JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:4780:3:1199:0:2fbb:22:1

2a02:4780:3:1199:0:2fbb:22:1 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 58%: ?

58%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Hostinger International Limited
Usage Type	Content Delivery Network
ASN	AS47583
Domain Name	hostinger.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:4780:3:1199:0:2fbb:22:1

Whois 2a02:4780:3:1199:0:2fbb:22:1

IP Abuse Reports for 2a02:4780:3:1199:0:2fbb:22:1:

This IP address has been reported a total of 38 times from 15 distinct sources. 2a02:4780:3:1199:0:2fbb:22:1 was first reported on June 6th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-06-09 05:14:53 (2 weeks ago)	9 attacks on env grabbing URLs: GET /.env HTTP/1.1	Hacking
🇳🇱 Savvii	2026-06-08 09:16:29 (2 weeks ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 08:59:06 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 04:58:58.774623 2026] [security2:error] [pid 16375:tid 16375] [client 2a02:4780:3:1199:0:2fbb:22:1:29542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandpointidaho.com"] [uri "/dev/.env"] [unique_id "aiaEUg4slQnXk1IJCJqR0AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-06-08 08:42:22 (2 weeks ago)	Probing websites for vulnerabilities	Web App Attack
🇬🇧 openstrike.co.uk	2026-06-08 05:13:12 (2 weeks ago)	18 attacks on env grabbing URLs: GET /member/.env HTTP/1.1	Hacking
🇳🇱 e.fierstra	2026-06-08 04:17:53 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 22:54:26 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:54:19.637785 2026] [security2:error] [pid 30462:tid 30462] [client 2a02:4780:3:1199:0:2fbb:22:1:32856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mixmediallc.com"] [uri "/member/.env"] [unique_id "aiX2m5E0ot3bUIaAVNLL5wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-07 22:07:47 (2 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-06. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-07 20:09:24 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:09:20.153553 2026] [security2:error] [pid 911:tid 911] [client 2a02:4780:3:1199:0:2fbb:22:1:44758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wolfmachine.com"] [uri "/dev/.env"] [unique_id "aiXP8Pm_qQUIRcavzIaWfAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Dennis	2026-06-07 19:24:51 (2 weeks ago)	2a02:4780:3:1199:0:2fbb:22:1 has been banned for triggering http-sensitive-files (5 events over 7.18 ... show more 2a02:4780:3:1199:0:2fbb:22:1 has been banned for triggering http-sensitive-files (5 events over 7.189857ms). show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 17:42:18 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:42:11.863564 2026] [security2:error] [pid 7059:tid 7059] [client 2a02:4780:3:1199:0:2fbb:22:1:16618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eduempowermentsolutions.com"] [uri "/app/.env"] [unique_id "aiWtc0ef6iqOLhzNryRfDAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 14:14:15 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 10:14:11.581760 2026] [security2:error] [pid 20192:tid 20192] [client 2a02:4780:3:1199:0:2fbb:22:1:30266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayareamustangs.com"] [uri "/.env"] [unique_id "aiV8sxYZLJEmhxfmqE2pjgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-07 11:58:42 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 10:14:03 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 06:13:56.159807 2026] [security2:error] [pid 30892:tid 30892] [client 2a02:4780:3:1199:0:2fbb:22:1:55044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xcarsubscription.com"] [uri "/app/.env"] [unique_id "aiVEZClYf4mcS5feT-sX3AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Live Home Cams	2026-06-07 10:10:36 (2 weeks ago)	WebApp brute force attack detected. Multiple file scanning attempts from 2a02:4780:3:1199:0:2fbb:22: ... show more WebApp brute force attack detected. Multiple file scanning attempts from 2a02:4780:3:1199:0:2fbb:22:1. Detected by fail2ban. show less	Web App Attack Brute-Force

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 150.107.38.254

🇮🇩 103.78.104.215

🇷🇺 89.179.70.253

🇺🇸 20.168.119.240

🇻🇳 103.48.192.48

🇷🇺 94.143.40.246

🇳🇱 93.123.109.128

🇮🇹 87.4.221.211

🇹🇷 85.103.165.76

🇫🇷 82.66.82.222

🇨🇳 60.169.224.246

🇳🇱 45.198.224.18

🇳🇱 45.156.128.166

🇧🇪 198.235.24.198

🇧🇪 198.235.24.152

🇹🇼 198.235.24.50

🇨🇩 196.250.116.1

🇩🇪 194.187.176.94

🇿🇦 173.194.171.215

🇺🇸 143.198.134.51