This IP was reported 26 times. Confidence of
Abuse
is 7%: ?
7%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
26
times from
16 distinct
sources.
2a02:c207:2333:8816::1 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-15.
show less
[MonJun1519:21:27.7375492026][security2:error][pid47902:tid48186][client2a02:c207:2333:8816::1:0]Mod ...
show more[MonJun1519:21:27.7375492026][security2:error][pid47902:tid48186][client2a02:c207:2333:8816::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hostingedomini.ch\"][uri\"/functions/.env\"][unique_id\"ajA0lzkcTyHsbLyCWVFd9wAAARE\"]
show less
[MonJun1515:54:55.1343732026][security2:error][pid72762:tid72819][client2a02:c207:2333:8816::1:0]Mod ...
show more[MonJun1515:54:55.1343732026][security2:error][pid72762:tid72819][client2a02:c207:2333:8816::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"rs-gaming.net\"][uri\"/api/.env\"][unique_id\"ajAEL5VVSGfNHMGayDCvGwAAAAo\"]
show less
Port Scan
Brute-Force
Web App Attack
Showing 1 to
15
of 26 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