AbuseIPDB » 2400:6180:0:d2:0:2:dd23:0
2400:6180:0:d2:0:2:dd23:0
This IP was reported 7 times. Confidence of
Abuse
is 23% : ?
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇸🇬
Singapore
City
Singapore
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 2400:6180:0:d2:0:2:dd23:0 :
This IP address has been reported a total of
7
times from
3 distinct
sources.
2400:6180:0:d2:0:2:dd23:0 was first reported on
June 24th 2026 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
4server
2026-06-25 01:17:52
(3 days ago)
[ThuJun2503:17:48.2746062026][security2:error][pid1297395:tid1297420][client2400:6180:0:d2:0:2:dd23: ...
show more
[ThuJun2503:17:48.2746062026][security2:error][pid1297395:tid1297420][client2400:6180:0:d2:0:2:dd23:0:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"shadowdrummer.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajyBvEStvM0wrEPIveTDHgAAAFU\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 00:46:29
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 20:46:20.687129 2026] [security2:error] [pid 11016:tid 11016] [client 2400:6180:0:d2:0:2:dd23:0:44586] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stsis.me|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stsis.me"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajx6XIEgoEg6FbyMfAXd_gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 22:42:57
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 18:42:47.103799 2026] [security2:error] [pid 8890:tid 8890] [client 2400:6180:0:d2:0:2:dd23:0:56564] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||athome360.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "athome360.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajxdZ-ofUDZxY30oYSB87wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-24 15:19:58
(4 days ago)
Web attack blocked by Wordfence on vestingstadvalkenburg.nl (1 hit). Reported by CRMON.
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 13:08:32
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 09:08:26.698128 2026] [security2:error] [pid 22761:tid 22761] [client 2400:6180:0:d2:0:2:dd23:0:54210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hardcountryrock.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hardcountryrock.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajvWypvfB_-d-Bf6zs8RWgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 12:22:34
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 08:22:29.846662 2026] [security2:error] [pid 30885:tid 30885] [client 2400:6180:0:d2:0:2:dd23:0:51366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||scottschiaffo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scottschiaffo.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajvMBauyPc6OsYqph2wB8gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 01:43:26
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2400:6180:0:d2:0:2:dd23:0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 21:43:17.824257 2026] [security2:error] [pid 9500:tid 9500] [client 2400:6180:0:d2:0:2:dd23:0:38496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jitterbugswing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jitterbugswing.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajs2NQUzXH_25cH-XV-LSwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: