JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a02:2b88:2:1::f9e:1

Activity Trending Down IPv6 SLAAC Note

Abuse confidence score ?

14% Caution

93 reports

31 reporters · latest 1 month ago

ISP	WEDOS server hosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197019
Domain Name	wedos.com
Country	🇨🇿 Czechia
City	Ceske Budejovice, South Bohemian Region

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a02:2b88:2:1::f9e:1

Export CSV

This IP address has been reported a total of 93 times from 31 distinct sources. 2a02:2b88:2:1::f9e:1 was first reported on March 10th 2021, and the most recent report was 1 month ago. In the last 60 days, the top reporter locations were: Australia with 1 report; United Kingdom of Great Britain and Northern Ireland with 1 report; Netherlands with 1 report. The most common categories in these recent reports were: Bad Web Bot 3 times; Web App Attack 2 times; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2025-02-21 21:50:04 (1 year ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2025-02-21 21:48:23 (1 year ago)	2025/02/21 22:48:23 [error] 67959#103022: 78131 limiting requests, excess: 0.655 by zone "crawler", ... show more 2025/02/21 22:48:23 [error] 67959#103022: 78131 limiting requests, excess: 0.655 by zone "crawler", client: 2a02:2b88:2:1::f9e:1, server: new.hondaforum.hu, request: "GET /do-not-scrape/ HTTP/1.1", host: "new.hondaforum.hu" ... show less	Bad Web Bot
🇳🇱 BlueWire Hosting	2025-02-17 21:10:03 (1 year ago)	Detected as a bad bot	Bad Web Bot
🇳🇱 Roderic	2025-02-11 18:05:59 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2a02:2b88:2:1::f9e:1 ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2a02:2b88:2:1::f9e:1 (CZ/Czechia/-) show less	Bad Web Bot
🇳🇱 BlueWire Hosting	2025-01-26 15:10:14 (1 year ago)	Detected as a bad bot	Bad Web Bot
🇳🇱 Roderic	2025-01-02 16:06:35 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2a02:2b88:2:1::f9e:1 ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2a02:2b88:2:1::f9e:1 (CZ/Czechia/-) show less	Bad Web Bot
Anonymous	2024-11-20 10:46:21 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇳🇱 Roderic	2024-07-28 02:02:10 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2a02:2b88:2:1::f9e:1 ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2a02:2b88:2:1::f9e:1 (CZ/Czechia/-) show less	Bad Web Bot
🇫🇷 Murazaki	2024-05-24 22:02:51 (2 years ago)	lemmy.balamb.fr 2a02:2b88:2:1::f9e:1 - - [24/May/2024:10:51:24 +0200] "GET /robots.txt HTTP/1.1" 200 ... show more lemmy.balamb.fr 2a02:2b88:2:1::f9e:1 - - [24/May/2024:10:51:24 +0200] "GET /robots.txt HTTP/1.1" 200 300 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.33:80" lemmy.balamb.fr 2a02:2b88:2:1::f9e:1 - - [24/May/2024:10:51:26 +0200] "GET /c/[email protected] HTTP/1.1" 500 25911 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.33:80" lemmy.balamb.fr 2a02:2b88:2:1::f9e:1 - - [24/May/2024:10:51:28 +0200] "GET /comment/163922 HTTP/1.1" 200 17817 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.33:80" lemmy.balamb.fr 2a02:2b88:2:1::f9e:1 - - [24/May/2024:10:51:32 +0200] "GET /comment/166353 HTTP/1.1" 200 23989 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.33:80" lemmy.balamb.fr 2a02:2b88:2:1::f9e:1 - - [24/May/2024:10:51:34 +0200] "GET /comment/167413 HTTP/1.1" 200 20272 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.33:80" ... show less	Bad Web Bot
🇳🇱 Roderic	2024-05-02 21:52:35 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2a02:2b88:2:1::f9e:1 ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 2a02:2b88:2:1::f9e:1 (CZ/Czechia/-) show less	Bad Web Bot
🇩🇪 Hazzard	2024-04-29 19:21:15 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇲🇾 Rizzy	2024-03-30 14:16:51 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2023-12-18 11:12:37 (2 years ago)	(mod_security) mod_security (id:210381) triggered by 2a02:2b88:2:1::f9e:1 (saggita.niniel.eu): 1 in ... show more (mod_security) mod_security (id:210381) triggered by 2a02:2b88:2:1::f9e:1 (saggita.niniel.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 18 06:12:33.273571 2023] [security2:error] [pid 15002:tid 47923322701568] [client 2a02:2b88:2:1::f9e:1:30576] [client 2a02:2b88:2:1::f9e:1] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.aeaus.com\|F\|4"] [data "REQUEST_URI=/%RESULTSURL%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.aeaus.com"] [uri "/%RESULTSURL%"] [unique_id "ZYApIUF5WGkefVyVpQI7ZQAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-26 03:23:09 (2 years ago)	(mod_security) mod_security (id:210381) triggered by 2a02:2b88:2:1::f9e:1 (saggita.niniel.eu): 1 in ... show more (mod_security) mod_security (id:210381) triggered by 2a02:2b88:2:1::f9e:1 (saggita.niniel.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 25 22:23:01.262858 2023] [security2:error] [pid 21030] [client 2a02:2b88:2:1::f9e:1:63928] [client 2a02:2b88:2:1::f9e:1] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Not enough characters at the end of input at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.jcrluthier.com\|F\|4"] [data "REQUEST_URI=/Guitars In Stock/Telecaster Vintage White -%2"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jcrluthier.com"] [uri "/Guitars In Stock/Telecaster Vintage White -%2"] [unique_id "ZWK6FTJ_VJ7M3GI_ed2oFAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ALSCO®️	2023-11-11 22:00:58 (2 years ago)	Report By ALSCO Security Team: Suspicious File Upload Attempt	SQL Injection

Showing 46 to 60 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.197.162.73

🇦🇷 186.61.89.219

🇦🇿 185.146.113.64

🇺🇸 185.92.188.246

🇳🇱 172.71.102.61

🇭🇰 113.10.158.122

🇫🇷 85.217.140.37

🇵🇱 77.91.65.132

🇷🇺 31.184.195.246

🇺🇸 216.25.89.113

🇺🇦 178.165.71.12

🇫🇷 109.123.243.121

🇵🇱 94.154.21.238

🇵🇱 77.91.122.5

🇺🇸 76.129.23.151

🇺🇸 69.42.211.48

🇺🇸 45.3.35.180

🇺🇸 20.168.122.51

🇧🇷 201.139.186.238

🇭🇰 110.4.0.34