JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2270:8902::1

2a02:c207:2270:8902::1 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 38%: ?

38%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2708902.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:c207:2270:8902::1

Whois 2a02:c207:2270:8902::1

IP Abuse Reports for 2a02:c207:2270:8902::1:

This IP address has been reported a total of 15 times from 11 distinct sources. 2a02:c207:2270:8902::1 was first reported on May 6th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-15 22:30:16 (2 weeks ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-06-14 22:29:54 (2 weeks ago)		Brute-Force Web App Attack
🇺🇸 WPJoe	2026-06-14 16:51:52 (2 weeks ago)	2a02:c207:2270:8902::1 - - [14/Jun/2026:16:51:51 +0000] "POST /wp-login.php HTTP/1.1" 200 5481 "http ... show more 2a02:c207:2270:8902::1 - - [14/Jun/2026:16:51:51 +0000] "POST /wp-login.php HTTP/1.1" 200 5481 "https://violinbychristine.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 0s 2a02:c207:2270:8902::1 - - [14/Jun/2026:16:51:51 +0000] "POST /wp-login.php HTTP/1.1" 200 5447 "https://violinbychristine.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 0s 2a02:c207:2270:8902::1 - - [14/Jun/2026:16:51:51 +0000] "POST /wp-login.php HTTP/1.1" 200 2880 "https://violinbychristine.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 0s 2a02:c207:2270:8902::1 - - [14/Jun/2026:16:51:51 +0000] "POST /wp-login.php HTTP/1.1" 200 5447 "https://violinbychristine.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/53 ... show less	Web App Attack Brute-Force
🇩🇪 neogenius	2026-06-14 16:14:09 (2 weeks ago)	Web App Attack	Web App Attack Brute-Force
🇩🇪 LRob	2026-06-14 11:00:09 (2 weeks ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 05:50:42 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 2a02:c207:2270:8902::1 (vmi2708902.contaboserve ... show more (mod_security) mod_security (id:225170) triggered by 2a02:c207:2270:8902::1 (vmi2708902.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:50:37.401166 2026] [security2:error] [pid 16991:tid 17000] [client 2a02:c207:2270:8902::1:34152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.busybeerestaurant.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.busybeerestaurant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai5BLWyhduHREqZ1nIw1dQAAAUY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Rexikon	2026-06-14 05:41:29 (2 weeks ago)	2a02:c207:2270:8902::1 - - [14/Jun/2026:07:41:27 +0200] "POST /wp-login.php HTTP/1.1" 200 14736 "htt ... show more 2a02:c207:2270:8902::1 - - [14/Jun/2026:07:41:27 +0200] "POST /wp-login.php HTTP/1.1" 200 14736 "https://psw-konferencja.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2a02:c207:2270:8902::1 - - [14/Jun/2026:07:41:28 +0200] "POST /wp-login.php HTTP/1.1" 200 14776 "https://psw-konferencja.pl/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 2a02:c207:2270:8902::1 - - [14/Jun/2026:07:41:28 +0200] "POST /wp-login.php HTTP/1.1" 200 14756 "https://psw-konferencja.pl/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 2a02:c207:2270:8902::1 - - [14/Jun/2026:07:41:28 +0200] "POST /wp-login.php HTTP/1.1" 200 14736 "https://psw-konferencja.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 2a02:c207:2270:8902::1 - - [14/Jun/2026:07:41:28 +0200] "POST /wp-login.ph ... show less	Brute-Force
🇩🇪 BlueWire Hosting	2026-06-13 22:18:26 (2 weeks ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 conseilgouz	2026-05-21 06:07:25 (1 month ago)	sle-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇩🇪 LRob	2026-05-20 22:45:12 (1 month ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇳🇱 BlueWire Hosting	2026-05-18 23:13:45 (1 month ago)	Wordpress brute force attempt	Brute-Force Web App Attack
🇫🇮 YF	2026-05-18 23:02:43 (1 month ago)	wp-login.php Brute force	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-05-18 19:32:58 (1 month ago)	(y4) Failed scan -byebye- from 2a02:c207:2270:8902::1 (vmi2708902.contaboserver.net): (CF_ENABLE)	Hacking
🇺🇸 TPI-Abuse	2026-05-07 00:55:00 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 2a02:c207:2270:8902::1 (vmi2708902.contaboserve ... show more (mod_security) mod_security (id:225170) triggered by 2a02:c207:2270:8902::1 (vmi2708902.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 20:54:53.234189 2026] [security2:error] [pid 15368:tid 15368] [client 2a02:c207:2270:8902::1:54270] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|portfoliolighting.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "portfoliolighting.net"] [uri "/wp-json/wp/v2/users"] [unique_id "afvi3XikHobghkovf53JrAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-05-06 01:25:03 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.18

🇲🇴 182.93.7.194

🇩🇪 172.68.192.142

🇳🇱 160.119.69.14

🇨🇳 125.46.38.18

🇬🇧 87.236.176.114

🇫🇷 51.159.104.219

🇸🇬 20.212.215.182

🇩🇪 207.154.201.114

🇬🇧 193.163.125.249

🇧🇷 177.138.143.51

🇹🇷 94.154.43.181

🇮🇷 91.92.215.12

🇧🇼 83.143.28.175

🇺🇸 66.154.109.226

🇺🇿 213.230.93.136

🇨🇳 113.116.107.168

🇨🇳 111.35.36.48

🇸🇬 104.248.158.135

🇺🇸 66.132.172.139