JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:8bc0:2:2b38::1

2a0b:8bc0:2:2b38::1 was found in our database!

This IP was reported 190 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:8bc0:2:2b38::1

Whois 2a0b:8bc0:2:2b38::1

IP Abuse Reports for 2a0b:8bc0:2:2b38::1:

This IP address has been reported a total of 190 times from 89 distinct sources. 2a0b:8bc0:2:2b38::1 was first reported on April 13th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 eryilmaz	2026-08-09 02:00:09 (1 month ago)	Automated attack blocked by eryilmaz WAF/fail2ban: 2 event(s) [waf.block] in the last 1 days, e.g. / ... show more Automated attack blocked by eryilmaz WAF/fail2ban: 2 event(s) [waf.block] in the last 1 days, e.g. /env.js show less	Web App Attack Hacking
🇮🇳 evicky2002	2026-06-22 05:25:06 (3 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 gadix	2026-05-05 10:33:53 (4 months ago)	[05/May/2026:12:33:53.451349 +0200] afnHkQvIa1sbnMmWVKFFjwAAAAA 2a0b:8bc0:2:2b38::1 36578 127.0.0.1 ... show more [05/May/2026:12:33:53.451349 +0200] afnHkQvIa1sbnMmWVKFFjwAAAAA 2a0b:8bc0:2:2b38::1 36578 127.0.0.1 7081 [05/May/2026:12:33:53.453053 +0200] afnHkd64ArZxSpaxfBSuwAAAAAk 2a0b:8bc0:2:2b38::1 36582 127.0.0.1 7081 [05/May/2026:12:33:53.489674 +0200] afnHkR69fcccFdvjYhI3sgAAAAY 2a0b:8bc0:2:2b38::1 36606 127.0.0.1 7081 ... show less	Web App Attack
🇩🇪 NewGastroline	2026-05-05 07:08:41 (4 months ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-05-05 06:15:18 (4 months ago)	Try to access /.env	Web App Attack
🇩🇪 gadix	2026-05-05 04:45:55 (4 months ago)	[05/May/2026:06:45:55.339636 +0200] afl2AwFSgkOTcVDqxhl32QAAAAc 2a0b:8bc0:2:2b38::1 58176 127.0.0.1 ... show more [05/May/2026:06:45:55.339636 +0200] afl2AwFSgkOTcVDqxhl32QAAAAc 2a0b:8bc0:2:2b38::1 58176 127.0.0.1 7081 [05/May/2026:06:45:55.340646 +0200] afl2AwFSgkOTcVDqxhl32gAAAAw 2a0b:8bc0:2:2b38::1 58182 127.0.0.1 7081 [05/May/2026:06:45:55.341125 +0200] afl2AwFSgkOTcVDqxhl32wAAAAo 2a0b:8bc0:2:2b38::1 58188 127.0.0.1 7081 ... show less	Web App Attack
🇩🇪 4server	2026-05-05 04:13:31 (4 months ago)	[TueMay0506:13:29.9093622026][security2:error][pid1151777:tid1151877][client2a0b:8bc0:2:2b38::1:0]Mo ... show more [TueMay0506:13:29.9093622026][security2:error][pid1151777:tid1151877][client2a0b:8bc0:2:2b38::1:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"serban.ch\"][uri\"/app/.env\"][unique_id\"afluafm4aEC5QK1PpdL7jwAAAQI\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 debaba	2026-05-05 00:48:23 (4 months ago)	[05/May/2026:00:48:22.515559 +0000] afk-Vpx8-ndtasyHh05BSAAAAA4 2a0b:8bc0:2:2b38::1 43118 127.0.0.1 ... show more [05/May/2026:00:48:22.515559 +0000] afk-Vpx8-ndtasyHh05BSAAAAA4 2a0b:8bc0:2:2b38::1 43118 127.0.0.1 7080 [05/May/2026:00:48:22.515712 +0000] afk-Vqbhm ... show less	Brute-Force Web App Attack
Anonymous	2026-05-04 22:19:55 (4 months ago)	2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:53 -0300] "GET /.env HTTP/1.1" 403 829 "https://blogmania ... show more 2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:53 -0300] "GET /.env HTTP/1.1" 403 829 "https://blogmania.com.br/.env" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:53 -0300] "GET /.env.local HTTP/1.1" 403 829 "https://blogmania.com.br/.env.local" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:54 -0300] "GET /api/.env HTTP/1.1" 403 829 "https://blogmania.com.br/api/.env" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a0b:8bc0:2:2b38::1 - - [04/May/2026:19:19:54 -0300] "GET /.env.production HTTP/1.1" 403 829 "https://blogmania.com.br/.env.production" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 2a0b:8bc0:2:2b38::1 - - [0 ... show less	Port Scan
🇳🇱 e.fierstra	2026-05-04 21:40:55 (4 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 gadix	2026-05-04 04:07:11 (4 months ago)	[04/May/2026:06:07:10.219004 +0200] afgbbtrMLloE558mdACIIwAAAAk 2a0b:8bc0:2:2b38::1 33334 127.0.0.1 ... show more [04/May/2026:06:07:10.219004 +0200] afgbbtrMLloE558mdACIIwAAAAk 2a0b:8bc0:2:2b38::1 33334 127.0.0.1 7081 [04/May/2026:06:07:10.733659 +0200] afgbbkZPkgCTfvmiwO4H9AAAAAQ 2a0b:8bc0:2:2b38::1 33354 127.0.0.1 7081 [04/May/2026:06:07:10.734997 +0200] afgbbncuW8uCnrMsw9UjlgAAAAI 2a0b:8bc0:2:2b38::1 33342 127.0.0.1 7081 ... show less	Web App Attack
🇩🇪 HandyTreff.de	2026-05-03 17:18:31 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -46.764 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -46.764 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇳🇱 e.fierstra	2026-05-03 11:48:45 (4 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 ramazan	2026-05-03 09:56:30 (4 months ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /.aws/credentials /.env /.env.local /.env.production /api/ ... show more Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /.aws/credentials /.env /.env.local /.env.production /api/.env show less	Web App Attack Hacking
🇩🇪 Viveronese	2026-05-03 09:54:51 (4 months ago)	HTTP vulnerability scanning	Web App Attack

Showing 1 to 15 of 190 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:7e01::2000:c7ff:fe90:c9e2

🇷🇺 95.26.47.183

🇷🇴 2.57.122.150

🇺🇸 2a03:2880:f800:2d::

🇬🇧 195.96.139.212

🇧🇷 187.36.128.12

🇺🇸 165.154.36.130

🇭🇰 150.109.127.109

🇩🇪 64.89.163.145

🇺🇸 45.33.41.118

🇺🇸 34.10.238.208

🇷🇴 2.57.122.74

🇩🇪 195.248.241.210

🇻🇳 171.251.237.122

🇺🇸 67.145.158.92

🇺🇸 67.6.6.191

🇨🇳 47.97.111.180

🇩🇿 41.111.227.10

🇺🇸 23.82.96.182

🇺🇸 216.73.217.99