JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a0b:8bc0:2:dc22::1

Neutral Activity IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

183 reports

82 reporters · latest 4 months ago

ISP: NextGenWebs, S.L.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS41608
Domain Name: nextgenwebs.es
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a0b:8bc0:2:dc22::1 has been reported 183 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

183 from 82 distinct reporters

First reported

April 16th 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 BlueWire Hosting	2026-04-16 20:46:54 UTC · (6 months ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
Anonymous	2026-04-16 20:37:30 UTC · (6 months ago)	2a0b:8bc0:2:dc22::1 - - [16/Apr/2026:20:37:29 +0000] "GET /.env.local HTTP/1.1" 404 49411 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 20:13:38 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 16:13:32.750068 2026] [security2:error] [pid 3390206:tid 3390230] [client 2a0b:8 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 16:13:32.750068 2026] [security2:error] [pid 3390206:tid 3390230] [client 2a0b:8bc0:2:dc22::1:7882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sellmantitle.com"] [uri "/.env.local"] [unique_id "aeFC7OGhwMiAJ-f3-9dTtQAAAVY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 agenciahypelab.com.br	2026-04-16 20:06:36 UTC · (6 months ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-04-16 19:48:14 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 15:48:08.184536 2026] [security2:error] [pid 1312588:tid 1312588] [client 2a0b:8 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 15:48:08.184536 2026] [security2:error] [pid 1312588:tid 1312588] [client 2a0b:8bc0:2:dc22::1:29968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humanicelement.com"] [uri "/api/.env"] [unique_id "aeE8-BtkmEwcDu33b18VJQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 18:23:54 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 14:23:49.483971 2026] [security2:error] [pid 3764248:tid 3764248] [client 2a0b:8 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 14:23:49.483971 2026] [security2:error] [pid 3764248:tid 3764248] [client 2a0b:8bc0:2:dc22::1:29300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "48consultancy.com"] [uri "/laravel/.env"] [unique_id "aeEpNcDj2P_p9TEFtM77NwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2026-04-16 18:19:10 UTC · (6 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 18:02:53 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 14:02:47.886443 2026] [security2:error] [pid 3222915:tid 3222915] [client 2a0b:8 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 14:02:47.886443 2026] [security2:error] [pid 3222915:tid 3222915] [client 2a0b:8bc0:2:dc22::1:59556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "printorganic.com"] [uri "/.env.local"] [unique_id "aeEkR-fNep4lNiUpdzYOtwAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-04-16 15:39:18 UTC · (6 months ago)	CrowdSec-Report: crowdsecurity/http-sensitive-files	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 15:13:06 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 11:12:58.507046 2026] [security2:error] [pid 46682:tid 46682] [client 2a0b:8bc0: ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 11:12:58.507046 2026] [security2:error] [pid 46682:tid 46682] [client 2a0b:8bc0:2:dc22::1:26510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "littlebiglebanon.com"] [uri "/.env"] [unique_id "aeD8ejj-7F_BfHTcgyF0lAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 14:56:54 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 10:56:49.311365 2026] [security2:error] [pid 808189:tid 808189] [client 2a0b:8bc ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 10:56:49.311365 2026] [security2:error] [pid 808189:tid 808189] [client 2a0b:8bc0:2:dc22::1:5952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heytechiesshow.com"] [uri "/api/.env"] [unique_id "aeD4sa1dcfuXq2X6VWoA4AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-04-16 13:00:19 UTC · (6 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-16 12:49:07 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 08:49:00.913640 2026] [security2:error] [pid 3280644:tid 3280644] [client 2a0b:8 ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 08:49:00.913640 2026] [security2:error] [pid 3280644:tid 3280644] [client 2a0b:8bc0:2:dc22::1:24624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "akmanoto.com"] [uri "/app/.env"] [unique_id "aeDavAI450Ds-boPM-XTuwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-04-16 12:15:18 UTC · (6 months ago)	Automated probe detected by Ody Sentinel / WellSpr.ing. Type: env_leak. Path: /app/.env. Auto-blocked after threshold exceeded. Dossier: https://wellspr.ing/dossier/sentinel-2a0b-8bc0-2-dc22--1	Web App Attack
🇫🇷 Bensay	2026-04-16 12:03:18 UTC · (6 months ago)	[Thu Apr 16 14:03:17.787700 2026] [authz_core:error] [pid 1361:tid 1368] [client 2a0b:8bc0:2:dc22::1:60064] AH01630: client denied by server configuration: /var/www/empty/ [Thu Apr 16 14:03:18.284779 2026] [authz_core:error] [pid 1361:tid 1403] [clie ... show more [Thu Apr 16 14:03:17.787700 2026] [authz_core:error] [pid 1361:tid 1368] [client 2a0b:8bc0:2:dc22::1:60064] AH01630: client denied by server configuration: /var/www/empty/ [Thu Apr 16 14:03:18.284779 2026] [authz_core:error] [pid 1361:tid 1403] [client 2a0b:8bc0:2:dc22::1:42372] AH01630: client denied by server configuration: /var/www/empty/ ... show less	Hacking Bad Web Bot Web App Attack

Showing 136 to 150 of 183 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 190.108.78.182

🇫🇮 157.22.19.90

🇳🇱 86.38.187.123

🇱🇹 77.90.185.226

🇧🇪 35.187.73.252

🇳🇱 213.209.159.25

🇩🇪 167.94.146.47

🇨🇳 117.27.135.86

🇺🇸 100.35.237.42

🇬🇧 81.19.219.210

🇪🇨 45.70.15.213

🇺🇸 5.181.170.102

🇳🇱 193.47.62.98

🇪🇸 188.26.209.184

🇵🇭 103.132.168.89

🇳🇱 86.38.187.200

🇮🇶 65.20.189.52

🇧🇪 34.79.135.70

🇺🇸 24.25.220.181

🇻🇳 171.244.39.95