JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:8bc0:2:196e::1

2a0b:8bc0:2:196e::1 was found in our database!

This IP was reported 206 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:8bc0:2:196e::1

Whois 2a0b:8bc0:2:196e::1

IP Abuse Reports for 2a0b:8bc0:2:196e::1:

This IP address has been reported a total of 206 times from 101 distinct sources. 2a0b:8bc0:2:196e::1 was first reported on April 16th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Skyrider	2026-04-18 21:03:06 (5 months ago)	crowdsecurity/http-sensitive-files	Hacking
🇨🇦 john doe	2026-04-18 20:49:27 (5 months ago)	SentinelBot: Env File Hunting (score: 83)	Bad Web Bot
🇳🇱 Mangelot Hosting	2026-04-18 19:59:59 (5 months ago)	(modsecurity) srv104 ModSecurity 2a0b:8bc0:2:196e::1 (NL/The Netherlands/-): 10 in the last 3600 sec ... show more (modsecurity) srv104 ModSecurity 2a0b:8bc0:2:196e::1 (NL/The Netherlands/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 0x44	2026-04-18 19:35:20 (5 months ago)	Abusive host detected - Attempt to access sensitive files	Web App Attack Hacking
🇧🇷 Peregrine	2026-04-18 18:20:42 (5 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15:20:29 -0300] "GET /.env.backup HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15:20:29 -0300] "GET /.env.production HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15:20:29 -0300] "GET /backend/.env HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.112 - - [18/Apr/2026:15:20:29 -0300] "GET /.env.bak HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /laravel/.env HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /api/.env HTTP/1.1" 404 414 2a0b:8bc0:2:196e::1 104.23.166.113 - - [18/Apr/2026:15:20:29 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇫🇷 Baking333	2026-04-18 15:34:16 (5 months ago)	[redacted] 2a0b:8bc0:2:196e::1 - - [18/Apr/2026:16:34:14 +0100] "GET /.[redacted] HTTP/1.1" 302 5277 ... show more [redacted] 2a0b:8bc0:2:196e::1 - - [18/Apr/2026:16:34:14 +0100] "GET /.[redacted] HTTP/1.1" 302 5277 0/85954 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" [redacted] 2a0b:8bc0:2:196e::1 - - [18/Apr/2026:16:34:14 +0100] "GET /app/.env HTTP/1.1" 302 5277 0/63922 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" show less	Bad Web Bot Web App Attack
🇦🇺 nzhost.co.nz	2026-04-18 13:51:41 (5 months ago)	$f2bV_matches	Hacking Brute-Force
🇳🇱 Mangelot Hosting	2026-04-18 13:16:55 (5 months ago)	(modsecurity) srv101 ModSecurity 2a0b:8bc0:2:196e::1 (NL/The Netherlands/-): 10 in the last 3600 sec ... show more (modsecurity) srv101 ModSecurity 2a0b:8bc0:2:196e::1 (NL/The Netherlands/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 todix	2026-04-18 10:24:31 (5 months ago)	WebAttack or semilar from 2a0b:8bc0:2:196e::1	Web App Attack
🇮🇩 Burayot	2026-04-18 09:56:05 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 2a0b:8bc0:2:196e::1 (Unknown): 2 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 2a0b:8bc0:2:196e::1 (Unknown): 2 in the last 3600 secs show less	Web App Attack
🇦🇺 2000cn.com.au	2026-04-18 09:50:48 (5 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇬🇧 Aetherweb Ark	2026-04-18 08:09:49 (5 months ago)	(mod_security) mod_security (id:949110) triggered by 2a0b:8bc0:2:196e::1 (Unknown): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 2a0b:8bc0:2:196e::1 (Unknown): N in the last X secs show less	Web App Attack
🇬🇧 Mendip_Defender	2026-04-18 07:17:25 (5 months ago)	2a0b:8bc0:2:196e::1 - - [18/Apr/2026:08:17:19 +0100] "GET /config.json HTTP/1.0" 404 73856 "-" "Mozi ... show more 2a0b:8bc0:2:196e::1 - - [18/Apr/2026:08:17:19 +0100] "GET /config.json HTTP/1.0" 404 73856 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" 2a0b:8bc0:2:196e::1 - - [18/Apr/2026:08:17:19 +0100] "GET /.openai/config.json HTTP/1.0" 404 73856 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 2a0b:8bc0:2:196e::1 - - [18/Apr/2026:08:17:19 +0100] "GET /.anthropic/config.json HTTP/1.0" 404 73856 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" ... show less	Hacking Web App Attack
Anonymous	2026-04-18 07:00:04 (5 months ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇬🇧 openstrike.co.uk	2026-04-18 05:16:10 (5 months ago)	12 attacks on config grabbing URLs (type 2), env grabbing URLs, password grabbing URLs: GET /config. ... show more 12 attacks on config grabbing URLs (type 2), env grabbing URLs, password grabbing URLs: GET /config.json HTTP/1.1 GET /.env.backup HTTP/1.1 GET /.aws/credentials HTTP/1.1 show less	Hacking

Showing 121 to 135 of 206 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a03:b0c0:3:d0::12bc:e001

233.6.6.6

🇳🇱 195.178.110.105

🇪🇸 158.173.210.37

🇮🇩 140.213.190.248

🇺🇸 130.211.199.207

🇬🇪 91.231.218.149

🇷🇴 80.94.92.234

🇧🇬 79.124.58.130

🇩🇿 41.110.90.25

🇨🇳 14.103.110.123

🇱🇹 213.176.24.43

🇧🇪 198.235.24.253

🇺🇸 192.241.170.156

🇮🇳 162.4.81.4

🇨🇳 103.255.200.90

🇧🇩 103.177.243.6

🇫🇷 91.231.89.80

🇸🇬 47.84.137.34

🇮🇱 46.210.95.5