JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2329:3892::1

2a02:c207:2329:3892::1 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 84%: ?

84%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3293892.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:c207:2329:3892::1

Whois 2a02:c207:2329:3892::1

IP Abuse Reports for 2a02:c207:2329:3892::1:

This IP address has been reported a total of 30 times from 16 distinct sources. 2a02:c207:2329:3892::1 was first reported on September 14th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 geot	2026-09-16 15:31:18 (3 days ago)	GET /api/session/properties HTTP/1.1	Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-15 22:00:00 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-14. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-09-15 13:02:01 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:01:58.237404 2026] [security2:error] [pid 23607:tid 23607] [client 2a02:c207:2329:3892::1:51736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ballantinepaintinganddrywall.com"] [uri "/.git/index"] [unique_id "aqlBxopugVc3qqveIMOopgAAADA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 11:52:44 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:52:37.442231 2026] [security2:error] [pid 27219:tid 27219] [client 2a02:c207:2329:3892::1:41128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sharawi-gum.com"] [uri "/wp-config.php.bak"] [unique_id "aqkxhcO6VuPQXzNgx_UizAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 10:21:20 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:21:14.475484 2026] [security2:error] [pid 26465:tid 26465] [client 2a02:c207:2329:3892::1:58740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fredlandia.com"] [uri "/wp-config.php.bak"] [unique_id "aqkcGhYrWg01iXPB9iRVHgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 mscode.pl	2026-09-15 10:15:47 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK ASN: 51167 (Contabo GmbH) Pro ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK ASN: 51167 (Contabo GmbH) Protocol: HTTP/1.1 (GET method) Zone: error-pages.mscode.pl Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 Site.eu	2026-09-15 10:10:26 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-15 09:18:19 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 05:18:14.014690 2026] [security2:error] [pid 7064:tid 7064] [client 2a02:c207:2329:3892::1:42258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fatcavestudios.fatcavemedia.com"] [uri "/wp-config.php.bak"] [unique_id "aqkNVosEHyaBQrkxcqYLIQAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 08:37:16 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 04:37:11.173151 2026] [security2:error] [pid 8134:tid 8134] [client 2a02:c207:2329:3892::1:45416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thefiregoddess.net"] [uri "/.git/config"] [unique_id "aqkDt8tZKLdS3zkW5ogXAgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 07:57:39 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:57:31.240566 2026] [security2:error] [pid 32150:tid 32150] [client 2a02:c207:2329:3892::1:54800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.northernfrontier.net"] [uri "/.git/index"] [unique_id "aqj6a4YoHocWTdAvkmVzQQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 07:42:05 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:41:58.283063 2026] [security2:error] [pid 16402:tid 16402] [client 2a02:c207:2329:3892::1:35336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mtbpv.org"] [uri "/.env.production"] [unique_id "aqj2xm4ylrb_EmsKTR9LpQAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 SysAdmin Dylan	2026-09-15 07:32:17 (4 days ago)	Port Scan detected from 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net). 11 hits in the last ... show more Port Scan detected from 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net). 11 hits in the last 272 seconds show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-15 06:07:19 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2329:3892::1 (vmi3293892.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:07:15.948580 2026] [security2:error] [pid 31514:tid 31514] [client 2a02:c207:2329:3892::1:43184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.canadianprimarysources.org"] [uri "/.git/index"] [unique_id "aqjgk3rUh_ypcB1wC5J_WgAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Dominik Lysiak	2026-09-15 06:01:35 (4 days ago)	2a02:c207:2329:3892::1 - - [15/Sep/2026:08:01:34 +0200] "GET /.env.txt HTTP/1.1" 404 548 "-" "Mozill ... show more 2a02:c207:2329:3892::1 - - [15/Sep/2026:08:01:34 +0200] "GET /.env.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 2a02:c207:2329:3892::1 - - [15/Sep/2026:08:01:34 +0200] "GET /.env.swp HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 2a02:c207:2329:3892::1 - - [15/Sep/2026:08:01:34 +0200] "GET /.env.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇵🇱 strefapi_com	2026-09-15 05:26:55 (4 days ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.214.181.197

🇦🇷 216.244.247.188

🇱🇹 213.176.26.68

🇬🇹 190.149.6.54

🇺🇸 34.123.134.194

🇨🇳 218.3.216.218

🇨🇳 180.184.141.117

🇨🇳 61.146.235.54

🇩🇪 43.228.157.168

🇧🇪 34.140.234.80

🇩🇪 206.189.50.23

🇳🇱 193.47.62.69

🇺🇸 70.169.21.244

🇺🇸 64.62.197.137

🇨🇳 42.58.35.197

🇩🇰 9.205.17.27

🇺🇸 8.234.143.97

🇰🇷 221.161.235.168

🇦🇷 186.158.183.66

🇺🇦 185.176.112.34