JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2602:fa59:10:521::1

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

100% Critical

241 reports

124 reporters · latest 1 hour ago

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Domain Name	cloudzy.com
Country	🇺🇸 United States of America
City	Ogden, Utah

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2602:fa59:10:521::1

Export CSV

This IP address has been reported a total of 241 times from 124 distinct sources. 2602:fa59:10:521::1 was first reported on October 8th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 54 reports; Germany with 48 reports; France with 43 reports. The most common categories in these recent reports were: Web App Attack 192 times; Bad Web Bot 113 times; Brute-Force 42 times; Hacking 39 times; Port Scan 9 times; Other 11 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1gz	2026-10-12 07:35:21 (1 hour ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (X11; Linux x86_64) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 MatStef132	2026-10-12 06:58:34 (1 hour ago)	MatShield L7: blocked on prostream.matland.eu (secret-path-probe)	DDoS Attack
🇩🇪 XICTRON	2026-10-12 06:55:08 (1 hour ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇩🇪 IVski.com	2026-10-12 06:48:26 (2 hours ago)	IVski WAF \| Sensitive file probe - looking for exposed .git/config	Hacking Brute-Force Web App Attack
🇫🇷 arsonist	2026-10-12 06:48:10 (2 hours ago)	[fail2ban] 2026-10-12T06:48:09.864139+00:00 arson caddy[1697]: {"level":"info","ts":1791787689.86411 ... show more [fail2ban] 2026-10-12T06:48:09.864139+00:00 arson caddy[1697]: {"level":"info","ts":1791787689.8641152,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"2602:fa59:10:521::1","remote_port":"38316","client_ip":"2602:fa59:10:521::1","proto":"HTTP/1.1","method":"GET","host":"p.arson.gg","uri":"/.git/config","headers":{"User-Agent":["Mozilla/5.0 (X11; Linux x86_64)"],"Accept-Encoding":["gzip"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"p.arson.gg","ech":false}},"bytes_read":0,"user_id":"","duration":0.000084048,"size":7,"status":467,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"],"Server":["Caddy"]}} ... show less	Bad Web Bot
🇺🇸 mawan	2026-10-12 06:23:53 (2 hours ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
Anonymous	2026-10-12 05:24:27 (3 hours ago)	Malicious activity detected by fail2ban (jail=honeypot)	Hacking Web App Attack
🇪🇸 el-brujo	2026-10-12 05:17:04 (3 hours ago)	Cloudflare WAF: Request Path: /.git/config Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /.git/config Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) Action: block Source: firewallCustom ASN Description: RouterHosting LLC Country: US Method: GET Timestamp: 2026-10-12T05:17:04Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇺🇸 Vano Ganzzz	2026-10-12 05:15:36 (3 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14956 (RouterHosting LLC ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14956 (RouterHosting LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-10-12T05:15:36Z Ray ID: a493a0b12f26c89a UA: Mozilla/5.0 (X11; Linux x86_64) show less	Bad Web Bot
🇩🇪 thesimonmanuel	2026-10-12 04:36:16 (4 hours ago)	2602:fa59:10:521::1 - - [12/Oct/2026:10:06:16 +0530] "GET /.git/config HTTP/2.0" 404 87 "-" "Mozilla ... show more 2602:fa59:10:521::1 - - [12/Oct/2026:10:06:16 +0530] "GET /.git/config HTTP/2.0" 404 87 "-" "Mozilla/5.0 (X11; Linux x86_64)" "2602:fa59:10:521::1" show less	Web App Attack
Anonymous	2026-10-12 04:23:38 (4 hours ago)	WAF: blocked at the CDN edge: Polygon: block exploit probes /.git/config	Web App Attack Hacking
🇳🇱 e.fierstra	2026-10-12 04:20:35 (4 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-10-12 03:55:50 (4 hours ago)	[redacted] 2602:fa59:10:521::1 - - [12/Oct/2026:04:55:47 +0100] "GET /.git/config HTTP/1.1" 302 6763 ... show more [redacted] 2602:fa59:10:521::1 - - [12/Oct/2026:04:55:47 +0100] "GET /.git/config HTTP/1.1" 302 6763 0/33176 "-" "Mozilla/5.0 (X11; Linux x86_64)" 443 [redacted] 2602:fa59:10:521::1 - - [12/Oct/2026:04:55:49 +0100] "GET / HTTP/1.1" 200 13592 0/75560 "https://[redacted]/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" 443 show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-12 03:51:42 (4 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.budyn.ovh \| URI: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-10-11 23:57:50 (8 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack

Showing 1 to 15 of 241 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 203.142.5.121

🇫🇮 147.185.133.101

🇺🇸 34.139.230.216

🇮🇳 2401:4900:1c44:878b:68bc:92f5:3f77:652b

🇬🇧 217.154.32.149

🇮🇹 195.81.181.126

🇧🇷 179.111.150.75

🇵🇱 176.53.159.198

🇭🇰 159.138.131.188

🇬🇧 134.122.106.248

🇺🇸 132.196.60.168

🇨🇳 111.9.22.102

🇨🇳 110.185.161.56

🇺🇸 87.56.22.2

🇺🇸 74.94.234.151

🇬🇧 35.203.211.131

🇯🇵 34.85.124.160

🇵🇰 2407:aa80:15:47a0:3875:f80:ae8f:3c41

🇸🇬 202.70.132.176

🇺🇸 192.178.6.66