JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:8bc0:2:196e::1

2a0b:8bc0:2:196e::1 was found in our database!

This IP was reported 206 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:8bc0:2:196e::1

Whois 2a0b:8bc0:2:196e::1

IP Abuse Reports for 2a0b:8bc0:2:196e::1:

This IP address has been reported a total of 206 times from 101 distinct sources. 2a0b:8bc0:2:196e::1 was first reported on April 16th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 pduggusa	2026-04-20 03:31:04 (4 months ago)	Detected attacking dugganusa.com at 2026-04-20T03:31:04.154Z \| Attack: Network Denial of Service \| S ... show more Detected attacking dugganusa.com at 2026-04-20T03:31:04.154Z \| Attack: Network Denial of Service \| Source: DugganUSA PreCog auto-block show less	Hacking DDoS Attack
🇧🇷 Peregrine	2026-04-20 03:20:42 (4 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15:20:29 -0300] "GET /.env.backup HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15:20:29 -0300] "GET /.env.production HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15:20:29 -0300] "GET /backend/.env HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15:20:29 -0300] "GET /.env.bak HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /laravel/.env HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /api/.env HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 pduggusa	2026-04-20 02:29:28 (4 months ago)	Detected attacking dugganusa.com at 2026-04-20T02:29:28.310Z \| Attack: Network Denial of Service \| S ... show more Detected attacking dugganusa.com at 2026-04-20T02:29:28.310Z \| Attack: Network Denial of Service \| Source: DugganUSA PreCog auto-block show less	Hacking DDoS Attack
🇺🇸 pduggusa	2026-04-20 01:28:31 (4 months ago)	Detected attacking dugganusa.com at 2026-04-20T01:28:31.208Z \| Attack: Network Denial of Service \| S ... show more Detected attacking dugganusa.com at 2026-04-20T01:28:31.208Z \| Attack: Network Denial of Service \| Source: DugganUSA PreCog auto-block show less	Hacking DDoS Attack
🇺🇸 pduggusa	2026-04-20 00:28:32 (4 months ago)	Detected attacking dugganusa.com at 2026-04-20T00:28:32.529Z \| Attack: Network Denial of Service \| S ... show more Detected attacking dugganusa.com at 2026-04-20T00:28:32.529Z \| Attack: Network Denial of Service \| Source: DugganUSA PreCog auto-block show less	Hacking DDoS Attack
🇺🇸 Charlesiv	2026-04-19 20:57:55 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 41608 (NEXTGENWEBS-NL) P ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 41608 (NEXTGENWEBS-NL) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-04-19T19:04:04Z Ray ID: 9eee2c431d31ffee UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0 show less	Bad Web Bot
🇳🇱 juutis	2026-04-19 19:46:19 (4 months ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇳🇱 dinaco	2026-04-19 15:44:31 (4 months ago)	2a0b:8bc0:2:196e::1 - - [19/Apr/2026:15:44:31 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 ( ... show more 2a0b:8bc0:2:196e::1 - - [19/Apr/2026:15:44:31 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇨🇭 YF	2026-04-19 14:05:03 (4 months ago)	Attempted access to sensitive files	Web App Attack
🇩🇪 big-cloud.nl	2026-04-19 13:47:30 (4 months ago)	Try to access /app/.env	Web App Attack
🇺🇸 antlac1	2026-04-19 13:42:49 (4 months ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇫🇷 dynamix	2026-04-19 13:39:07 (4 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 4server	2026-04-19 11:51:57 (4 months ago)	[SunApr1913:51:55.4448052026][security2:error][pid463922:tid464047][client2a0b:8bc0:2:196e::1:0]ModS ... show more [SunApr1913:51:55.4448052026][security2:error][pid463922:tid464047][client2a0b:8bc0:2:196e::1:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpanel.danielasilvia.ch\"][uri\"/.env.bak\"][unique_id\"aeTB2yUx0chO_4MFsOAUBQAAAMg\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 Mundo Bueno	2026-04-19 05:21:04 (4 months ago)	[ISILIA Protection v2.1] Tentative d'accès: /.env.bak \| Pays: NL \| UA: Mozilla/5.0 (Macintosh; Intel ... show more [ISILIA Protection v2.1] Tentative d'accès: /.env.bak \| Pays: NL \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0 show less	Hacking Web App Attack
🇩🇪 andorin	2026-04-19 01:10:10 (4 months ago)	Automated report from halo.habith.eu (NGINX access log). Detected 9 suspicious requests in last 200 ... show more Automated report from halo.habith.eu (NGINX access log). Detected 9 suspicious requests in last 20000 lines. Sample log lines: 2a0b:8bc0:2:196e::1 - - [18/Apr/2026:12:11:27 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like\n2a0b:8bc0:2:196e::1 - - [18/Apr/2026:12:11:28 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36\n2a0b:8bc0:2:196e::1 - - [18/Apr/2026:12:11:28 +0200] "GET /laravel/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/2010010\n2a0b:8bc0:2:196e::1 - - [18/Apr/2026:12:11:28 +0200] "GET /backend/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like G\n2a0b:8bc0:2:196e::1 - - [18/Apr/2026:12:11:28 +0200] "GET /app/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, \n2a0b:8bc0:2:196e::1 - - [18/Apr/2026:12:11:28 +0200] "GET / show less	DDoS Attack Ping of Death Hacking

Showing 106 to 120 of 206 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.53

🇨🇦 191.96.235.180

🇳🇱 157.245.68.185

🇺🇸 45.79.115.134

🇺🇸 18.116.101.220

🇧🇬 5.188.206.30

🇺🇸 216.218.206.111

🇬🇪 213.200.15.84

🇦🇷 191.85.13.106

🇦🇷 191.84.198.23

🇲🇽 189.216.104.60

🇧🇷 187.63.23.136

🇷🇺 185.26.53.189

🇨🇴 179.238.3.27

🇺🇸 162.226.142.42

🇺🇸 157.230.161.27

🇺🇸 152.32.235.107

🇺🇸 137.184.235.37

🇺🇸 107.173.127.185

🇺🇸 71.6.232.28