JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2335:8830::1

2a02:c207:2335:8830::1 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 56%: ?

56%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3358830.vps-server.dev
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:c207:2335:8830::1

Whois 2a02:c207:2335:8830::1

IP Abuse Reports for 2a02:c207:2335:8830::1:

This IP address has been reported a total of 28 times from 8 distinct sources. 2a02:c207:2335:8830::1 was first reported on August 30th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-09-02 07:19:59 (1 hour ago)	[WedSep0209:19:58.0505222026][security2:error][pid1118838:tid1118879][client2a02:c207:2335:8830::1:0 ... show more [WedSep0209:19:58.0505222026][security2:error][pid1118838:tid1118879][client2a02:c207:2335:8830::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"acquaallaspina.ch\"][uri\"/.git/config\"][unique_id\"apfOHvWu93MyZuzdo5NcdQAAAEQ\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 04:41:56 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:41:48.755769 2026] [security2:error] [pid 11215:tid 11215] [client 2a02:c207:2335:8830::1:56056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shhcenter.com"] [uri "/wp-config.php.bak"] [unique_id "apepDB0SPtW4vZlu1om5iAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 20:45:44 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:45:36.728384 2026] [security2:error] [pid 4150:tid 4150] [client 2a02:c207:2335:8830::1:49502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3dstores.com"] [uri "/.git/config"] [unique_id "apc5cHp8iJBWRA9ElwT1FwAAAEw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 17:50:18 (14 hours ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-08-31 22:09:47 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 18:09:40.330711 2026] [security2:error] [pid 13273:tid 13273] [client 2a02:c207:2335:8830::1:42028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barrykrueger.com"] [uri "/.git/config"] [unique_id "apX7pGmEjptcKqUc_d9ijQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-31 22:02:58 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-30. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-31 18:38:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 14:38:33.994749 2026] [security2:error] [pid 7258:tid 7258] [client 2a02:c207:2335:8830::1:39416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffhenry.net"] [uri "/.git/config"] [unique_id "apXKKbenC6Ewwp-cdkyLpQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 16:49:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 12:49:50.943724 2026] [security2:error] [pid 3849:tid 3849] [client 2a02:c207:2335:8830::1:37298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cnphilos.com"] [uri "/.git/config"] [unique_id "apWwru77JSY9gIdXt94G9wAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 12:22:02 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:21:58.999518 2026] [security2:error] [pid 29382:tid 29382] [client 2a02:c207:2335:8830::1:41604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cinemasky.net"] [uri "/.git/config"] [unique_id "apVx5nTS-RtjrjU41K1C5AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 11:58:48 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:58:45.424600 2026] [security2:error] [pid 1831:tid 1831] [client 2a02:c207:2335:8830::1:56900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rogerloft.com"] [uri "/.git/config"] [unique_id "apVsdWbDNdOnmtCIs476IgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 08:36:01 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:35:55.471095 2026] [security2:error] [pid 10821:tid 10821] [client 2a02:c207:2335:8830::1:55262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cucciniello.com"] [uri "/.git/config"] [unique_id "apU860Se31Gwr8UH2odbCgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 08:13:41 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:13:38.102489 2026] [security2:error] [pid 21652:tid 21652] [client 2a02:c207:2335:8830::1:48416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.darkalleyproductions.com"] [uri "/.git/config"] [unique_id "apU3stPJh5MvJXgbiGOrhgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 07:46:25 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.d ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2335:8830::1 (vmi3358830.vps-server.dev): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:46:17.567325 2026] [security2:error] [pid 26834:tid 26847] [client 2a02:c207:2335:8830::1:54338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pilargarciamanzanares.com.clmtic.net"] [uri "/.git/config"] [unique_id "apUxSdj_brRzjOZolZx9oAAAAIo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-08-31 07:30:33 (2 days ago)	Git config exposure probe	Web App Attack
🇩🇪 4server	2026-08-31 07:02:41 (2 days ago)	[MonAug3109:02:35.8459132026][security2:error][pid2352033:tid2352159][client2a02:c207:2335:8830::1:0 ... show more [MonAug3109:02:35.8459132026][security2:error][pid2352033:tid2352159][client2a02:c207:2335:8830::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.vg13.ch\"][uri\"/.git/config\"][unique_id\"apUnC7pUhuBJqZwShroHNAAAANU\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.50.181.40

🇧🇷 205.210.31.198

🇺🇦 188.191.29.42

🇶🇦 178.152.113.21

🇦🇺 170.64.162.25

🇨🇳 119.51.244.224

🇬🇧 35.203.211.83

🇺🇸 207.90.244.20

🇿🇦 197.86.205.50

🇳🇱 185.223.235.38

🇧🇷 177.181.237.48

🇺🇸 173.216.149.157

🇺🇸 140.228.139.224

🇮🇳 103.235.2.32

🇪🇪 95.85.245.227

🇫🇷 91.231.89.209

🇺🇸 91.230.168.129

🇺🇸 64.62.156.121

🇺🇸 47.77.219.25

🇭🇰 220.246.183.78