JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:8bc0:2:2a50::1

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

96 reports

38 reporters · latest 2 months ago

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a0b:8bc0:2:2a50::1 has been reported 96 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a0b:8bc0:2:2a50::1

This IP address has been reported a total of 96 times from 38 distinct sources. 2a0b:8bc0:2:2a50::1 was first reported on April 21st 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-03 18:32:31 (2 months ago)	301 requests with url.path .git/ 117 requests with url.path .aws/ 109 requests with url.path ... show more 301 requests with url.path .git/ 117 requests with url.path .aws/ 109 requests with url.path *config.json show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 08:10:45 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 04:10:41.615853 2026] [security2:error] [pid 10576:tid 10576] [client 2a0b:8bc0:2:2a50::1:33678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tucek.org"] [uri "/.git/HEAD"] [unique_id "akdugQZhKe43DHG1fnRuHwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 07:52:23 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 03:52:15.414412 2026] [security2:error] [pid 10466:tid 10466] [client 2a0b:8bc0:2:2a50::1:35306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tuscanydreamhome.radiointernational.net"] [uri "/.git/HEAD"] [unique_id "akdqLxj4yjrR2Ooi14qnbgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 06:31:20 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:31:14.129610 2026] [security2:error] [pid 17216:tid 17216] [client 2a0b:8bc0:2:2a50::1:57782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tyning.com"] [uri "/.git/HEAD"] [unique_id "akdXMiOII-F5FLsM3C1TUQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-03 06:15:02 (2 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 04:53:59 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:53:51.644260 2026] [security2:error] [pid 7353:tid 7353] [client 2a0b:8bc0:2:2a50::1:33772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ucommsi.com"] [uri "/.git/config"] [unique_id "akdAX_S-vkEUxQ3HbE8DVQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 04:19:21 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:19:17.194628 2026] [security2:error] [pid 25120:tid 25120] [client 2a0b:8bc0:2:2a50::1:38086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trucksystems.com.mx"] [uri "/.git/HEAD"] [unique_id "akc4RVUswVri7D_srTtXXgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-02 21:59:27 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-01. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-02 20:57:58 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:57:48.123228 2026] [security2:error] [pid 21463:tid 21463] [client 2a0b:8bc0:2:2a50::1:34112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web37.dnchosting.com"] [uri "/.git/HEAD"] [unique_id "akbQzHtqsKGkaEZSBB8WVgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-02 19:25:07 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 18:35:09 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 14:35:01.915456 2026] [security2:error] [pid 25044:tid 25044] [client 2a0b:8bc0:2:2a50::1:40442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web215.dnchosting.com"] [uri "/.git/HEAD"] [unique_id "akavVR5Yh4jq7isoOMtuzQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 18:09:49 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 14:09:41.231261 2026] [security2:error] [pid 29628:tid 29628] [client 2a0b:8bc0:2:2a50::1:46796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web136.dnchosting.com"] [uri "/.env.local"] [unique_id "akapZX34UZn189L3px5PBgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-02 15:06:22 (2 months ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-02 14:16:46 (2 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:43:58 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2a50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:43:54.131059 2026] [security2:error] [pid 1069:tid 1069] [client 2a0b:8bc0:2:2a50::1:54546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "running.boens.org"] [uri "/.git/HEAD"] [unique_id "akXeesqdU5iGEfPC_Z8rPQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.75.165.74

🇺🇸 193.36.224.208

🇧🇴 190.129.122.12

🇺🇸 162.216.150.72

🇺🇸 103.143.231.24

🇫🇷 88.174.4.70

🇧🇬 78.128.112.30

🇺🇸 73.252.218.128

🇺🇸 65.49.20.67

🇺🇸 64.62.156.222

🇺🇸 34.145.12.38

🇻🇳 14.225.239.154

🇳🇱 195.178.110.217

🇳🇱 193.47.62.69

🇳🇱 185.93.89.79

🇲🇲 136.228.161.66

🇿🇦 102.251.66.4

🇹🇼 101.13.1.58

🇬🇧 87.236.176.36

🇦🇪 87.200.196.53