JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:4780:27:1145:0:825:16d3:1

2a02:4780:27:1145:0:825:16d3:1 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Hostinger International Limited
Usage Type	Content Delivery Network
ASN	AS47583
Domain Name	hostinger.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:4780:27:1145:0:825:16d3:1

Whois 2a02:4780:27:1145:0:825:16d3:1

IP Abuse Reports for 2a02:4780:27:1145:0:825:16d3:1:

This IP address has been reported a total of 38 times from 16 distinct sources. 2a02:4780:27:1145:0:825:16d3:1 was first reported on June 6th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-01 04:35:33 (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇳🇱 homeshowdomain.nl	2026-06-08 21:59:29 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-07. show less	Web App Attack SSH Hacking
🇫🇷 dynamix	2026-06-08 12:25:43 (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 10:35:47 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 06:35:42.165382 2026] [security2:error] [pid 31310:tid 31310] [client 2a02:4780:27:1145:0:825:16d3:1:17930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cafelimelight.info"] [uri "/members/.env"] [unique_id "aiaa_oukIqxE70VgpdKAHQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 09:09:42 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 05:09:35.498883 2026] [security2:error] [pid 1309:tid 1309] [client 2a02:4780:27:1145:0:825:16d3:1:30528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radicalchange.org"] [uri "/core/.env"] [unique_id "aiaGz20xOahdd4ZVfh5RngAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 08:31:38 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 04:31:32.074454 2026] [security2:error] [pid 2306:tid 2306] [client 2a02:4780:27:1145:0:825:16d3:1:25058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eurobrake.com"] [uri "/api/.env.save"] [unique_id "aiZ95OvJzDZ4zu7GS44VMQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 07:16:05 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:16:01.060873 2026] [security2:error] [pid 27104:tid 27104] [client 2a02:4780:27:1145:0:825:16d3:1:23118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computerservicesofflorida.com"] [uri "/api/.env"] [unique_id "aiZsMej8NQusvldlZrR7mwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-08 05:41:44 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-08 00:39:10 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 20:39:00.893375 2026] [security2:error] [pid 3914:tid 3914] [client 2a02:4780:27:1145:0:825:16d3:1:53334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uphillfarmvt.com"] [uri "/backend/.env"] [unique_id "aiYPJAtrLBFcRPA8836AvgAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-07 17:50:29 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2026-06-07 17:34:06 (2 months ago)	2026/06/07 19:34:05 [error] 47058#158987: 2026275 access forbidden by rule, client: 2a02:4780:27:11 ... show more 2026/06/07 19:34:05 [error] 47058#158987: 2026275 access forbidden by rule, client: 2a02:4780:27:1145:0:825:16d3:1, server: hondaforum.hu, request: "GET /admin/.env HTTP/1.1", host: "hondaforum.hu" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-06-07 15:13:54 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 11:13:49.329550 2026] [security2:error] [pid 9503:tid 9503] [client 2a02:4780:27:1145:0:825:16d3:1:18252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "natesupport.com"] [uri "/laravel/.env"] [unique_id "aiWKrfeK-PowAuKndbJibAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-07 14:59:20 (2 months ago)	2026/06/07 11:59:20 [error] 1111633#1111633: 185799 access forbidden by rule, client: 2a02:4780:27: ... show more 2026/06/07 11:59:20 [error] 1111633#1111633: 185799 access forbidden by rule, client: 2a02:4780:27:1145:0:825:16d3:1, server: vebobinas.com, request: "GET /.env.save HTTP/1.1", host: "vebobinas.com" 2026/06/07 11:59:20 [error] 1111632#1111632: 185797 access forbidden by rule, client: 2a02:4780:27:1145:0:825:16d3:1, server: vebobinas.com, request: "GET /core/.env HTTP/1.1", host: "vebobinas.com" 2026/06/07 11:59:20 [error] 1111629#1111629: 185802 access forbidden by rule, client: 2a02:4780:27:1145:0:825:16d3:1, server: vebobinas.com, request: "GET /dev/.env HTTP/1.1", host: "vebobinas.com" ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-07 14:06:58 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 10:06:51.796627 2026] [security2:error] [pid 4996:tid 4996] [client 2a02:4780:27:1145:0:825:16d3:1:43236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "developerdove.com"] [uri "/api/.env.save"] [unique_id "aiV6-1PmfurAvLBGzEm8XAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 13:28:11 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:27:1145:0:825:16d3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 09:28:04.332269 2026] [security2:error] [pid 21176:tid 21176] [client 2a02:4780:27:1145:0:825:16d3:1:48208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "labcomputers.com"] [uri "/app/.env"] [unique_id "aiVx5EJ1X0knderprjTAhAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.107

🇭🇰 156.245.246.50

🇺🇸 147.185.132.216

🇨🇳 101.126.153.162

🇺🇸 66.132.172.208

🇺🇸 48.217.85.31

🇪🇸 46.253.45.10

🇨🇳 36.41.173.197

🇦🇪 5.31.9.163

🇺🇸 2400:cb00:119:1000:842d:7a6d:bb80:a63f

🇫🇷 172.71.122.14

🇺🇸 162.216.150.88

🇨🇳 154.8.138.226

🇺🇸 147.182.216.142

🇨🇳 111.26.62.42

🇺🇸 104.197.49.166

🇺🇸 91.230.168.55

🇸🇦 51.39.226.2

🇺🇸 48.216.219.168

🇦🇲 46.36.123.42