JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2602:fa59:10:2ef::1

2602:fa59:10:2ef::1 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 42%: ?

42%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Domain Name	cloudzy.com
Country	🇺🇸 United States of America
City	Ogden, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2602:fa59:10:2ef::1

Whois 2602:fa59:10:2ef::1

IP Abuse Reports for 2602:fa59:10:2ef::1:

This IP address has been reported a total of 65 times from 39 distinct sources. 2602:fa59:10:2ef::1 was first reported on June 8th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-09-14 06:00:27 (5 days ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇧🇪 cmbplf	2026-09-14 05:34:38 (5 days ago)	161 requests with url.path .git/	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-14 05:34:36 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 01:34:27.196578 2026] [security2:error] [pid 31206:tid 31206] [client 2602:fa59:10:2ef::1:45724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dyslexiaspecialistsonline.com"] [uri "/.git/HEAD"] [unique_id "aqeHYy1dbUp8GMc98VmDpQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-09-14 04:55:48 (5 days ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 04:48:30 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 00:48:22.105149 2026] [security2:error] [pid 3682:tid 3682] [client 2602:fa59:10:2ef::1:60912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerielster.com"] [uri "/.git/HEAD"] [unique_id "aqd8loLGq0toVYgAoCFnkwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 04:29:54 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 00:29:45.991171 2026] [security2:error] [pid 19975:tid 19975] [client 2602:fa59:10:2ef::1:58868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theledman.com"] [uri "/.git/HEAD"] [unique_id "aqd4OYDal9c_t8LkWndf-QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-09-14 04:16:27 (5 days ago)	Try to access /.git/HEAD	Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 04:09:28 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 00:09:20.866402 2026] [security2:error] [pid 9113:tid 9113] [client 2602:fa59:10:2ef::1:38442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clubfansite.com"] [uri "/.git/HEAD"] [unique_id "aqdzcHwTHfyFiBrlicUaIwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-14 04:02:27 (5 days ago)	[14/Sep/2026:07:02:24 +0300] 178935854481.680812 2602:fa59:10:2ef::1 50234 2a01:4f8:202:41d3::2 443 ... show more [14/Sep/2026:07:02:24 +0300] 178935854481.680812 2602:fa59:10:2ef::1 50234 2a01:4f8:202:41d3::2 443 [14/Sep/2026:07:02:27 +0300] 178935854746.662839 2602:fa59:10:2ef::1 50248 2a01:4f8:202:41d3::2 443 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 03:25:29 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 23:25:22.547166 2026] [security2:error] [pid 31410:tid 31410] [client 2602:fa59:10:2ef::1:39554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thetallships.com"] [uri "/.git/HEAD"] [unique_id "aqdpIugGL61SvkRQdjkOjgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 03:07:48 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2602:fa59:10:2ef::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 23:07:43.540042 2026] [security2:error] [pid 23460:tid 23460] [client 2602:fa59:10:2ef::1:34874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anthearodgers.com"] [uri "/.git/HEAD"] [unique_id "aqdk__TESqu67cNyCH4zfAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-31 05:24:42 (1 month ago)	[FriJul3107:24:37.5323122026][security2:error][pid3931507:tid3931585][client2602:fa59:10:2ef::1:0]Mo ... show more [FriJul3107:24:37.5323122026][security2:error][pid3931507:tid3931585][client2602:fa59:10:2ef::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autoconfig.ksmstudio.ch\"][uri\"/\"][unique_id\"amwxlcu2MWIn5hzUSdFFlAAAAJA\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-07-24 04:34:32 (1 month ago)	[FriJul2406:34:17.4246972026][security2:error][pid2547670:tid2547704][client2602:fa59:10:2ef::1:0]Mo ... show more [FriJul2406:34:17.4246972026][security2:error][pid2547670:tid2547704][client2602:fa59:10:2ef::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"beyondsecurity.ch\"][uri\"/\"][unique_id\"amLrSWGwV3Ot-5huoIiaOQAAARc\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 Lezetho	2026-07-22 02:00:34 (1 month ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇳🇱 Nrbrtkls	2026-06-30 07:13:28 (2 months ago)	Vulnerability scanner blocked (444 response)	Bad Web Bot Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 172.70.163.18

🇸🇬 47.84.143.68

🇧🇷 179.63.113.196

🇸🇦 178.81.11.97

🇭🇰 152.32.190.42

🇮🇳 117.244.249.67

🇷🇺 109.195.193.207

🇺🇸 91.230.168.251

🇮🇷 87.107.195.51

🇸🇬 47.84.136.253

🇸🇬 43.156.33.17

🇬🇧 35.203.211.131

🇮🇳 34.100.186.34

🇺🇸 20.169.91.24

🇧🇷 189.50.142.82

🇳🇱 185.93.89.39

🇲🇾 175.137.146.151

🇨🇴 148.222.199.0

🇺🇸 104.29.152.100

🇩🇪 64.226.110.44