JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:8bc0:2:2b38::1

2a0b:8bc0:2:2b38::1 was found in our database!

This IP was reported 189 times. Confidence of Abuse is 39%: ?

39%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:8bc0:2:2b38::1

Whois 2a0b:8bc0:2:2b38::1

IP Abuse Reports for 2a0b:8bc0:2:2b38::1:

This IP address has been reported a total of 189 times from 88 distinct sources. 2a0b:8bc0:2:2b38::1 was first reported on April 13th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-22 05:25:06 (4 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 gadix	2026-05-05 10:33:53 (1 month ago)	[05/May/2026:12:33:53.451349 +0200] afnHkQvIa1sbnMmWVKFFjwAAAAA 2a0b:8bc0:2:2b38::1 36578 127.0.0.1 ... show more [05/May/2026:12:33:53.451349 +0200] afnHkQvIa1sbnMmWVKFFjwAAAAA 2a0b:8bc0:2:2b38::1 36578 127.0.0.1 7081 [05/May/2026:12:33:53.453053 +0200] afnHkd64ArZxSpaxfBSuwAAAAAk 2a0b:8bc0:2:2b38::1 36582 127.0.0.1 7081 [05/May/2026:12:33:53.489674 +0200] afnHkR69fcccFdvjYhI3sgAAAAY 2a0b:8bc0:2:2b38::1 36606 127.0.0.1 7081 ... show less	Web App Attack
🇩🇪 NewGastroline	2026-05-05 07:08:41 (1 month ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-05-05 06:15:18 (1 month ago)	Try to access /.env	Web App Attack
🇩🇪 gadix	2026-05-05 04:45:55 (1 month ago)	[05/May/2026:06:45:55.339636 +0200] afl2AwFSgkOTcVDqxhl32QAAAAc 2a0b:8bc0:2:2b38::1 58176 127.0.0.1 ... show more [05/May/2026:06:45:55.339636 +0200] afl2AwFSgkOTcVDqxhl32QAAAAc 2a0b:8bc0:2:2b38::1 58176 127.0.0.1 7081 [05/May/2026:06:45:55.340646 +0200] afl2AwFSgkOTcVDqxhl32gAAAAw 2a0b:8bc0:2:2b38::1 58182 127.0.0.1 7081 [05/May/2026:06:45:55.341125 +0200] afl2AwFSgkOTcVDqxhl32wAAAAo 2a0b:8bc0:2:2b38::1 58188 127.0.0.1 7081 ... show less	Web App Attack
🇩🇪 4server	2026-05-05 04:13:31 (1 month ago)	[TueMay0506:13:29.9093622026][security2:error][pid1151777:tid1151877][client2a0b:8bc0:2:2b38::1:0]Mo ... show more [TueMay0506:13:29.9093622026][security2:error][pid1151777:tid1151877][client2a0b:8bc0:2:2b38::1:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"serban.ch\"][uri\"/app/.env\"][unique_id\"afluafm4aEC5QK1PpdL7jwAAAQI\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 debaba	2026-05-05 00:48:23 (1 month ago)	[05/May/2026:00:48:22.515559 +0000] afk-Vpx8-ndtasyHh05BSAAAAA4 2a0b:8bc0:2:2b38::1 43118 127.0.0.1 ... show more [05/May/2026:00:48:22.515559 +0000] afk-Vpx8-ndtasyHh05BSAAAAA4 2a0b:8bc0:2:2b38::1 43118 127.0.0.1 7080 [05/May/2026:00:48:22.515712 +0000] afk-Vqbhm ... show less	Brute-Force Web App Attack
Anonymous	2026-05-04 22:19:55 (1 month ago)	2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:53 -0300] "GET /.env HTTP/1.1" 403 829 "https://blogmania ... show more 2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:53 -0300] "GET /.env HTTP/1.1" 403 829 "https://blogmania.com.br/.env" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:53 -0300] "GET /.env.local HTTP/1.1" 403 829 "https://blogmania.com.br/.env.local" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:54 -0300] "GET /api/.env HTTP/1.1" 403 829 "https://blogmania.com.br/api/.env" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:54 -0300] "GET /.env.production HTTP/1.1" 403 829 "https://blogmania.com.br/.env.production" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a0b:8bc0:2:2b38::1 - - [0 ... show less	Port Scan
🇳🇱 e.fierstra	2026-05-04 21:40:55 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 gadix	2026-05-04 04:07:11 (1 month ago)	[04/May/2026:06:07:10.219004 +0200] afgbbtrMLloE558mdACIIwAAAAk 2a0b:8bc0:2:2b38::1 33334 127.0.0.1 ... show more [04/May/2026:06:07:10.219004 +0200] afgbbtrMLloE558mdACIIwAAAAk 2a0b:8bc0:2:2b38::1 33334 127.0.0.1 7081 [04/May/2026:06:07:10.733659 +0200] afgbbkZPkgCTfvmiwO4H9AAAAAQ 2a0b:8bc0:2:2b38::1 33354 127.0.0.1 7081 [04/May/2026:06:07:10.734997 +0200] afgbbncuW8uCnrMsw9UjlgAAAAI 2a0b:8bc0:2:2b38::1 33342 127.0.0.1 7081 ... show less	Web App Attack
🇩🇪 HandyTreff.de	2026-05-03 17:18:31 (1 month ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -46.764 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -46.764 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇳🇱 e.fierstra	2026-05-03 11:48:45 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 ramazan	2026-05-03 09:56:30 (1 month ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /.aws/credentials /.env /.env.local /.env.production /api/ ... show more Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /.aws/credentials /.env /.env.local /.env.production /api/.env show less	Web App Attack Hacking
🇩🇪 Viveronese	2026-05-03 09:54:51 (1 month ago)	HTTP vulnerability scanning	Web App Attack
🇳🇱 Mangelot Hosting	2026-05-02 19:45:04 (1 month ago)	(modsecurity) srv104 ModSecurity 2a0b:8bc0:2:2b38::1 (NL/The Netherlands/-): 10 in the last 3600 sec ... show more (modsecurity) srv104 ModSecurity 2a0b:8bc0:2:2b38::1 (NL/The Netherlands/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 15 of 189 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.86.240.132

🇨🇳 101.43.86.204

🇷🇴 92.118.39.71

🇳🇱 91.92.42.195

🇬🇧 35.203.211.233

🇨🇳 222.212.91.18

🇹🇼 198.235.24.97

🇺🇦 194.61.52.156

🇬🇧 135.136.23.144

🇨🇳 106.124.137.21

🇺🇸 103.250.83.1

🇬🇧 87.236.176.101

🇵🇹 87.196.193.254

🇷🇴 80.94.92.55

🇳🇱 45.198.224.18

🇰🇪 41.209.10.42

🇿🇦 41.135.200.64

🇬🇧 35.203.210.83

🇺🇸 34.205.170.13

🇳🇱 5.187.35.26