JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2262:5048::1

2a02:c207:2262:5048::1

Neutral Activity IPv6 SLAAC Note

42 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Contabo GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS51167

Domain Name

contabo.com

Country

🇫🇷 France

City

Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a02:c207:2262:5048::1 has been reported 42 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a02:c207:2262:5048::1:

This IP address has been reported a total of 42 times from 24 distinct sources. 2a02:c207:2262:5048::1 was first reported on July 9th 2025, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Scampi_ml	2026-06-10 13:42:01 (2 months ago)	66x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on ... show more 66x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on web application paths. show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-25 09:52:18 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2262:5048::1 (vmi2625048.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2262:5048::1 (vmi2625048.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 05:52:11.372786 2025] [security2:error] [pid 4125:tid 4125] [client 2a02:c207:2262:5048::1:34328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chblanchard.fr"] [uri "/.env"] [unique_id "aNUQy7Bw4HINXJFLWkX5cQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2025-09-25 07:20:42 (11 months ago)	[2025-09-25 10:20:41] Probing for dotfiles "GET /.env HTTP/1.1" 403	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-09-25 06:23:37 (11 months ago)	146 requests with url.path *.env	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-25 04:45:23 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2262:5048::1 (vmi2625048.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2262:5048::1 (vmi2625048.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 00:45:18.736664 2025] [security2:error] [pid 31507:tid 31507] [client 2a02:c207:2262:5048::1:37976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anenchantingevening.com"] [uri "/.env"] [unique_id "aNTI3qqC4dYxGxy0DPgXuQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 cycastic	2025-09-25 02:37:02 (11 months ago)	Probed /.aws/credentials on 09/25/2025 02:36:09 +00:00 (UA: Mozilla/5.0, Query: ) Probed /.aws/crede ... show more Probed /.aws/credentials on 09/25/2025 02:36:09 +00:00 (UA: Mozilla/5.0, Query: ) Probed /.aws/credentials on 09/25/2025 02:36:08 +00:00 (UA: Mozilla/5.0, Query: ) Probed /vendor/.env on 09/25/2025 02:36:03 +00:00 (UA: Mozilla/5.0, Query: ) Probed /vendor/.env on 09/25/2025 02:36:02 +00:00 (UA: Mozilla/5.0, Query: ) Probed /node-api/.env on 09/25/2025 02:35:58 +00:00 (UA: Mozilla/5.0, Query: ) Probed /node-api/.env on 09/25/2025 02:35:57 +00:00 (UA: Mozilla/5.0, Query: ) Probed /nextjs-app/.env on 09/25/2025 02:35:55 +00:00 (UA: Mozilla/5.0, Query: ) Probed /nextjs-app/.env on 09/25/2025 02:35:54 +00:00 (UA: Mozilla/5.0, Query: ) Probed /library/.env on 09/25/2025 02:35:52 +00:00 (UA: Mozilla/5.0, Query: ) Probed /library/.env on 09/25/2025 02:35:51 +00:00 (UA: Mozilla/5.0, Query: ) show less	Web App Attack
