This IP address has been reported a total of
472
times from
163 distinct
sources.
2a0b:8bc0:2:807c::1 was first reported on
April 27th 2026 , and the most recent report was
2 days ago United States of America
with 2
reports.
The only category in these recent reports was:
Port Scan
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-04-27 17:50:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 13:50:28.825959 2026] [security2:error] [pid 30894:tid 30894] [client 2a0b:8bc0:2:807c::1:40194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.connectigramme.com"] [uri "/.env"] [unique_id "ae-h5LkdNkATNWyilHSWRQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Isha
2026-04-27 17:42:37
(6 months ago)
Shield Guard: Honeypot: /.env.backup
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 17:22:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 13:22:36.408665 2026] [security2:error] [pid 20752:tid 20752] [client 2a0b:8bc0:2:807c::1:65412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.zenithxen.com"] [uri "/.env"] [unique_id "ae-bXC7JmtD18fFH58TaGwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 16:55:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 12:55:31.226826 2026] [security2:error] [pid 2237:tid 2237] [client 2a0b:8bc0:2:807c::1:5834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilanknapp.com"] [uri "/.env"] [unique_id "ae-VA8R__MHp3jHWGdgxlAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 16:25:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 12:25:16.800809 2026] [security2:error] [pid 14442:tid 14442] [client 2a0b:8bc0:2:807c::1:36376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justkoolit.com"] [uri "/.env"] [unique_id "ae-N7JKzTgeWc9_uXsaYaQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-04-27 16:12:34
(6 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 16:09:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:807c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 12:09:31.682746 2026] [security2:error] [pid 18424:tid 18424] [client 2a0b:8bc0:2:807c::1:1300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.palmatrader.com"] [uri "/.env"] [unique_id "ae-KO73ZKMUyPNRugEbz9gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 466 to
472
of 472 reports
