JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2304:1678::1

2a02:c207:2304:1678::1 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3041678.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:c207:2304:1678::1

Whois 2a02:c207:2304:1678::1

IP Abuse Reports for 2a02:c207:2304:1678::1:

This IP address has been reported a total of 17 times from 14 distinct sources. 2a02:c207:2304:1678::1 was first reported on June 13th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oralunal	2026-06-14 14:13:47 (3 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 12:29:32 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 2a02:c207:2304:1678::1 (vmi3041678.contaboserve ... show more (mod_security) mod_security (id:225170) triggered by 2a02:c207:2304:1678::1 (vmi3041678.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 08:29:26.187185 2026] [security2:error] [pid 26195:tid 26284] [client 2a02:c207:2304:1678::1:35274] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|inal.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "inal.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ai6ephuvxUUfhtYH4rD2bwAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-14 12:04:42 (3 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-06-14 10:21:52 (3 months ago)	"POST /xmlrpc.php HTTP/1.1"	Hacking Web App Attack
🇨🇦 Not Fake	2026-06-14 09:49:05 (3 months ago)	$f2bV_matches	Web App Attack
🇳🇱 Roderic	2026-06-14 07:15:19 (3 months ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan
🇪🇸 el-brujo	2026-06-14 05:57:05 (3 months ago)	Cloudflare WAF: Request Path: /new/xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Moz ... show more Cloudflare WAF: Request Path: /new/xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0 Action: managed_challenge Source: firewallManaged ASN Description: Contabo GmbH Country: FR Method: GET Timestamp: 2026-06-14T05:57:05Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 Skyrider	2026-06-14 05:31:44 (3 months ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-06-14 04:46:54 (3 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 Action: managed_challenge Source: firewallManaged ASN Description: Contabo GmbH Country: FR Method: POST Timestamp: 2026-06-14T04:46:54Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 tall1oN	2026-06-14 04:27:26 (3 months ago)	2a02:c207:2304:1678::1 - - [14/Jun/2026:06:27:20 +0200] "GET /xmlrpc.php HTTP/2.0" 200 9805 "http:// ... show more 2a02:c207:2304:1678::1 - - [14/Jun/2026:06:27:20 +0200] "GET /xmlrpc.php HTTP/2.0" 200 9805 "http://diamondliferp.de/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" "diamondliferp.cc" 2a02:c207:2304:1678::1 - - [14/Jun/2026:06:27:25 +0200] "GET /xmlrpc.php HTTP/2.0" 200 5745 "http://diamondliferp.de/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" "diamondliferp.cc" ... show less	Web App Attack Port Scan Hacking
🇪🇸 el-brujo	2026-06-14 03:21:57 (3 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: Contabo GmbH Country: FR Method: POST Timestamp: 2026-06-14T03:21:57Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇫🇷 dynamix	2026-06-14 02:32:58 (3 months ago)	Multiple WAF Violations	Web App Attack
🇪🇸 el-brujo	2026-06-14 01:23:38 (3 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: Contabo GmbH Country: FR Method: POST Timestamp: 2026-06-14T01:23:38Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2026-06-14 01:00:10 (3 months ago)	Attac	Brute-Force
🇩🇪 HandyTreff.de	2026-06-13 23:10:38 (3 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.874 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.874 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17. show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 185.132.186.85

🇺🇸 107.174.63.62

🇸🇬 2a12:f540:53ea:c3b3:719a:23d4:e4c7:ebd8

🇯🇴 176.29.235.95

🇯🇵 160.251.231.65

🇳🇱 160.119.76.210

🇺🇸 97.107.141.150

🇷🇴 80.94.95.173

🇫🇷 51.254.110.162

🇳🇱 45.148.10.157

🇩🇪 2a05:d014:fb0:c800:5097:a18d:374a:6f56

🇨🇳 223.107.146.186

🇬🇧 193.32.209.231

🇦🇹 188.21.93.53

🇧🇷 186.251.60.3

🇻🇳 171.244.5.213

🇩🇪 165.245.240.167

🇦🇺 137.23.28.31

🇮🇳 118.95.33.69

🇨🇳 117.50.178.180