JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:8bc0:2:300f::1

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

239 reports

102 reporters · latest 2 months ago

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a0b:8bc0:2:300f::1 has been reported 239 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a0b:8bc0:2:300f::1

Export CSV

This IP address has been reported a total of 239 times from 102 distinct sources. 2a0b:8bc0:2:300f::1 was first reported on April 22nd 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-27 19:03:46 (2 months ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇫🇷 Catalin Negru	2026-07-11 07:36:28 (3 months ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇫🇷 Catalin Negru	2026-07-06 19:05:52 (3 months ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇩🇪 thesimonmanuel	2026-07-06 05:51:01 (3 months ago)	2a0b:8bc0:2:300f::1 - - [06/Jul/2026:11:20:53 +0530] "GET /.git/HEAD HTTP/2.0" 404 13349 "-" "Mozill ... show more 2a0b:8bc0:2:300f::1 - - [06/Jul/2026:11:20:53 +0530] "GET /.git/HEAD HTTP/2.0" 404 13349 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "2a0b:8bc0:2:300f::1" 2a0b:8bc0:2:300f::1 - - [06/Jul/2026:11:20:56 +0530] "GET /.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" "2a0b:8bc0:2:300f::1" 2a0b:8bc0:2:300f::1 - - [06/Jul/2026:11:20:59 +0530] "GET /env HTTP/2.0" 404 13349 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" "2a0b:8bc0:2:300f::1" 2a0b:8bc0:2:300f::1 - - [06/Jul/2026:11:21:00 +0530] "GET /.git/config HTTP/2.0" 404 13349 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" "2a0b:8bc0:2:300f::1" show less	Hacking Web App Attack
🇦🇺 clapper	2026-07-05 22:47:24 (3 months ago)	(mod_security) mod_security (id:949110) triggered by 2a0b:8bc0:2:300f::1 (Unknown): 3 in the last 36 ... show more (mod_security) mod_security (id:949110) triggered by 2a0b:8bc0:2:300f::1 (Unknown): 3 in the last 3600 secs; ID: LUC show less	Brute-Force Bad Web Bot
🇩🇪 on-com	2026-07-05 19:59:03 (3 months ago)	URL scan	Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-07-05 16:55:12 (3 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 gadix	2026-07-05 16:43:07 (3 months ago)	[05/Jul/2026:18:43:04.822465 +0200] akqJmIzLYjzdTY2xleHR7gAAAAQ 2a0b:8bc0:2:300f::1 34960 127.0.0.1 ... show more [05/Jul/2026:18:43:04.822465 +0200] akqJmIzLYjzdTY2xleHR7gAAAAQ 2a0b:8bc0:2:300f::1 34960 127.0.0.1 7081 [05/Jul/2026:18:43:04.841213 +0200] akqJmKhY6N17v2y-RYE29AAAAAE 2a0b:8bc0:2:300f::1 34962 127.0.0.1 7081 [05/Jul/2026:18:43:05.452272 +0200] akqJmXq8F_c5gfM_JXxT3QAAAAg 2a0b:8bc0:2:300f::1 35020 127.0.0.1 7081 ... show less	Web App Attack
🇫🇷 LRob	2026-07-05 15:33:48 (3 months ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: ["/.git/HEAD","/.env","/backend/.env","/api/.env ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: ["/.git/HEAD","/.env","/backend/.env","/api/.env","/.git/config"] \| UA: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win6 show less	Hacking
🇳🇱 e.fierstra	2026-07-05 15:09:15 (3 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-05 14:44:58 (3 months ago)	[redacted] 2a0b:8bc0:2:300f::1 - - [05/Jul/2026:15:44:56 +0100] "GET /.git/HEAD HTTP/1.1" 302 6778 0 ... show more [redacted] 2a0b:8bc0:2:300f::1 - - [05/Jul/2026:15:44:56 +0100] "GET /.git/HEAD HTTP/1.1" 302 6778 0/91954 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" [redacted] 2a0b:8bc0:2:300f::1 - - [05/Jul/2026:15:44:57 +0100] "GET /.env HTTP/1.1" 302 6778 0/146009 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" show less	Bad Web Bot Web App Attack
🇬🇧 gurnip	2026-07-05 11:57:08 (3 months ago)	Vulnerability probe of page /.git/HEAD, not found on server.	Brute-Force Web App Attack
🇩🇪 Blexyel	2026-07-05 09:11:30 (3 months ago)	2a0b:8bc0:2:300f::1 - - [05/Jul/2026:11:11:30 +0200] "GET /.git/config HTTP/1.1" 404 555 "-" "Mozill ... show more 2a0b:8bc0:2:300f::1 - - [05/Jul/2026:11:11:30 +0200] "GET /.git/config HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 wpadm4	2026-07-05 06:17:40 (3 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 06:17:15 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:300f::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:300f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 02:17:03.814467 2026] [security2:error] [pid 11834:tid 11834] [client 2a0b:8bc0:2:300f::1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "akula.365soft.top"] [uri "/.git/HEAD"] [unique_id "akn23wkaTUQfFcr4yPSjmwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 239 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 152.42.230.5

🇰🇷 106.251.244.178

🇰🇪 102.217.244.2

🇺🇸 97.104.202.58

🇻🇳 203.205.31.178

🇵🇪 190.235.10.164

🇸🇬 188.166.233.129

🇰🇷 175.197.79.34

🇮🇹 151.115.180.71

🇩🇪 109.160.32.39

🇺🇸 103.146.52.157

🇸🇮 102.220.161.29

🇷🇺 87.103.175.140

🇱🇹 62.60.130.253

🇮🇩 36.64.68.99

🇯🇵 34.85.86.102

🇦🇷 186.61.3.146

🇨🇭 185.231.32.33

🇳🇱 185.107.80.93

🇺🇸 147.185.132.245