JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0b:8bc0:2:807c::1

2a0b:8bc0:2:807c::1 was found in our database!

This IP was reported 472 times. Confidence of Abuse is 7%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0b:8bc0:2:807c::1

Whois 2a0b:8bc0:2:807c::1

IP Abuse Reports for 2a0b:8bc0:2:807c::1:

This IP address has been reported a total of 472 times from 164 distinct sources. 2a0b:8bc0:2:807c::1 was first reported on April 27th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mibbsdevs	2026-08-17 21:36:57 (2 months ago)	Web Exploit Trap: Vulnerability scanner, SQLi, or sensitive file search (.env, wp-config).	Hacking SQL Injection Bad Web Bot
🇦🇺 Klaverstyn	2026-08-17 20:07:41 (2 months ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking
🇫🇷 MatStef132	2026-08-17 19:22:23 (2 months ago)	MatShield L7: blocked on mathost.eu (suspicious behaviour)	DDoS Attack
🇫🇷 dynamix	2026-08-17 19:13:36 (2 months ago)	Multiple WAF Violations	Web App Attack
🇵🇱 Budyn	2026-08-17 17:37:39 (2 months ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.teddypot.store \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-17 13:32:05 (2 months ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.dont-eat-the-pudding.xyz \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-17 09:30:26 (2 months ago)	[MonAug1711:30:21.6959392026][security2:error][pid1583173:tid1583188][client2a0b:8bc0:2:807c::1:0]Mo ... show more [MonAug1711:30:21.6959392026][security2:error][pid1583173:tid1583188][client2a0b:8bc0:2:807c::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"b4consulting.ch\"][uri\"/.git/HEAD\"][unique_id\"aoLUrTfVJUz2UOpAqNI9agAAAQw\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 FD-IX	2026-08-17 08:57:44 (2 months ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇫🇷 [email protected]	2026-08-17 05:36:43 (2 months ago)	PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (Abuse ... show more PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (AbuseIPDB score: 100% (cached)) show less	Web App Attack
🇺🇸 c y	2026-08-17 04:12:47 (2 months ago)	Security Monitor detected: sensitive_path_access	Port Scan
🇩🇪 Grossmann-Gruppe	2026-08-17 00:06:36 (2 months ago)	Plesk Fail2Ban: plesk-modsecurity	Hacking Brute-Force
🇩🇪 TheDjRider	2026-08-16 18:26:08 (2 months ago)	CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ... show more CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-08-16T18:26:06.802061227Z. Context: http_status=302 show less	Web App Attack
🇩🇪 gadix	2026-08-16 13:34:32 (2 months ago)	[16/Aug/2026:15:34:29.332591 +0200] aoG8ZTtvAwvjKQDLvNmSjAAAAFI 2a0b:8bc0:2:807c::1 48150 127.0.0.1 ... show more [16/Aug/2026:15:34:29.332591 +0200] aoG8ZTtvAwvjKQDLvNmSjAAAAFI 2a0b:8bc0:2:807c::1 48150 127.0.0.1 7081 [16/Aug/2026:15:34:30.303412 +0200] aoG8ZjtvAwvjKQDLvNmSjgAAAFY 2a0b:8bc0:2:807c::1 48174 127.0.0.1 7081 [16/Aug/2026:15:34:30.789798 +0200] aoG8ZjtvAwvjKQDLvNmSkQAAAEE 2a0b:8bc0:2:807c::1 48192 127.0.0.1 7081 ... show less	Web App Attack
🇺🇸 Vianpyro	2026-08-16 13:31:33 (2 months ago)	Honeypot: 30 request(s) in 0 min. Paths: /, /.git/HEAD, /.env, /env, /.env.local. Method(s): HEAD,GE ... show more Honeypot: 30 request(s) in 0 min. Paths: /, /.git/HEAD, /.env, /env, /.env.local. Method(s): HEAD,GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0. ASN: 41608 (NextGenWebs, S.L.). show less	Web App Attack Bad Web Bot Hacking
🇳🇱 thedreamer.nl	2026-08-16 10:36:15 (2 months ago)	2a0b:8bc0:2:807c::1 - - [16/Aug/2026:12:35:04 +0200] "GET /.git/HEAD HTTP/1.1" 502 552 "-" "Mozilla/ ... show more 2a0b:8bc0:2:807c::1 - - [16/Aug/2026:12:35:04 +0200] "GET /.git/HEAD HTTP/1.1" 502 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" "ES" "-" "40.41720" "-3.68400" 2a0b:8bc0:2:807c::1 - - [16/Aug/2026:12:35:04 +0200] "GET /.env HTTP/1.1" 502 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "ES" "-" "40.41720" "-3.68400" 2a0b:8bc0:2:807c::1 - - [16/Aug/2026:12:35:05 +0200] "GET /.env.production HTTP/1.1" 502 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" "ES" "-" "40.41720" "-3.68400" 2a0b:8bc0:2:807c::1 - - [16/Aug/2026:12:35:05 +0200] "GET /.env.local HTTP/1.1" 502 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "ES" "-" "40.41720" "-3.68400" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack

Showing 31 to 45 of 472 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.44

🇭🇰 202.55.17.42

🇦🇷 186.96.196.69

🇳🇱 185.136.15.16

🇧🇷 170.233.199.176

🇫🇷 138.124.91.246

🇰🇷 125.246.95.152

🇷🇺 46.191.141.152

🇸🇬 43.173.180.149

🇧🇪 34.38.237.247

🇸🇦 2.90.94.93

🇨🇳 1.193.63.220

🇨🇳 220.181.84.76

🇺🇸 216.25.89.157

🇳🇱 195.178.110.30

🇳🇱 193.176.31.150

🇵🇰 182.190.217.39

🇺🇸 172.56.211.178

🇮🇶 169.224.116.221

🇺🇸 162.216.150.98