JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2280:5477::1

2a02:c207:2280:5477::1

Neutral Activity IPv6 SLAAC Note

21 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Contabo GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS51167

Domain Name

contabo.com

Country

🇫🇷 France

City

Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a02:c207:2280:5477::1 has been reported 21 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a02:c207:2280:5477::1:

This IP address has been reported a total of 21 times from 7 distinct sources. 2a02:c207:2280:5477::1 was first reported on February 19th 2026, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-02-21 22:59:06 (6 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-02-20. show less	Web App Attack SSH Hacking
🇧🇪 cmbplf	2026-02-20 19:38:10 (6 months ago)	282 requests with url.path *.env	Brute-Force Bad Web Bot
🇬🇧 Aetherweb Ark	2026-02-20 18:25:13 (6 months ago)	(mod_security) mod_security (id:949110) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:949110) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 18:06:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 13:06:32.683674 2026] [security2:error] [pid 6373:tid 6373] [client 2a02:c207:2280:5477::1:37896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khtcpl.com"] [uri "/.env"] [unique_id "aZiiqDI1VEB_jJLB5RZJ0AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 16:58:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 11:58:27.279685 2026] [security2:error] [pid 4859:tid 4859] [client 2a02:c207:2280:5477::1:48038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idahostem.org"] [uri "/database/.env"] [unique_id "aZiSs9DovbYmnklMJZpZHwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 16:23:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 11:23:37.604206 2026] [security2:error] [pid 24823:tid 24823] [client 2a02:c207:2280:5477::1:36246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepinesokc.org"] [uri "/database/.env"] [unique_id "aZiKid2wWKvsf5n6nY8zSAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 16:05:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 11:05:06.702358 2026] [security2:error] [pid 31486:tid 31500] [client 2a02:c207:2280:5477::1:51800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "movetodc.com"] [uri "/.env"] [unique_id "aZiGMtH4xXLnyqyNvSzF8wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 15:42:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 10:42:46.791230 2026] [security2:error] [pid 11475:tid 11475] [client 2a02:c207:2280:5477::1:60778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "megastorebuilders.info"] [uri "/database/.env"] [unique_id "aZiA9mqsr-LoPsvEFIHEggAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Catapult	2026-02-20 11:25:00 (6 months ago)	Searches for validators/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 08:58:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 03:58:15.977287 2026] [security2:error] [pid 14812:tid 14812] [client 2a02:c207:2280:5477::1:37690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepinelandclub.com"] [uri "/.env.production"] [unique_id "aZgiJ68Zw4rACm-u7KuKkAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 07:54:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 02:54:24.274542 2026] [security2:error] [pid 28872:tid 28872] [client 2a02:c207:2280:5477::1:59282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grandriverhomes.com"] [uri "/.env.production"] [unique_id "aZgTMEhfVD1i9UFRfAbDTgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 07:09:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 02:08:57.778774 2026] [security2:error] [pid 24256:tid 24256] [client 2a02:c207:2280:5477::1:47040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martaaizenman.com"] [uri "/.env.production"] [unique_id "aZgIid095zuv1gkD-dKvrwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 06:40:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 01:40:48.282053 2026] [security2:error] [pid 4902:tid 4902] [client 2a02:c207:2280:5477::1:34942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "terfgunclub.com"] [uri "/.env.production"] [unique_id "aZgB8AiStgpXS4EqbYMd4QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-20 04:31:30 (6 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2026-02-19 23:28:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2280:5477::1 (vmi2805477.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 18:28:32.276967 2026] [security2:error] [pid 20371:tid 20371] [client 2a02:c207:2280:5477::1:43700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "esneuro.net"] [uri "/.env"] [unique_id "aZecoKkWTsBRcm-SzwXXkwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.24.83

🇨🇱 200.86.133.95

🇭🇰 199.45.154.116

🇭🇰 150.5.132.52

🇫🇷 141.11.1.58

🇿🇦 82.23.235.243

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇨🇳 221.229.218.50

🇺🇸 207.65.48.178

🇩🇪 194.88.98.123

🇮🇳 156.67.110.109

🇺🇸 147.185.132.106

🇺🇸 143.42.173.60

🇨🇳 119.0.201.236

🇳🇱 91.92.42.223

🇺🇸 69.12.71.34

🇫🇷 51.38.232.56

🇨🇳 36.150.50.112

🇺🇸 34.23.23.144