2602:fa59:10:65a::1
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
- ISP
- RouterHosting LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14956
- Domain Name
- cloudzy.com
- Country
- 🇺🇸 United States of America
- City
- Ogden, Utah
No reports in the last 60 days
2602:fa59:10:65a::1 has been reported 183 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
183 from
105 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Jimbo67 |
Cloudflare WAF: 1 hits in 30s | action=block | abuse=suspicious_probe | categories=19 | rule_id=a8325d956f104d2194269f1386e09ef1 | URIs=/.git/config | confidence=0.82
|
Bad Web Bot | |
| 🇨🇭 4server |
|
Hacking Web App Attack | |
| 🇺🇸 Vianpyro |
Honeypot: 6 request(s) in 426 min. Paths: /.git/config. Method(s): GET. UA: Mozilla/5.0 (X11; Linux x86_64). ASN: 14956 (RouterHosting LLC).
|
Web App Attack Bad Web Bot Hacking | |
| 🇲🇽 octageeks.com |
Wordpress malicious attack:[octablocked]
|
Web App Attack | |
| 🇫🇷 Dechavanne |
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack | |
| 🇧🇪 boxed-it |
GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)
|
Web App Attack | |
| Anonymous |
2602:fa59:10:65a::1 - - [26/Jun/2026:10:43:09 +0000] "GET /.git/config HTTP/2.0" 404 122 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
|
Bad Web Bot Web App Attack | |
| Anonymous |
2602:fa59:10:65a::1 - - [26/Jun/2026:12:18:06 +0200] "GET /.git/config HTTP/1.1" 402 4494 "-" "Mozilla/5.0 (X11; Linux x86_64)" ...
|
Web App Attack | |
| 🇺🇸 ambor |
Attack type: wordpress_attack_attempt | Target: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) | Country: US
|
Web App Attack Brute-Force | |
| 🇩🇪 ksol-hostmaster |
2026/06/26 11:45:54 [error] 24813#509977: *347570 access forbidden by rule, client: 2602:fa59:10:65a::1, server: revolutionbim.com, request: "GET /.git/config HTTP/1.1", host: "revolutionbim.com"
...
|
Web Spam | |
| 🇩🇪 IVski.com |
IVski WAF | Sensitive file probe detected - looking for .git
|
Port Scan Brute-Force Web App Attack | |
| Anonymous |
path attack /.git/config
|
Web App Attack | |
| 🇺🇸 ambor |
Honeypot access: Git configuration file access attempt. Path: /.git/config
|
Web App Attack | |
| 🇫🇷 MatStef132 |
MatShield L7: blocked on mathost.eu (suspicious behaviour)
|
DDoS Attack | |
| 🇫🇷 Baking333 |
|
Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown