JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:8bc0:2:7640::1

Neutral Activity IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

211 reports

87 reporters · latest 4 months ago

ISP: NextGenWebs, S.L.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS41608
Domain Name: nextgenwebs.es
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a0b:8bc0:2:7640::1 has been reported 211 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

211 from 87 distinct reporters

First reported

April 14th 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-23 05:52:11 UTC · (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 Peregrine	2026-05-16 03:22:51 UTC · (5 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 41 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.102.39 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.production HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 162.159.113.127 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.bak HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 141.101.76.190 - - [28/Apr/2026:10:19:45 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /backend/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /api/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.95.83 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.backup HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-15 03:17:47 UTC · (5 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 41 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.102.39 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.production HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 162.159.113.127 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.bak HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 141.101.76.190 - - [28/Apr/2026:10:19:45 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /backend/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /api/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.95.83 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.backup HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-13 03:24:20 UTC · (5 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 41 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.102.39 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.production HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 162.159.113.127 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.bak HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 141.101.76.190 - - [28/Apr/2026:10:19:45 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /backend/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /api/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.95.83 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.backup HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-11 03:17:56 UTC · (5 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 41 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.102.39 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.production HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 162.159.113.127 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.bak HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 141.101.76.190 - - [28/Apr/2026:10:19:45 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /backend/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /api/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.95.83 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.backup HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-09 03:22:11 UTC · (5 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 41 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.102.39 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.production HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 162.159.113.127 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.bak HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 141.101.76.190 - - [28/Apr/2026:10:19:45 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /backend/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /api/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.95.83 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.backup HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-08 03:18:10 UTC · (6 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 41 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.102.39 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.production HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 162.159.113.127 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.bak HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 141.101.76.190 - - [28/Apr/2026:10:19:45 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /backend/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /api/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.95.83 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.backup HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-06 03:21:53 UTC · (6 months ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 41 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 2a0b:8bc0:2:7640::1 172.71.95.98 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.local HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /laravel/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.102.39 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.production HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 162.159.113.127 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.bak HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 141.101.76.190 - - [28/Apr/2026:10:19:45 -0300] "GET /.aws/credentials HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 104.23.172.105 - - [28/Apr/2026:10:19:45 -0300] "GET /backend/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.99.240 - - [28/Apr/2026:10:19:45 -0300] "GET /api/.env HTTP/1.1" 404 414 2a0b:8bc0:2:7640::1 172.71.95.83 - - [28/Apr/2026:10:19:45 -0300] "GET /.env.backup HTTP/1.1" 404 414 show less	Bad Web Bot
🇩🇪 4server	2026-05-05 16:11:39 UTC · (6 months ago)	[TueMay0518:11:35.9363182026][security2:error][pid2020296:tid2020422][client2a0b:8bc0:2:7640::1:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\ ... show more [TueMay0518:11:35.9363182026][security2:error][pid2020296:tid2020422][client2a0b:8bc0:2:7640::1:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"gpwealth.ch\"][uri\"/app/.env\"][unique_id\"afoWt9b2GmQ_qJ-fY1PeFAAAAQ4\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-05-05 03:14:18 UTC · (6 months ago)	2a0b:8bc0:2:7640::1 - - [05/May/2026:11:14:18 +0800] "GET /app/.env HTTP/1.1" 200 19012 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ...	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-05-05 02:27:56 UTC · (6 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 expandmade.com	2026-05-04 22:30:35 UTC · (6 months ago)	trolling for installation vulnerabilities [04/May/2026:22:30:35 "GET /api/.env"]	Web App Attack
🇹🇷 baku.hosting	2026-05-04 18:01:39 UTC · (6 months ago)	CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 2a0b:8bc0:2:7640::1 (Unknown): 5 in the last 3600 secs	Brute-Force Web App Attack
🇩🇪 SCHAPPY	2026-05-04 18:00:18 UTC · (6 months ago)	Malicious activity from IP detected: crowdsecurity/http-sensitive-files.	Web App Attack Hacking
🇳🇱 e.fierstra	2026-05-04 16:23:06 UTC · (6 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 211 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:1055:1000:9d1d:475a:f6b8:ea8c

🇨🇳 223.83.131.241

🇺🇸 206.189.185.142

🇮🇷 185.206.92.239

🇺🇸 181.41.206.137

🇻🇳 118.70.182.193

🇨🇦 45.198.224.125

🇩🇪 167.94.145.24

🇺🇸 159.223.107.114

🇺🇸 159.203.176.123

🇧🇩 103.149.56.2

🇳🇱 45.148.10.5

🇷🇴 2.57.121.25

🇬🇧 188.240.59.27

🇩🇪 151.243.11.34

🇨🇳 119.4.109.92

🇳🇬 105.127.16.185

🇮🇩 103.150.92.184

🇳🇱 93.123.109.80

🇵🇱 57.144.111.167