JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a02:c207:2265:4159::1

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

36 reports

20 reporters · latest 2 months ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2654159.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a02:c207:2265:4159::1 has been reported 36 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a02:c207:2265:4159::1

Export CSV

This IP address has been reported a total of 36 times from 20 distinct sources. 2a02:c207:2265:4159::1 was first reported on August 17th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-18 22:01:33 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-17. show less	Web App Attack SSH Hacking
Anonymous	2026-08-18 17:01:15 (2 months ago)	2a02:c207:2265:4159::1 - - [18/Aug/2026:14:01:14 -0300] "GET /.git/config HTTP/1.1" 403 1810 "-" "-" ... show more 2a02:c207:2265:4159::1 - - [18/Aug/2026:14:01:14 -0300] "GET /.git/config HTTP/1.1" 403 1810 "-" "-" ... show less	Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host
🇩🇪 stinpriza	2026-08-18 16:55:05 (2 months ago)	common Web Exploits being scanned	Web App Attack
🇵🇱 Budyn	2026-08-18 16:42:03 (2 months ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.teddypot.site \| URI: /.git/config \| UA: Unknown User-Agent \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 vvolpl	2026-08-18 16:27:15 (2 months ago)	fail2ban: banned by jail apache-scanners-2026	Web App Attack
Anonymous	2026-08-18 15:57:15 (2 months ago)	Try to connect to Port_Scan_443_stealth	Port Scan
🇩🇪 Kreapptivo	2026-08-18 15:45:44 (2 months ago)	[18/Aug/2026:17:45:43 +0200] Web-Request: "GET /.git/config", User-Agent: "-"	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 15:41:51 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2265:4159::1 (vmi2654159.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2265:4159::1 (vmi2654159.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 11:41:44.328025 2026] [security2:error] [pid 26163:tid 26163] [client 2a02:c207:2265:4159::1:62988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "borgeschiro.southtahoechurchofchrist.com"] [uri "/.git/config"] [unique_id "aoR9ODjfjZpDuawqkHZOMAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-08-18 15:40:21 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/config \| UA: Empty string • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇲🇾 Rizzy	2026-08-18 15:36:36 (2 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 14:58:14 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2265:4159::1 (vmi2654159.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2265:4159::1 (vmi2654159.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 10:58:08.066885 2026] [security2:error] [pid 18510:tid 18510] [client 2a02:c207:2265:4159::1:60800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ptfea.aquascapes.net"] [uri "/.git/config"] [unique_id "aoRzAFScgsc6nEwPVDiYBQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-08-18 14:14:03 (2 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: show less	Bad Web Bot Web App Attack
🇧🇪 boxed-it	2026-08-18 14:07:45 (2 months ago)	GET /.git/config (Tarpitted for 4m20s, wasted 15.35kB)	Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 13:32:14 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2265:4159::1 (vmi2654159.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2265:4159::1 (vmi2654159.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 09:32:07.499116 2026] [security2:error] [pid 5819:tid 5819] [client 2a02:c207:2265:4159::1:49396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cassialifesci.com"] [uri "/.git/config"] [unique_id "aoRe1zBiRkyyd0R49FoemAAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 13:08:30 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2265:4159::1 (vmi2654159.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2265:4159::1 (vmi2654159.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 09:08:22.929644 2026] [security2:error] [pid 18020:tid 18020] [client 2a02:c207:2265:4159::1:10702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.medpact.net"] [uri "/.git/config"] [unique_id "aoRZRo7EuE64_84a5GCSHAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.222

🇵🇱 176.53.159.198

🇩🇪 167.94.146.42

🇵🇹 85.242.41.58

🇮🇹 82.84.93.163

🇳🇱 77.67.26.43

🇺🇸 70.184.126.57

🇺🇸 70.183.226.57

🇺🇸 40.124.116.160

🇵🇦 179.43.153.10

🇹🇷 176.236.127.114

🇺🇸 174.67.181.96

🇬🇧 172.71.178.76

🇺🇸 136.36.189.65

🇧🇩 114.130.85.36

🇨🇳 111.113.88.196

🇮🇹 93.40.194.189

🇮🇹 93.38.73.191

🇮🇹 87.10.250.237

🇺🇸 38.76.73.5