JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2319:6120::1

2a02:c207:2319:6120::1 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3196120.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:c207:2319:6120::1

Whois 2a02:c207:2319:6120::1

IP Abuse Reports for 2a02:c207:2319:6120::1:

This IP address has been reported a total of 58 times from 32 distinct sources. 2a02:c207:2319:6120::1 was first reported on August 6th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-08-26 16:42:27 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 BlueWire Hosting	2026-08-24 13:01:13 (4 days ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇫🇮 YF	2026-08-24 13:00:38 (4 days ago)	WordPress author enumeration	Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 13:00:32 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 2a02:c207:2319:6120::1 (vmi3196120.contaboserve ... show more (mod_security) mod_security (id:225170) triggered by 2a02:c207:2319:6120::1 (vmi3196120.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 09:00:26.712922 2026] [security2:error] [pid 3911017:tid 3911598] [client 2a02:c207:2319:6120::1:37166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tsengkwongchi.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tsengkwongchi.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoxAalejrQ14baZ7ZWbLUwAAAZQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-08-24 12:34:54 (4 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 12:15:25 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 2a02:c207:2319:6120::1 (vmi3196120.contaboserve ... show more (mod_security) mod_security (id:225170) triggered by 2a02:c207:2319:6120::1 (vmi3196120.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 08:15:20.183371 2026] [security2:error] [pid 20898:tid 20898] [client 2a02:c207:2319:6120::1:55760] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lspfest.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lspfest.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aow12ELM90-NC-Vp17UcUwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-08-24 11:59:12 (4 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp/wp-login.php \| 2026-08-24 11:59 UTC show less	Hacking Web App Attack
Anonymous	2026-08-24 11:48:30 (4 days ago)	2026-08-24T13:48:21.057087+02:00 wordpress(www.wissenschaft-im-handy.de)[1956213]: Blocked user enu ... show more 2026-08-24T13:48:21.057087+02:00 wordpress(www.wissenschaft-im-handy.de)[1956213]: Blocked user enumeration attempt from 2a02:c207:2319:6120::1 show less	Web Spam Blog Spam Brute-Force Web App Attack
🇮🇹 VHosting	2026-08-24 11:45:07 (4 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-08-24 11:34:00 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob	2026-08-24 11:31:47 (4 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /blog/wp-login.php (+1 more) \| 2026-08-24 11:31 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 11:23:24 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 2a02:c207:2319:6120::1 (vmi3196120.contaboserve ... show more (mod_security) mod_security (id:225170) triggered by 2a02:c207:2319:6120::1 (vmi3196120.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 07:23:20.460654 2026] [security2:error] [pid 12673:tid 12673] [client 2a02:c207:2319:6120::1:50868] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|snowrideadventures.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "snowrideadventures.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aowpqBu5WZpECsy_t3XdeAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-08-24 05:28:18 (4 days ago)	1.524 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇫🇷 debaba	2026-08-24 01:55:46 (4 days ago)	2a02:c207:2319:6120::1 - - [24/Aug/2026:00:15:44 +0000] "POST /wp-login.php HTTP/1.1" 200 17425 "htt ... show more 2a02:c207:2319:6120::1 - - [24/Aug/2026:00:15:44 +0000] "POST /wp-login.php HTTP/1.1" 200 17425 "https://lust-zu-lernen.online/wp-login.php" "Mozilla/ ... show less	Brute-Force Web App Attack
🇳🇱 maxxsense	2026-08-24 01:27:24 (4 days ago)	(wordpress) Failed wordpress login from 2a02:c207:2319:6120::1 (FR/France/vmi3196120.contaboserver.n ... show more (wordpress) Failed wordpress login from 2a02:c207:2319:6120::1 (FR/France/vmi3196120.contaboserver.net) show less	Brute-Force

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.27.205.159

🇦🇷 153.67.13.53

🇨🇳 203.189.195.8

🇮🇩 140.213.200.99

🇨🇳 139.226.161.226

🇺🇸 136.114.26.27

🇨🇳 123.115.227.206

🇨🇳 123.115.227.124

🇯🇵 118.194.228.101

🇮🇩 112.140.160.26

🇺🇸 23.95.193.99

🇨🇳 183.230.155.13

🇨🇳 175.25.56.173

🇦🇴 154.116.254.157

🇨🇲 154.70.102.114

🇺🇸 130.131.220.95

🇨🇳 123.115.223.160

🇿🇦 102.164.204.68

🇨🇳 42.51.37.71

🇦🇷 190.5.168.209