JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:c207:2347:8842::1

2a02:c207:2347:8842::1 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 64%: ?

64%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3478842.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:c207:2347:8842::1

Whois 2a02:c207:2347:8842::1

IP Abuse Reports for 2a02:c207:2347:8842::1:

This IP address has been reported a total of 52 times from 22 distinct sources. 2a02:c207:2347:8842::1 was first reported on August 2nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 R.G.	2026-10-09 03:35:05 (1 week ago)	(CT) IP 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net) found to have 223 connections; Ports: ... show more (CT) IP 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net) found to have 223 connections; Ports: *; Direction: inout; Trigger: CT_LIMIT; Logs: show less	DDoS Attack
🇳🇱 Site.eu	2026-10-09 03:33:17 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 middelkoopcc	2026-10-09 03:19:10 (1 week ago)	2026-10-09 05:16:56 AH01264: stderr from /<redacted>/cgi-bin/.env: script not found or unable to sta ... show more 2026-10-09 05:16:56 AH01264: stderr from /<redacted>/cgi-bin/.env: script not found or unable to stat && 2026-10-09 05:16:56 GET /default.php [404] && 2026-10-09 05:16:56 GET /2020/phpinfo.php [404] && 171 more within 20 minutes show less	Web App Attack
🇩🇪 LRob	2026-10-09 03:16:22 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT ... show more Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 \| 2026-10-09 03:16 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-09 01:24:16 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:24:10.828492 2026] [security2:error] [pid 5367:tid 5367] [client 2a02:c207:2347:8842::1:56610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partyfavorsonline.com"] [uri "/store/.env"] [unique_id "ashCOv2vY3PPOfX0-ZamMwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-09 01:08:44 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:08:35.863225 2026] [security2:error] [pid 12239:tid 12239] [client 2a02:c207:2347:8842::1:49256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "summithost.com"] [uri "/sysadmin/.env"] [unique_id "asg-kwKTIK816RbqwwDEjQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-09 00:49:56 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:49:53.341877 2026] [security2:error] [pid 8477:tid 8477] [client 2a02:c207:2347:8842::1:41282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bankcardtexas.com"] [uri "/docker-compose/.env"] [unique_id "asg6MZSynd85hTpf6gETGAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-09 00:30:11 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-10-09 00:04:19 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:04:15.652962 2026] [security2:error] [pid 9187:tid 9187] [client 2a02:c207:2347:8842::1:46040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tablerockfriends.com"] [uri "/laravel/.env"] [unique_id "asgvf2q1uLH3xq3xRT2aAwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 23:35:40 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 19:35:34.164459 2026] [security2:error] [pid 26240:tid 26240] [client 2a02:c207:2347:8842::1:49374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fanarch.xyz"] [uri "/customer/.env"] [unique_id "asgoxodOymxAdBZZ1YPitgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-10-08 21:44:47 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-08 21:43:45 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:43:39.508277 2026] [security2:error] [pid 22133:tid 22133] [client 2a02:c207:2347:8842::1:37862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garyrankin.com"] [uri "/shop/.env"] [unique_id "asgOi4nveG6cCLV17ySTwwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 21:28:10 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:28:06.225419 2026] [security2:error] [pid 27067:tid 27067] [client 2a02:c207:2347:8842::1:36950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rkhindustries.com"] [uri "/shop/.env"] [unique_id "asgK5hgzJoDsROtoYYpX7wAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 20:59:45 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 16:59:37.461664 2026] [security2:error] [pid 22376:tid 22376] [client 2a02:c207:2347:8842::1:45852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendywonjungkim.com"] [uri "/dev/.env"] [unique_id "asgEOXv73WWXdTHSbm2QowAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 02:43:30 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserve ... show more (mod_security) mod_security (id:210492) triggered by 2a02:c207:2347:8842::1 (vmi3478842.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 22:43:26.731318 2026] [security2:error] [pid 10891:tid 10891] [client 2a02:c207:2347:8842::1:50094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosawallas.com"] [uri "/admin/config/.env"] [unique_id "ascDTvpDM-rsgjFDDQr9QQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 160.238.169.46

🇺🇸 138.197.35.59

🇮🇩 114.141.59.196

🇺🇸 74.82.62.138

🇫🇷 2001:41d0:33a:a00::400

🇸🇪 171.25.158.155

🇧🇷 130.49.114.54

🇨🇳 115.191.40.54

🇨🇳 113.66.230.6

🇺🇸 95.135.134.206

🇳🇱 91.92.42.200

🇺🇸 64.62.197.107

🇳🇵 45.117.153.121

🇷🇺 37.28.177.141

🇺🇸 147.185.132.55

🇨🇳 123.185.8.91

🇳🇱 109.160.32.124

🇺🇸 108.162.216.82

🇧🇩 103.122.44.55

🇺🇸 96.89.227.150