JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2309:9399::1

2a02:c207:2309:9399::1

Neutral Activity IPv6 SLAAC Note

13 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Contabo GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS51167

Hostname(s)

ap.pickandpackbd.com

Domain Name

contabo.com

Country

🇫🇷 France

City

Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a02:c207:2309:9399::1 has been reported 13 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a02:c207:2309:9399::1:

This IP address has been reported a total of 13 times from 7 distinct sources. 2a02:c207:2309:9399::1 was first reported on March 24th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-04-04 21:59:34 (5 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-03. show less	Web App Attack SSH Hacking
Anonymous	2026-04-03 12:05:05 (5 months ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 11:01:23 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 07:01:16.815665 2026] [security2:error] [pid 21592:tid 21592] [client 2a02:c207:2309:9399::1:17186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mikeziegler.com"] [uri "/api/.env"] [unique_id "ac-d_Jg_bs6roaxDvGDj0QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 XICTRON	2026-04-03 10:45:06 (5 months ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇨🇭 YF	2026-04-03 10:05:03 (5 months ago)	Attempted access to sensitive files	Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 09:30:18 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 05:30:12.614056 2026] [security2:error] [pid 10863:tid 10863] [client 2a02:c207:2309:9399::1:43678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gallodestinationservices.com"] [uri "/env/.env"] [unique_id "ac-IpBi2FuP_N1KMd7B0DAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 08:43:18 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 04:43:10.824859 2026] [security2:error] [pid 30325:tid 30325] [client 2a02:c207:2309:9399::1:57444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kameleonquilt.com"] [uri "/api/.env"] [unique_id "ac99nvo_aN8DzSoNV6UEaQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 08:01:29 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 04:01:26.239004 2026] [security2:error] [pid 4771:tid 4771] [client 2a02:c207:2309:9399::1:52818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uglykid.net"] [uri "/api/.env"] [unique_id "ac9z1knXJHzNpvnn5xm0-gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 07:29:06 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 03:28:59.221453 2026] [security2:error] [pid 19636:tid 19636] [client 2a02:c207:2309:9399::1:38840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "automatebi.com"] [uri "/api/.env"] [unique_id "ac9sO1cIvCUA3BkD-cBE8wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 06:45:05 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 02:44:58.916456 2026] [security2:error] [pid 9425:tid 9425] [client 2a02:c207:2309:9399::1:61062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelandkatie.us"] [uri "/api/.env"] [unique_id "ac9h6skWY3pB9vSXtQflmQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-04-03 06:33:11 (5 months ago)	IM360 WAF: Laravel .env file access	Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 06:00:21 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2309:9399::1 (ap.pickandpackbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 02:00:14.105903 2026] [security2:error] [pid 7310:tid 7310] [client 2a02:c207:2309:9399::1:35642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krassa.net"] [uri "/app/.env"] [unique_id "acti7vrzEW0FqiXL59x9agAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-03-24 18:20:14 (5 months ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 141.94.78.40

🇺🇸 137.184.78.66

🇮🇩 103.139.126.5

🇧🇩 101.2.167.39

🇳🇱 91.92.42.95

🇫🇷 85.217.140.5

🇺🇸 72.167.151.62

🇨🇦 52.242.17.182

🇺🇸 47.254.90.34

🇧🇷 45.170.116.155

🇹🇷 45.143.4.180

🇯🇵 43.167.239.66

🇺🇸 2a03:2880:f814:16::

🇮🇳 223.181.99.3

🇵🇭 210.79.171.13

🇬🇧 193.163.125.8

🇧🇷 189.125.111.177

🇮🇳 182.69.0.45

🇺🇸 165.22.15.177

🇨🇳 117.158.166.74