This IP was reported 127 times. Confidence of
Abuse
is 100%: ?
100%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
127
times from
88 distinct
sources.
2602:fa59:10:ff2::1 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Automatically blocked after 3 security events. Observed repeated web application attack probes. Sour ...
show moreAutomatically blocked after 3 security events. Observed repeated web application attack probes. Source: Cloudflare security controls.
show less
[11/Aug/2026:18:11:00 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (X11; Linux x ...
show more[11/Aug/2026:18:11:00 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (X11; Linux x86_64)"
show less
[TueAug1117:17:43.0813972026][security2:error][pid2061336:tid2061360][client2602:fa59:10:ff2::1:0]Mo ...
show more[TueAug1117:17:43.0813972026][security2:error][pid2061336:tid2061360][client2602:fa59:10:ff2::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"worldgoldfundltd.com\"][uri\"/.git/config\"][unique_id\"ans9F8MHmx9cZGfD03qo-QAAAJU\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
2602:fa59:10:ff2::1 - - [11/Aug/2026:23:06:40 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozill ...
show more2602:fa59:10:ff2::1 - - [11/Aug/2026:23:06:40 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
[TueAug1115:47:21.8635282026][security2:error][pid313068:tid313400][client2602:fa59:10:ff2::1:0]ModS ...
show more[TueAug1115:47:21.8635282026][security2:error][pid313068:tid313400][client2602:fa59:10:ff2::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"465\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"whatsdecor.ch\"][uri\"/.git/config\"][unique_id\"ansn6WwKDh6lh4YOmEfwmgAAAQk\"]
show less