JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:4780:3f:2179:0:1fd4:74a3:1

2a02:4780:3f:2179:0:1fd4:74a3:1 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 44%: ?

44%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Hostinger International Limited
Usage Type	Content Delivery Network
ASN	AS47583
Domain Name	hostinger.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:4780:3f:2179:0:1fd4:74a3:1

Whois 2a02:4780:3f:2179:0:1fd4:74a3:1

IP Abuse Reports for 2a02:4780:3f:2179:0:1fd4:74a3:1:

This IP address has been reported a total of 38 times from 14 distinct sources. 2a02:4780:3f:2179:0:1fd4:74a3:1 was first reported on June 6th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ba-Yu	2026-06-08 11:17:22 (3 weeks ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 11:09:12 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 07:09:04.831364 2026] [security2:error] [pid 28133:tid 28133] [client 2a02:4780:3f:2179:0:1fd4:74a3:1:28036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mountainararattrek.com"] [uri "/dev/.env"] [unique_id "aiai0KtGa5TuxWSEdN72TQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Halux	2026-06-08 09:29:27 (3 weeks ago)	2a02:4780:3f:2179:0:1fd4:74a3:1 Web Application Firewall multiple violations	Hacking Web App Attack
🇳🇱 BlueWire Hosting	2026-06-08 07:22:43 (3 weeks ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 04:34:25 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 00:34:19.896564 2026] [security2:error] [pid 7392:tid 7392] [client 2a02:4780:3f:2179:0:1fd4:74a3:1:18404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yourmenu.xyz"] [uri "/api/.env"] [unique_id "aiZGS79CLtQ6ZrGBdxq8pwAAAD4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 02:31:05 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:31:01.930758 2026] [security2:error] [pid 3177:tid 3177] [client 2a02:4780:3f:2179:0:1fd4:74a3:1:26324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stapleton.productions"] [uri "/dev/.env"] [unique_id "aiYpZbC4g5Ahwh67ZCUkjwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ecs.ge	2026-06-08 01:42:14 (3 weeks ago)	Automatic Fail2Ban report from jail plesk-nginx-probes: multiple matching events detected.	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 00:16:17 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 20:16:13.734668 2026] [security2:error] [pid 21583:tid 21583] [client 2a02:4780:3f:2179:0:1fd4:74a3:1:44160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grandersonheatingandcooling.com"] [uri "/api/.env"] [unique_id "aiYJzXqK9CFDQ1IXqQbRHgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-07 22:47:05 (3 weeks ago)	Try to access /app/.env	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-07 22:07:40 (4 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-06. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-07 20:00:59 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:00:54.474455 2026] [security2:error] [pid 25615:tid 25615] [client 2a02:4780:3f:2179:0:1fd4:74a3:1:34054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gisresults.com"] [uri "/member/.env"] [unique_id "aiXN9rmumI-Bq458EfLkIAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 18:28:54 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 14:28:50.682249 2026] [security2:error] [pid 2278:tid 2280] [client 2a02:4780:3f:2179:0:1fd4:74a3:1:56796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luxury.management"] [uri "/backend/.env"] [unique_id "aiW4YgV_Wso3Iyn09BhcqgAAAQA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 17:53:17 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:53:11.832987 2026] [security2:error] [pid 1330:tid 1330] [client 2a02:4780:3f:2179:0:1fd4:74a3:1:17020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "premiumstuffonline.com"] [uri "/.env"] [unique_id "aiWwB8M3McUd_Hq1QEz0BQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-07 16:38:58 (4 weeks ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 13:31:56 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2179:0:1fd4:74a3:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 09:31:49.524799 2026] [security2:error] [pid 10575:tid 10575] [client 2a02:4780:3f:2179:0:1fd4:74a3:1:44154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "health-gateways.com"] [uri "/api/.env"] [unique_id "aiVyxfAOzlCv7NbRz-2XPAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.72.129.211

🇧🇪 198.235.24.248

🇧🇷 189.90.55.243

🇩🇪 140.248.75.180

🇹🇭 122.154.235.21

🇹🇼 101.13.4.122

🇩🇪 91.217.249.54

🇭🇰 58.152.42.174

🇳🇱 45.148.10.152

🇳🇱 45.148.10.141

🇬🇧 217.199.161.196

🇷🇺 178.178.222.52

🇦🇴 160.242.24.11

🇺🇸 147.185.132.222

🇷🇴 92.118.39.14

🇩🇪 69.5.169.195

🇸🇬 51.79.143.228

🇧🇷 45.172.162.153

🇳🇱 45.148.10.151

🇧🇷 187.58.241.90