JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a02:c207:2289:9514::1

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

37 reports

16 reporters · latest 9 months ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a02:c207:2289:9514::1 has been reported 37 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a02:c207:2289:9514::1

Export CSV

This IP address has been reported a total of 37 times from 16 distinct sources. 2a02:c207:2289:9514::1 was first reported on November 10th 2025, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Som1ght3n	2026-01-09 14:40:02 (9 months ago)	IP was detected attempting to scan for OVH hostnames and probing for `/test/info.php` on the server.	Web App Attack
🇺🇸 Shouddy Tarano	2026-01-09 13:32:30 (9 months ago)	[Fri Jan 09 07:32:27.961899 2026] [authz_core:error] [pid 441869:tid 139661993305856] [client 2a02:c ... show more [Fri Jan 09 07:32:27.961899 2026] [authz_core:error] [pid 441869:tid 139661993305856] [client 2a02:c207:2289:9514::1:39390] AH01630: client denied by server configuration: /var/www/html/development [Fri Jan 09 07:32:27.968384 2026] [authz_core:error] [pid 441647:tid 139661758342912] [client 2a02:c207:2289:9514::1:39628] AH01630: client denied by server configuration: /var/www/html/engine [Fri Jan 09 07:32:27.971432 2026] [authz_core:error] [pid 441647:tid 139661758342912] [client 2a02:c207:2289:9514::1:39654] AH01630: client denied by server configuration: /var/www/html/store [Fri Jan 09 07:32:27.998683 2026] [authz_core:error] [pid 441648:tid 139661582259968] [client 2a02:c207:2289:9514::1:39314] AH01630: client denied by server configuration: /var/www/html/api [Fri Jan 09 07:32:28.011344 2026] [authz_core:error] [pid 441647:tid 139661850662656] [client 2a02:c207:2289:9514::1:39556] AH01630: client denied by server configuration: /var/www/html/dbadmin ... show less	DDoS Attack Web Spam Brute-Force Web App Attack
🇺🇸 Som1ght3n	2026-01-05 16:28:21 (9 months ago)	IP performed an ovh-hostname-scan against web services, resulting in a 502 status and indicating a p ... show more IP performed an ovh-hostname-scan against web services, resulting in a 502 status and indicating a probing attempt for specific hostnames or applications. show less	Port Scan
🇧🇪 sid3windr	2026-01-02 09:17:13 (9 months ago)	GET /.env (Tarpitted for 1d15h8m31s, wasted 8.06MB)	Web App Attack
🇳🇱 homeshowdomain.nl	2026-01-01 23:00:51 (9 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-12-31. show less	Hacking Web App Attack SSH
🇺🇸 oralunal	2026-01-01 01:34:47 (9 months ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2025-12-31 21:11:35 (9 months ago)	Excessive 404/403 errors	Brute-Force
🇦🇺 2000cn.com.au	2025-12-31 21:01:00 (9 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Hacking Web App Attack
🇨🇦 1gz	2025-12-25 04:32:45 (9 months ago)	Triggered Cloudflare WAF (firewallManaged) from FR. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from FR. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php.old UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-25 04:21:58 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2289:9514::1 (vmi2899514.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2289:9514::1 (vmi2899514.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 23:21:51.075539 2025] [security2:error] [pid 9323:tid 9323] [client 2a02:c207:2289:9514::1:59388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agrizel.menagri.com"] [uri "/.env"] [unique_id "aUy73_YKw-GPUa8J6m2JbQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2025-12-24 01:02:41 (10 months ago)	Triggered Cloudflare WAF (firewallManaged) from FR. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from FR. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php.bak UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Rocky Mountain Bioengineering Symposium	2025-12-23 11:30:15 (10 months ago)	[Tue Dec 23 04:30:14.365882 2025] [authz_core:error] [pid 138187:tid 140411968398912] [client 2a02:c ... show more [Tue Dec 23 04:30:14.365882 2025] [authz_core:error] [pid 138187:tid 140411968398912] [client 2a02:c207:2289:9514::1:58776] AH01630: client denied by server configuration: /var/www/public_html/lists/infophp.php [Tue Dec 23 04:30:14.744286 2025] [authz_core:error] [pid 138187:tid 140413394404928] [client 2a02:c207:2289:9514::1:58776] AH01630: client denied by server configuration: /var/www/public_html/lists/php_info.php [Tue Dec 23 04:30:14.973902 2025] [authz_core:error] [pid 138187:tid 140413419583040] [client 2a02:c207:2289:9514::1:58776] AH01630: client denied by server configuration: /var/www/public_html/lists/test.php ... show less	Bad Web Bot
🇸🇬 Cloudkul Cloudkul	2025-12-23 02:36:29 (10 months ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-23 00:45:22 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2289:9514::1 (vmi2899514.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2289:9514::1 (vmi2899514.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 19:45:19.628358 2025] [security2:error] [pid 318756:tid 318756] [client 2a02:c207:2289:9514::1:42306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catholicshopper.com"] [uri "/composer.json"] [unique_id "aUnmH6tbvgr_IIaW_3B44gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 Cloudkul Cloudkul	2025-12-15 09:24:34 (10 months ago)	Attempted Brute Force on our application	Brute-Force Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.180.107.193

🇳🇱 193.47.62.69

🇨🇳 182.61.43.222

🇺🇸 170.106.142.71

🇺🇸 143.42.1.128

🇺🇸 136.90.87.230

🇸🇪 93.158.90.55

🇧🇷 35.199.76.107

🇫🇷 5.250.178.238

🇺🇸 162.216.150.55

🇨🇳 125.77.73.145

🇩🇪 109.160.32.179

🇫🇷 90.49.169.85

🇨🇳 58.58.122.14

🇺🇸 34.86.136.120

🇬🇧 193.32.209.230

🇩🇪 185.168.31.164

🇺🇸 138.199.40.39

🇸🇪 93.158.90.72

🇺🇸 20.127.172.23