JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2314:7960::1

2a02:c207:2314:7960::1

Neutral Activity IPv6 SLAAC Note

197 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Contabo GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS51167

Domain Name

contabo.com

Country

🇫🇷 France

City

Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a02:c207:2314:7960::1 has been reported 197 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a02:c207:2314:7960::1:

This IP address has been reported a total of 197 times from 98 distinct sources. 2a02:c207:2314:7960::1 was first reported on March 13th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-29 18:28:29 (4 months ago)	Confirmed malicious by STILWaters CTI (score=100)	Hacking Brute-Force SSH
🇫🇷 cityhunter_rhone	2026-04-25 09:56:17 (4 months ago)	Observed at (UTC): 2026-04-22T16:24:40+00:00 \| Mercurius Guide auto detection \| source=Fail2Ban \| sc ... show more Observed at (UTC): 2026-04-22T16:24:40+00:00 \| Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=5 \| events=1 \| decision=datacenter \| actions=fail2ban failed plesk-permanent-ban \| last_seen=2026-04-22 16:24:40 show less	Brute-Force SSH Web App Attack
Anonymous	2026-04-13 07:59:07 (4 months ago)	[13/Apr/2026:10:59:07 +0300] 177606714750.354590 2a02:c207:2314:7960::1 46398 2a01:4f8:202:41d3::2 8 ... show more [13/Apr/2026:10:59:07 +0300] 177606714750.354590 2a02:c207:2314:7960::1 46398 2a01:4f8:202:41d3::2 80 [13/Apr/2026:10:59:07 +0300] 177606714797.910801 2a02:c207:2314:7960::1 46404 2a01:4f8:202:41d3::2 80 show less	Web App Attack
🇨🇭 4server	2026-04-13 04:46:51 (4 months ago)	[MonApr1306:46:46.0035262026][security2:error][pid349160:tid349224][client2a02:c207:2314:7960::1:0]M ... show more [MonApr1306:46:46.0035262026][security2:error][pid349160:tid349224][client2a02:c207:2314:7960::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"342\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"r102.ch\"][uri\"/.git/HEAD\"][unique_id\"adx1NlOP3x0_n9vz8hwyOwAAAEY\"] show less	Hacking Web App Attack
🇩🇪 london2038.com	2026-04-12 21:40:39 (4 months ago)	Probing for exploits 2a02:c207:2314:7960::1 - - [12/Apr/2026:23:40:35 +0200] "GET /.env HTTP/1.1" 42 ... show more Probing for exploits 2a02:c207:2314:7960::1 - - [12/Apr/2026:23:40:35 +0200] "GET /.env HTTP/1.1" 422 0 "-" "Go-http-client/1.1" 2a02:c207:2314:7960::1 - - [12/Apr/2026:23:40:35 +0200] "GET /.git/HEAD HTTP/1.1" 422 0 "-" "Go-http-client/1.1" show less	Hacking Web App Attack
🇩🇪 4server	2026-04-12 21:19:11 (4 months ago)	[SunApr1223:19:04.8955992026][security2:error][pid83539:tid83612][client2a02:c207:2314:7960::1:0]Mod ... show more [SunApr1223:19:04.8955992026][security2:error][pid83539:tid83612][client2a02:c207:2314:7960::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gruppobalu.com\"][uri\"/.git/HEAD\"][unique_id\"adwMSDwrArZ5LttcgI4pCwAAAEw\"]\,referer:http://gruppobalu.com/.git/HEAD show less	Port Scan Brute-Force Web App Attack
🇩🇪 betternews.app	2026-04-12 16:32:04 (4 months ago)	"a web request contained keyword ".git"; Suspicious URL: /.git/HEAD"	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2026-04-11 18:13:48 (4 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇩🇪 igerman	2026-04-11 10:53:57 (4 months ago)	caddy probes: [git-repo] GET /.git/HEAD -> DROP [env-probe] GET /.env -> DROP	Web App Attack
🇨🇭 4server	2026-04-11 10:14:31 (4 months ago)	[SatApr1112:14:23.2284332026][security2:error][pid4084585:tid4084603][client2a02:c207:2314:7960::1:0 ... show more [SatApr1112:14:23.2284332026][security2:error][pid4084585:tid4084603][client2a02:c207:2314:7960::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"342\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"creazione-siti-ticino.hosting-domini.ch\"][uri\"/.git/HEAD\"][unique_id\"adoe_9xT1DeYBMl2_RgPwQAAANA\"] show less	Hacking Web App Attack
🇫🇷 lindi	2026-04-11 07:41:54 (4 months ago)	trying to access .env file ...	Hacking Web App Attack
🇪🇸 el-brujo	2026-04-11 07:21:43 (4 months ago)	Cloudflare WAF: Request Path: /.git/HEAD Request Query: Host: ia.elhacker.net userAgent: Go-http-cl ... show more Cloudflare WAF: Request Path: /.git/HEAD Request Query: Host: ia.elhacker.net userAgent: Go-http-client/1.1 Action: block Source: firewallManaged ASN Description: CONTABO Country: FR Method: GET Timestamp: 2026-04-11T07:21:43Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-04-11 07:20:29 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2314:7960::1 (vmi3147960.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2314:7960::1 (vmi3147960.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 03:20:20.038120 2026] [security2:error] [pid 3888420:tid 3888420] [client 2a02:c207:2314:7960::1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.barryherbach.com"] [uri "/.git/HEAD"] [unique_id "adn2NK8To0svToY5UIIX1AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇻🇳 hirosume2	2026-04-11 07:13:39 (4 months ago)	DDoS composite score 37.6 (challenge tier) - 44 reqs/5min - high_traffic	DDoS Attack
🇺🇸 myagent.site	2026-04-11 06:41:11 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking

Showing 1 to 15 of 197 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.161.161

🇷🇴 193.32.162.84

🇩🇪 167.94.145.18

🇹🇭 124.122.133.243

🇯🇵 114.148.171.128

🇷🇴 92.118.39.49

🇷🇴 80.94.92.179

🇺🇸 35.221.27.192

🇵🇱 9.129.22.38

🇷🇴 2.57.122.238

🇫🇷 185.255.126.98

🇺🇸 170.101.96.37

🇮🇳 162.4.73.209

🇸🇬 118.139.165.143

🇳🇱 77.239.124.185

🇳🇱 45.148.10.183

🇳🇱 45.148.10.152

🇧🇷 43.157.172.39

🇬🇧 35.242.131.85

🇺🇸 18.223.2.197