JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a02:4780:2b:2016:0:3a9d:3648:1

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

178 reports

57 reporters · latest 5 months ago

ISP	Hostinger International Limited
Usage Type	Content Delivery Network
ASN	AS47583
Domain Name	hostinger.com
Country	🇺🇸 United States of America
City	Boston, Massachusetts

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a02:4780:2b:2016:0:3a9d:3648:1 has been reported 178 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a02:4780:2b:2016:0:3a9d:3648:1

Export CSV

This IP address has been reported a total of 178 times from 57 distinct sources. 2a02:4780:2b:2016:0:3a9d:3648:1 was first reported on February 27th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-22 23:43:23 (5 months ago)	2a02:4780:2b:2016:0:3a9d:3648:1 - - [22/Apr/2026:23:43:22 +0000] "GET /.env HTTP/1.1" 302 3356 "-" " ... show more 2a02:4780:2b:2016:0:3a9d:3648:1 - - [22/Apr/2026:23:43:22 +0000] "GET /.env HTTP/1.1" 302 3356 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-04-22 12:23:34 (5 months ago)	[ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: US \| UA: Mozilla/5.0 (Macintosh; Intel Mac ... show more [ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: US \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4 show less	Hacking Web App Attack
🇩🇪 todix	2026-04-22 01:16:29 (5 months ago)	Web App Attack Exploid from 2a02:4780:2b:2016:0:3a9d:3648:1	Web App Attack
🇫🇷 ELYAZ	2026-04-21 23:59:08 (5 months ago)	(y3) Failed access -byebye- from 2a02:4780:2b:2016:0:3a9d:3648:1 (Unknown): (CF_ENABLE)	Hacking
🇳🇱 e.fierstra	2026-04-21 23:23:07 (5 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-04-21 23:21:47 (5 months ago)	Try to access /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-04-21 18:08:37 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2016:0:3a9d:3648:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2016:0:3a9d:3648:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 14:08:30.858726 2026] [security2:error] [pid 29662:tid 29662] [client 2a02:4780:2b:2016:0:3a9d:3648:1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloudex.click"] [uri "/.env"] [unique_id "aee9HjOcPoz8jczsG-_0vwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-04-21 10:40:45 (5 months ago)	[TueApr2112:40:38.3528282026][security2:error][pid1442828:tid1442847][client2a02:4780:2b:2016:0:3a9d ... show more [TueApr2112:40:38.3528282026][security2:error][pid1442828:tid1442847][client2a02:4780:2b:2016:0:3a9d:3648:1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"edilmarra.ch\"][uri\"/.env\"][unique_id\"aedUJv8FACs2pVvk0J5M1wAAAFE\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-21 05:25:51 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2016:0:3a9d:3648:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2016:0:3a9d:3648:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 01:25:44.235480 2026] [security2:error] [pid 207392:tid 207392] [client 2a02:4780:2b:2016:0:3a9d:3648:1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totalsafe-security.com"] [uri "/.env"] [unique_id "aecKWH6FFIP3f9B5-CqnHgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-04-21 03:02:27 (5 months ago)	[ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: US \| UA: Mozilla/5.0 (Macintosh; Intel Mac ... show more [ISILIA Protection v2.1] Tentative d'accès: /.env \| Pays: US \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-20 16:49:28 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2016:0:3a9d:3648:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2016:0:3a9d:3648:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 12:49:21.378241 2026] [security2:error] [pid 4061:tid 4061] [client 2a02:4780:2b:2016:0:3a9d:3648:1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ccamp.dev"] [uri "/.env"] [unique_id "aeZZEZp2L90A8GK0UrUyRAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 TheSaint	2026-04-19 18:58:34 (5 months ago)	PrestaShop Security Module: Suspicious path detected (/.env)	Web App Attack
🇺🇸 ambor	2026-04-19 17:32:53 (5 months ago)	Attack type: honeypot_lure \| Target: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Ap ... show more Attack type: honeypot_lure \| Target: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Ap \| Country: US show less	Hacking
🇨🇭 4server	2026-04-19 09:19:37 (5 months ago)	[SunApr1911:19:32.3274562026][security2:error][pid3319304:tid3319327][client2a02:4780:2b:2016:0:3a9d ... show more [SunApr1911:19:32.3274562026][security2:error][pid3319304:tid3319327][client2a02:4780:2b:2016:0:3a9d:3648:1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"shadowdrummer.com\"][uri\"/.env\"][unique_id\"aeSeJGBvay_X0J9getrSjAAAAUM\"] show less	Hacking Web App Attack
🇦🇺 MAGIC	2026-04-19 01:08:20 (5 months ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 178 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇬 102.88.137.213

🇳🇱 46.144.194.122

🇿🇦 41.181.156.205

🇬🇧 35.203.211.247

🇺🇸 216.218.206.71

🇳🇱 195.178.110.217

🇺🇿 195.158.14.232

🇧🇷 192.185.176.201

🇲🇽 189.203.132.253

🇺🇸 174.176.173.239

🇺🇸 162.241.194.175

🇺🇸 129.121.136.31

🇺🇦 91.234.26.215

🇺🇸 74.208.31.43

🇺🇸 68.193.105.238

🇬🇧 64.205.72.217

🇦🇺 40.82.214.8

🇰🇷 14.46.87.209

🇨🇭 209.99.190.186

🇪🇹 196.189.155.89