JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2326:6072::1

2a02:c207:2326:6072::1 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3266072.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:c207:2326:6072::1

Whois 2a02:c207:2326:6072::1

IP Abuse Reports for 2a02:c207:2326:6072::1:

This IP address has been reported a total of 30 times from 18 distinct sources. 2a02:c207:2326:6072::1 was first reported on June 15th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-06-16 05:15:11 (3 months ago)	13 attacks on env grabbing URLs: GET /api/.env HTTP/1.1	Hacking
🇫🇷 SpaceHost-Server	2026-06-15 22:30:20 (3 months ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 20:12:08 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 16:12:03.918443 2026] [security2:error] [pid 10528:tid 10528] [client 2a02:c207:2326:6072::1:38484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arnoldwell.com"] [uri "/env/.env"] [unique_id "ajBck82T1z2YiZuf6XR1DQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-15 20:08:11 (3 months ago)	2026/06/15 17:08:09 [error] 2151#2151: 39744 access forbidden by rule, client: 2a02:c207:2326:6072: ... show more 2026/06/15 17:08:09 [error] 2151#2151: 39744 access forbidden by rule, client: 2a02:c207:2326:6072::1, server: topvitrine.com.br, request: "GET /api/.env HTTP/1.1", host: "topvitrine.com.br", referrer: "http://topvitrine.com.br/api/.env" 2026/06/15 17:08:09 [error] 2151#2151: 39742 access forbidden by rule, client: 2a02:c207:2326:6072::1, server: topvitrine.com.br, request: "GET /.env HTTP/1.1", host: "topvitrine.com.br", referrer: "http://topvitrine.com.br/.env" 2026/06/15 17:08:09 [error] 2151#2151: 39743 access forbidden by rule, client: 2a02:c207:2326:6072::1, server: topvitrine.com.br, request: "GET /env/.env HTTP/1.1", host: "topvitrine.com.br", referrer: "http://topvitrine.com.br/env/.env" ... show less	Port Scan
🇩🇪 BlueWire Hosting	2026-06-15 20:07:43 (3 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-15 18:20:47 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 14:20:41.902914 2026] [security2:error] [pid 15659:tid 15659] [client 2a02:c207:2326:6072::1:43250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-uk.com"] [uri "/.env"] [unique_id "ajBCeVIDTuXdAqcLJ5T3HAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 17:56:44 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 13:56:36.947206 2026] [security2:error] [pid 25887:tid 25887] [client 2a02:c207:2326:6072::1:49236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contactsportsagility.com"] [uri "/env/.env"] [unique_id "ajA81FGRFs5uwD10DOuYywAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 XICTRON	2026-06-15 17:45:06 (3 months ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 17:40:04 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 13:39:55.001710 2026] [security2:error] [pid 17536:tid 17536] [client 2a02:c207:2326:6072::1:43564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinderland-preschool.com"] [uri "/.env"] [unique_id "ajA46zZrr3iaWZXfm4jf5gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 17:20:40 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 13:20:32.311216 2026] [security2:error] [pid 26249:tid 26249] [client 2a02:c207:2326:6072::1:34674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lusineweb.com"] [uri "/env/.env"] [unique_id "ajA0YE6nEpzEXOBUwLl0UQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-15 15:07:12 (3 months ago)	2a02:c207:2326:6072::1 - - [15/Jun/2026:15:07:11 +0000] "GET /api/.env HTTP/1.1" 302 585 "-" "Go-htt ... show more 2a02:c207:2326:6072::1 - - [15/Jun/2026:15:07:11 +0000] "GET /api/.env HTTP/1.1" 302 585 "-" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 15:00:03 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2326:6072::1 (vmi3266072.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 10:59:56.866671 2026] [security2:error] [pid 25962:tid 25962] [client 2a02:c207:2326:6072::1:33786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dougscomputers.com"] [uri "/app/.env"] [unique_id "ajATbD5XxBfenlv3XyRD-AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 macrob	2026-06-15 14:21:43 (3 months ago)	2026/06/15 14:21:41 [error] 2547565#2547565: 307448502 access forbidden by rule, client: 2a02:c207: ... show more 2026/06/15 14:21:41 [error] 2547565#2547565: 307448502 access forbidden by rule, client: 2a02:c207:2326:6072::1, server: behemoti.com, request: "GET /api/.env HTTP/2.0", host: "behemoti.com", referrer: "http://behemoti.com/api/.env" 2026/06/15 14:21:41 [error] 2547566#2547566: 307448503 access forbidden by rule, client: 2a02:c207:2326:6072::1, server: behemoti.com, request: "GET /app/.env HTTP/2.0", host: "behemoti.com", referrer: "http://behemoti.com/app/.env" 2026/06/15 14:21:41 [error] 2547565#2547565: 307448504 access forbidden by rule, client: 2a02:c207:2326:6072::1, server: behemoti.com, request: "GET /.env HTTP/2.0", host: "behemoti.com", referrer: "http://behemoti.com/.env" ... show less	Web App Attack
🇩🇪 MarkGGN	2026-06-15 14:14:40 (3 months ago)	Web attack. 2a02:c207:2326:6072::1 - - [15/Jun/2026:16:14:40 +0200] "GET /app/.env HTTP/1.1" 404 75 ... show more Web attack. 2a02:c207:2326:6072::1 - - [15/Jun/2026:16:14:40 +0200] "GET /app/.env HTTP/1.1" 404 75 "http:///app/.env" "Go-http-client/1.1" 2a02:c207:2326:6072::1 - - [15/Jun/2026:16:14:40 +0200] "GET /api/.env HTTP/1.1" 404 75 "http:///api/.env" "Go-http-client/1.1" show less	Web App Attack
Anonymous	2026-06-15 13:55:13 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 2a02:c207: ... show more (apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 2a02:c207:2326:6072::1 (vmi3266072.contaboserver.net): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2a02:c207:2326:6072::1 - - [15/Jun/2026:15:55:08 +0200] "GET /.env HTTP/1.1" 403 405 "-" "Go-http-client/1.1" 2a02:c207:2326:6072::1 - - [15/Jun/2026:15:55:08 +0200] "GET /api/.env HTTP/1.1" 403 405 "-" "Go-http-client/1.1" 2a02:c207:2326:6072::1 - - [15/Jun/2026:15:55:08 +0200] "GET /app/.env HTTP/1.1" 403 405 "-" "Go-http-client/1.1" 2a02:c207:2326:6072::1 - - [15/Jun/2026:15:55:08 +0200] "GET /app/.env HTTP/1.1" 403 3515 "-" "Go-http-client/1.1" 2a02:c207:2326:6072::1 - - [15/Jun/2026:15:55:08 +0200] "GET /.env HTTP/1.1" 403 3516 "-" "Go-http-client/1.1" show less	Port Scan

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.118.59.16

🇱🇹 62.60.130.253

🇵🇪 38.225.245.99

🇹🇷 185.226.93.242

🇧🇷 179.48.18.42

🇮🇳 116.72.9.151

🇺🇸 91.230.168.131

🇬🇧 89.37.172.153

🇨🇦 85.217.149.60

🇺🇸 66.132.195.115

🇧🇷 45.234.195.254

🇻🇳 42.112.14.245

🇺🇸 35.233.239.185

🇳🇱 34.7.35.101

🇺🇸 20.169.84.230

🇨🇳 1.24.16.70

🇨🇴 206.84.80.95

🇳🇱 195.178.110.3

🇳🇱 193.47.62.69

🇵🇾 190.128.171.14