JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:4780:3:1199:0:2fbb:22:1

2a02:4780:3:1199:0:2fbb:22:1

Neutral Activity IPv6 SLAAC Note

38 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Hostinger International Limited

Usage Type

Content Delivery Network

ASN

AS47583

Domain Name

hostinger.com

Country

🇸🇬 Singapore

City

Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a02:4780:3:1199:0:2fbb:22:1 has been reported 38 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a02:4780:3:1199:0:2fbb:22:1:

This IP address has been reported a total of 38 times from 15 distinct sources. 2a02:4780:3:1199:0:2fbb:22:1 was first reported on June 6th 2026, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-06-09 05:14:53 (3 months ago)	9 attacks on env grabbing URLs: GET /.env HTTP/1.1	Hacking
🇳🇱 Savvii	2026-06-08 09:16:29 (3 months ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 08:59:06 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 04:58:58.774623 2026] [security2:error] [pid 16375:tid 16375] [client 2a02:4780:3:1199:0:2fbb:22:1:29542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandpointidaho.com"] [uri "/dev/.env"] [unique_id "aiaEUg4slQnXk1IJCJqR0AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-06-08 08:42:22 (3 months ago)	Probing websites for vulnerabilities	Web App Attack
🇬🇧 openstrike.co.uk	2026-06-08 05:13:12 (3 months ago)	18 attacks on env grabbing URLs: GET /member/.env HTTP/1.1	Hacking
🇳🇱 e.fierstra	2026-06-08 04:17:53 (3 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 22:54:26 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:54:19.637785 2026] [security2:error] [pid 30462:tid 30462] [client 2a02:4780:3:1199:0:2fbb:22:1:32856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mixmediallc.com"] [uri "/member/.env"] [unique_id "aiX2m5E0ot3bUIaAVNLL5wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-07 22:07:47 (3 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-06. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-07 20:09:24 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:09:20.153553 2026] [security2:error] [pid 911:tid 911] [client 2a02:4780:3:1199:0:2fbb:22:1:44758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wolfmachine.com"] [uri "/dev/.env"] [unique_id "aiXP8Pm_qQUIRcavzIaWfAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Dennis	2026-06-07 19:24:51 (3 months ago)	2a02:4780:3:1199:0:2fbb:22:1 has been banned for triggering http-sensitive-files (5 events over 7.18 ... show more 2a02:4780:3:1199:0:2fbb:22:1 has been banned for triggering http-sensitive-files (5 events over 7.189857ms). show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 17:42:18 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:42:11.863564 2026] [security2:error] [pid 7059:tid 7059] [client 2a02:4780:3:1199:0:2fbb:22:1:16618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eduempowermentsolutions.com"] [uri "/app/.env"] [unique_id "aiWtc0ef6iqOLhzNryRfDAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 14:14:15 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 10:14:11.581760 2026] [security2:error] [pid 20192:tid 20192] [client 2a02:4780:3:1199:0:2fbb:22:1:30266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayareamustangs.com"] [uri "/.env"] [unique_id "aiV8sxYZLJEmhxfmqE2pjgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-07 11:58:42 (3 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 10:14:03 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3:1199:0:2fbb:22:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 06:13:56.159807 2026] [security2:error] [pid 30892:tid 30892] [client 2a02:4780:3:1199:0:2fbb:22:1:55044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xcarsubscription.com"] [uri "/app/.env"] [unique_id "aiVEZClYf4mcS5feT-sX3AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Live Home Cams	2026-06-07 10:10:36 (3 months ago)	WebApp brute force attack detected. Multiple file scanning attempts from 2a02:4780:3:1199:0:2fbb:22: ... show more WebApp brute force attack detected. Multiple file scanning attempts from 2a02:4780:3:1199:0:2fbb:22:1. Detected by fail2ban. show less	Web App Attack Brute-Force

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇿 192.162.99.230

🇦🇷 177.37.37.77

🇪🇸 84.236.153.83

🇺🇸 15.204.233.32

🇷🇺 194.67.109.34

🇿🇦 102.253.66.19

🇷🇺 95.104.175.30

🇷🇺 89.109.4.236

🇰🇷 222.110.147.58

🇲🇾 203.121.40.210

🇹🇷 185.7.242.122

🇰🇷 175.207.239.66

🇺🇸 172.70.130.184

🇮🇷 151.234.202.67

🇺🇸 147.185.132.241

🇧🇩 117.103.80.168

🇷🇺 95.167.166.18

🇧🇪 91.86.88.73

🇵🇱 78.31.95.72

🇳🇱 46.151.178.11