🇫🇷 dynamix	2025-09-24 23:56:49 (11 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-09-24 23:45:36 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2262:5048::1 (vmi2625048.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2262:5048::1 (vmi2625048.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 19:45:30.844514 2025] [security2:error] [pid 30573:tid 30573] [client 2a02:c207:2262:5048::1:52528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "20lessons.com"] [uri "/.env"] [unique_id "aNSCmjxnv7aQAeLuzaF3EAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2025-09-24 22:36:01 (11 months ago)	MYH: Web Attack GET /admin/config?cmd=cat+/root/.aws/credentials	Web Spam Hacking Bad Web Bot Web App Attack
🇳🇱 Site.eu	2025-09-24 22:03:38 (11 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 Micorksen	2025-09-24 21:15:24 (11 months ago)	[24/Sep/2025:23:15:23.136563 +0200] aNRfax3Kw1Ul4OFGijOGtAAAABE 2a02:c207:2262:5048::1 42810 2a10:46 ... show more [24/Sep/2025:23:15:23.136563 +0200] aNRfax3Kw1Ul4OFGijOGtAAAABE 2a02:c207:2262:5048::1 42810 2a10:4646:120::50 7081 [24/Sep/2025:23:15:23.162469 +0200] aNRfax3Kw1Ul4OFGijOGtQAAABI 2a02:c207:2262:5048::1 42822 2a10:4646:120::50 7081 [24/Sep/2025:23:15:23.182883 +0200] aNRfa0KsvMVDOJ95_1S0NAAAAEI 2a02:c207:2262:5048::1 42838 2a10:4646:120::50 7081 [24/Sep/2025:23:15:23.825926 +0200] aNRfa0KsvMVDOJ95_1S0NgAAAEQ 2a02:c207:2262:5048::1 42844 2a10:4646:120::50 7081 [24/Sep/2025:23:15:23.856828 +0200] aNRfa0KsvMVDOJ95_1S0NwAAAEU 2a02:c207:2262:5048::1 42852 2a10:4646:120::50 7081 show less	Exploited Host
🇫🇷 Micorksen	2025-09-24 00:26:44 (11 months ago)	[24/Sep/2025:02:25:45.632053 +0200] aNM6iUKsvMVDOJ95_1Sz4QAAAEs 2a02:c207:2262:5048::1 40758 2a10:46 ... show more [24/Sep/2025:02:25:45.632053 +0200] aNM6iUKsvMVDOJ95_1Sz4QAAAEs 2a02:c207:2262:5048::1 40758 2a10:4646:120::50 7081 [24/Sep/2025:02:26:02.168361 +0200] aNM6mh3Kw1Ul4OFGijOGhQAAAAY 2a02:c207:2262:5048::1 56170 2a10:4646:120::50 7081 [24/Sep/2025:02:26:03.998776 +0200] aNM6m0KsvMVDOJ95_1Sz4gAAAEc 2a02:c207:2262:5048::1 45466 2a10:4646:120::50 7081 [24/Sep/2025:02:26:38.891394 +0200] aNM6vkKsvMVDOJ95_1Sz5AAAAE4 2a02:c207:2262:5048::1 37302 2a10:4646:120::50 7081 [24/Sep/2025:02:26:44.084403 +0200] aNM6xEKsvMVDOJ95_1Sz5QAAAE0 2a02:c207:2262:5048::1 34596 2a10:4646:120::50 7081 show less	Exploited Host
🇳🇱 Mangelot Hosting	2025-09-23 21:36:56 (11 months ago)	(modsecurity) srv104 ModSecurity 2a02:c207:2262:5048::1 (Unknown): 5 in the last 3600 secs; Ports: * ... show more (modsecurity) srv104 ModSecurity 2a02:c207:2262:5048::1 (Unknown): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 Bedios GmbH	2025-09-23 21:05:11 (11 months ago)	Login credentials theft attempt	Hacking
🇺🇸 TPI-Abuse	2025-09-23 16:23:50 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2262:5048::1 (vmi2625048.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2262:5048::1 (vmi2625048.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 12:23:44.640420 2025] [security2:error] [pid 22822:tid 22822] [client 2a02:c207:2262:5048::1:37144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thesunvegan.com"] [uri "/.env"] [unique_id "aNLJkJ0-FrTETlqwVRuPiAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.67.16.206

🇨🇳 106.75.172.202

🇺🇸 2a09:bac5:6d1a:323c::501:3b

🇺🇸 2604:a880:400:d1:0:4:ef8d:6001

🇧🇪 198.235.24.245

🇲🇽 187.189.247.1

🇨🇳 171.120.36.201

🇺🇸 165.154.235.9

🇧🇬 109.160.32.200

🇺🇸 104.22.72.61

🇺🇸 104.22.72.51

🇮🇩 103.172.20.218

🇷🇺 95.84.184.175

🇫🇷 91.231.89.7

🇵🇱 89.67.37.52

🇷🇺 80.234.36.218

🇺🇸 65.49.20.68

🇸🇬 47.237.183.136

🇺🇸 216.25.89.105

🇺🇾 200.40.204.66