JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:4780:11:1843:0:2c94:3bc3:1

2a02:4780:11:1843:0:2c94:3bc3:1 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 97%: ?

97%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	HOSTINGER IN
Usage Type	Content Delivery Network
ASN	AS47583
Domain Name	hostinger.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:4780:11:1843:0:2c94:3bc3:1

Whois 2a02:4780:11:1843:0:2c94:3bc3:1

IP Abuse Reports for 2a02:4780:11:1843:0:2c94:3bc3:1:

This IP address has been reported a total of 100 times from 26 distinct sources. 2a02:4780:11:1843:0:2c94:3bc3:1 was first reported on May 31st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 2000cn.com.au	2026-08-26 09:32:28 (5 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇫🇷 dynamix	2026-08-26 00:16:48 (14 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 22:59:10 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 18:59:01.890014 2026] [security2:error] [pid 11029:tid 11029] [client 2a02:4780:11:1843:0:2c94:3bc3:1:56246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "costumeshalloweenparty.com"] [uri "/backend/.env"] [unique_id "ao4eNbebM05kdF1XhfzsvwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-25 22:02:22 (16 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-08-25 20:24:26 (18 hours ago)	2a02:4780:11:1843:0:2c94:3bc3:1 - - [26/Aug/2026:04:24:26 +0800] "GET /api/.env HTTP/1.1" 200 30684 ... show more 2a02:4780:11:1843:0:2c94:3bc3:1 - - [26/Aug/2026:04:24:26 +0800] "GET /api/.env HTTP/1.1" 200 30684 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-08-25 13:20:35 (1 day ago)	Malicious activity from IP detected: crowdsecurity/http-sensitive-files.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-25 09:19:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:19:19.725947 2026] [security2:error] [pid 4137:tid 4137] [client 2a02:4780:11:1843:0:2c94:3bc3:1:27696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hpepaper.com"] [uri "/test/.env"] [unique_id "ao1eFzSmr29vguqDMaWFrwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-08-25 01:39:48 (1 day ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇳🇱 e.fierstra	2026-08-25 01:34:02 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 01:30:26 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 21:30:20.484835 2026] [security2:error] [pid 11360:tid 11476] [client 2a02:4780:11:1843:0:2c94:3bc3:1:27990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neominerva.com"] [uri "/app/.env"] [unique_id "aozwLCE43_PNX5EeV8MkqQAAARQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 22:59:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 18:59:04.891088 2026] [security2:error] [pid 14385:tid 14385] [client 2a02:4780:11:1843:0:2c94:3bc3:1:55464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "airedaleflyer.com"] [uri "/dev/.env"] [unique_id "aozMuCvIE1Xtp5scKv3K3wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 20:50:50 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:949110) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 16:50:46.319977 2026] [security2:error] [pid 28487:tid 28487] [client 2a02:4780:11:1843:0:2c94:3bc3:1:58014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jadabellportfolio.com"] [uri "/backend/.env"] [unique_id "aoyupoNkMKNUEHNfdcrkcgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 20:01:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 16:01:25.132334 2026] [security2:error] [pid 1225:tid 1225] [client 2a02:4780:11:1843:0:2c94:3bc3:1:62338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miszewski.com"] [uri "/backup/.env"] [unique_id "aoyjFTgmU4iRgm-N2F6RhgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 18:30:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 14:30:45.762634 2026] [security2:error] [pid 23871:tid 23871] [client 2a02:4780:11:1843:0:2c94:3bc3:1:32554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boaredraven.com"] [uri "/member/.env"] [unique_id "aoyN1YGoXQnZ2XnJFTlgXgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 17:44:16 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1843:0:2c94:3bc3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 13:44:12.067349 2026] [security2:error] [pid 18752:tid 18752] [client 2a02:4780:11:1843:0:2c94:3bc3:1:42930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "surfsideautomotive.com"] [uri "/admin/.env"] [unique_id "aoyC7IutVfKefvD7-K4WTQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 4.246.61.185

🇺🇸 222.167.98.246

🇱🇹 213.176.26.153

🇮🇩 182.2.165.14

🇪🇸 82.223.35.19

🇺🇸 50.106.210.84

🇹🇳 197.5.145.102

🇬🇧 188.240.59.31

🇺🇸 153.75.82.149

🇨🇦 52.139.37.240

🇷🇴 2.57.122.150

🇺🇸 2604:a880:400:d0::1f5d:e001

🇺🇸 172.245.106.180

🇧🇷 138.121.35.44

🇺🇸 54.87.108.43

🇩🇪 43.165.4.2

🇰🇷 220.86.7.26

🇪🇬 197.44.15.210

🇱🇹 194.165.16.163

🇩🇪 167.94.145.16