-zui_TiIX5yp5LZ44UHAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-10-02 12:24:45 (1 day ago)	Try to access /.env	Web App Attack
🇩🇪 todix	2026-10-02 06:14:25 (1 day ago)	Web App Attack Exploid from 2a14:c380:1300:c6::a	Web App Attack
🇩🇰 HostingGroup	2026-10-01 13:06:53 (2 days ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-10-01. show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-10-01 10:36:38 (2 days ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇫🇷 Bensay	2026-10-01 06:23:48 (2 days ago)	HTTP web-app probe; method=GET; path=/.env; status=301; user-agent=Mozilla/5.0 (X11; Linux x86_64) A ... show more HTTP web-app probe; method=GET; path=/.env; status=301; user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Web App Attack
🇩🇪 filstal.org	2026-09-30 00:22:22 (4 days ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇩🇪 todix	2026-09-29 09:27:34 (4 days ago)	Web App Attack Exploid from 2a14:c380:1300:c6::a	Web App Attack
🇩🇪 filstal.org	2026-09-28 21:03:10 (5 days ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-09-28 13:27:22 (5 days ago)	Try to access /.env	Web App Attack
🇳🇱 Alt255	2026-09-28 06:45:36 (5 days ago)	[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a14:c380:1300:c6::a - - [28/Sep/2026:08:45:18 +0200] "GET /.env HTTP/1.1" 301 493 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-27 00:58:55 (1 week ago)	Web probing (2 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CR ... show more Web probing (2 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON. show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-09-27 00:15:16 (1 week ago)	High-confidence malicious configuration/VCS probe	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.82

🇺🇸 159.89.225.170

🇺🇸 149.72.171.62

🇩🇪 142.93.107.211

🇺🇸 104.164.173.160

🇺🇸 65.49.1.59

🇯🇲 216.10.217.51

🇦🇴 196.32.192.36

🇳🇱 195.178.110.26

🇧🇷 177.40.0.4

🇨🇳 163.142.84.211

🇨🇳 125.77.73.145

🇺🇸 91.230.168.181

🇫🇷 85.217.140.22

🇫🇮 80.66.83.83

🇺🇸 74.82.47.62

🇵🇱 37.28.156.228

🇧🇪 35.195.131.201

🇳🇱 2400:cb00:522:1000:ffdf:867c:a8b7:a4a0

🇨🇳 223.105.71.106