JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

5 reports

2 reporters · latest 1 year ago

ISP	GVA Rwanda Ltd
Usage Type	Fixed Line ISP
ASN	AS36924
Domain Name	gva.africa
Country	🇷🇼 Rwanda
City	Kigali, Kigali

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 has been reported 5 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86

This IP address has been reported a total of 5 times from 2 distinct sources. 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 was first reported on August 5th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-08-05 19:13:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 15:13:08.115173 2025] [security2:error] [pid 28332:tid 28332] [client 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86:56091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wmionline.org"] [uri "/.env.stage"] [unique_id "aJJXxPwJtwJxqY5rb5IphAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 skylinkhosting.com	2025-08-05 18:00:49 (1 year ago)	Triggered Cloudflare WAF (firewallManaged) from RW. Action taken: CHALLENGE ASN: 36924 (GVA-Canalbox ... show more Triggered Cloudflare WAF (firewallManaged) from RW. Action taken: CHALLENGE ASN: 36924 (GVA-Canalbox) Protocol: HTTP/1.1 (GET method) Zone: billing.skylinkhosting.com Endpoint: /.env.bak Timestamp: 2025-08-05T18:00:49Z UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-08-05 17:49:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 13:48:57.146746 2025] [security2:error] [pid 22397:tid 22397] [client 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86:61178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radtraininginc.com"] [uri "/.env.old"] [unique_id "aJJECTi9xsuR86yRDBiFOgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-05 17:20:35 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 13:20:27.916677 2025] [security2:error] [pid 9041:tid 9041] [client 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86:50055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portalvasco.com"] [uri "/.env.local"] [unique_id "aJI9W8BsfH2mBHjYg8NhtQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-05 17:05:11 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 13:04:55.053415 2025] [security2:error] [pid 15625:tid 15625] [client 2c0f:eb68:6a8:e700:6cc8:bc69:6457:3b86:57188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "needtoorder.com"] [uri "/.env.live"] [unique_id "aJI5t16AfZZM5hxpRgTKWAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 109.160.32.171

🇬🇧 2a02:c204:2328:8979::1

🇮🇳 183.83.196.151

🇮🇳 157.49.115.104

🇪🇸 135.136.40.96

🇱🇹 62.60.130.201

🇨🇳 39.91.89.158

🇯🇵 34.104.227.100

🇮🇳 20.198.74.230

🇹🇼 218.173.201.234

🇳🇱 195.178.110.204

🇫🇮 178.20.210.152

🇧🇷 177.73.30.231

🇮🇷 176.65.235.49

🇺🇸 165.154.134.156

🇺🇸 162.216.149.6

🇮🇩 103.19.58.154

🇬🇧 94.72.102.194

🇫🇷 91.196.152.121

🇱🇺 64.89.160.73