JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2602:fa59:10:3df::1

2602:fa59:10:3df::1 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Domain Name	cloudzy.com
Country	🇺🇸 United States of America
City	Ogden, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2602:fa59:10:3df::1

Whois 2602:fa59:10:3df::1

IP Abuse Reports for 2602:fa59:10:3df::1:

This IP address has been reported a total of 97 times from 65 distinct sources. 2602:fa59:10:3df::1 was first reported on October 26th 2026, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Baking333	2026-10-27 17:40:27 (18 minutes ago)	[redacted] 2602:fa59:10:3df::1 - - [27/Oct/2026:18:40:25 +0100] "GET /.git/config HTTP/1.1" 302 6751 ... show more [redacted] 2602:fa59:10:3df::1 - - [27/Oct/2026:18:40:25 +0100] "GET /.git/config HTTP/1.1" 302 6751 0/57792 "http://[redacted]/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" 443 [redacted] 2602:fa59:10:3df::1 - - [27/Oct/2026:18:40:25 +0100] "GET / HTTP/1.1" 200 14800 0/236689 "https://[redacted]/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" 443 show less	Bad Web Bot Web App Attack
Anonymous	2026-10-27 17:38:39 (20 minutes ago)	2602:fa59:10:3df::1 - - [27/Oct/2026:17:38:38 +0000] "GET /.git/config HTTP/1.1" 503 5350 "-" "Mozil ... show more 2602:fa59:10:3df::1 - - [27/Oct/2026:17:38:38 +0000] "GET /.git/config HTTP/1.1" 503 5350 "-" "Mozilla/5.0 (X11; Linux x86_64)" ... show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-27 17:38:27 (20 minutes ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: elastic.astropot.space \| URI: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"2602:fa59:10:3df::1","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51379744f2cae43-LAX","Connection":"Keep-Alive","Referer":"http:\/\/elastic.astropot.space\/.git\/config","Accept-Encoding":"gzip, br","X-Forwarded-For":"2602:fa59:10:3df::1"} show less	Bad Web Bot Web App Attack
🇩🇪 Mr-Money	2026-10-27 17:15:41 (43 minutes ago)	scenario: crowdsecurity/modsecurity - events: 1 - Matched Data: .git/ found within REQUEST_FILENAME: ... show more scenario: crowdsecurity/modsecurity - events: 1 - Matched Data: .git/ found within REQUEST_FILENAME: /.git/config show less	Web App Attack
🇩🇪 webko.si	2026-10-27 17:15:33 (43 minutes ago)	DKK: Bruteforce web app access, URI detail: '/.git/config'.	Web App Attack
🇩🇪 Hary74656	2026-10-27 17:15:28 (43 minutes ago)	Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1. [client 2602:fa59:10:3df::1] [real ... show more Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1. [client 2602:fa59:10:3df::1] [realclient 2602:fa59:10:3df::1] [27/Oct/2026:18:15:27 +0100] [vhost dominex.aschi.at] 403 "GET /.git/config HTTP/1.1" show less	Web App Attack
🇩🇪 VonderWulf	2026-10-27 16:38:12 (1 hour ago)	Observed GET /.git/config on TCP/443 at 2026-10-26T20:50:03+01:00; WAF returned HTTP 403 and Fail2Ba ... show more Observed GET /.git/config on TCP/443 at 2026-10-26T20:50:03+01:00; WAF returned HTTP 403 and Fail2Ban banned this source. Correlated 1 audit transaction(s) to the source address. show less	Web App Attack
Anonymous	2026-10-27 16:37:12 (1 hour ago)	Scanner hitting /.git/config on (CLOUDZY-01) — aaguard	Brute-Force Port Scan
🇺🇸 Charlesiv	2026-10-27 16:00:31 (1 hour ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14956 (RouterHosting LLC ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14956 (RouterHosting LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-10-27T14:44:02Z Ray ID: a51279fcefbf55f7 UA: Mozilla/5.0 (X11; Linux x86_64) show less	Bad Web Bot
🇮🇹 VHosting	2026-10-27 15:35:04 (2 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇵🇱 Budyn	2026-10-27 15:17:08 (2 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.astropot.tech \| URI: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"2602:fa59:10:3df::1","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a512aa756eb8a609-LAX","Connection":"Keep-Alive","Referer":"http:\/\/cloud.astropot.tech\/.git\/config","Accept-Encoding":"gzip, br","X-Forwarded-For":"2602:fa59:10:3df::1"} show less	Bad Web Bot Web App Attack
🇫🇮 toolbit.online	2026-10-27 15:07:09 (2 hours ago)	Repeated HTTP probing consistent with opportunistic internet scanning - 2 matching requests detected ... show more Repeated HTTP probing consistent with opportunistic internet scanning - 2 matching requests detected within 24 minutes. Not banned: stayed below automatic ban thresholds. show less	Bad Web Bot Web App Attack
🇩🇪 on-com	2026-10-27 14:54:43 (3 hours ago)	URL scan	Brute-Force Web App Attack
🇨🇦 Anytech	2026-10-27 14:40:35 (3 hours ago)	Blocked by ConnMonitor	Web App Attack
Anonymous	2026-10-27 14:34:10 (3 hours ago)	Fail2Ban triggered	Web App Attack

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.241.153.173

🇹🇭 125.25.231.197

🇨🇳 124.74.97.18

🇩🇪 109.160.32.165

🇸🇪 81.229.58.214

🇺🇸 70.89.116.5

🇩🇪 64.89.160.135

🇳🇱 45.148.10.121

🇺🇸 45.79.103.169

🇮🇳 35.244.32.167

🇺🇸 34.228.104.231

🇺🇸 161.35.9.12

🇺🇸 103.144.3.181

🇩🇪 87.106.29.151

🇷🇺 80.251.156.20

🇳🇱 77.239.124.33

🇩🇪 68.183.213.71

🇫🇷 37.67.127.136

🇰🇷 220.116.117.213

🇧🇷 200.229.243.153