JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2400:fa80:4:f:2c7c:dc8d:7a09:4150

2400:fa80:4:f:2c7c:dc8d:7a09:4150 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 43%: ?

43%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Intergrid - Auckland Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS133480
Domain Name	intergrid.com.au
Country	🇳🇿 New Zealand
City	Auckland, Auckland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2400:fa80:4:f:2c7c:dc8d:7a09:4150

Whois 2400:fa80:4:f:2c7c:dc8d:7a09:4150

IP Abuse Reports for 2400:fa80:4:f:2c7c:dc8d:7a09:4150:

This IP address has been reported a total of 10 times from 6 distinct sources. 2400:fa80:4:f:2c7c:dc8d:7a09:4150 was first reported on August 22nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 maxxsense	2026-08-23 10:44:37 (2 days ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 2400:fa80:4:f:2c7c:dc8d: ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (NZ/New Zealand/-) show less	Port Scan
🇮🇹 VHosting	2026-08-23 00:15:06 (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-08-22 23:13:49 (3 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 20:47:02 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:46:55.102715 2026] [security2:error] [pid 28645:tid 28645] [client 2400:fa80:4:f:2c7c:dc8d:7a09:4150:35550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.northfortworthalliance.com"] [uri "/wp-config.txt"] [unique_id "aooKv5BuImbu8nLBhxGrwwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-22 17:41:32 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 14:58:58 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 10:58:48.348467 2026] [security2:error] [pid 11360:tid 11360] [client 2400:fa80:4:f:2c7c:dc8d:7a09:4150:40464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kbalan.com"] [uri "/wp-config.php.save"] [unique_id "aom5KKcY7ITdIb-u0okOywAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-08-22 12:44:32 (3 days ago)	22/Aug/2026:14:44:31.914384 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 22/Aug/2026:14:44:31.914384 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 2400:fa80:4:f:2c7c:dc8d:7a09:4150] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.hostench.eu"] [uri "/wp-co ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 11:06:24 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 07:06:16.155752 2026] [security2:error] [pid 11287:tid 11287] [client 2400:fa80:4:f:2c7c:dc8d:7a09:4150:60502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.godcanuseyou.com"] [uri "/wp-config.php.txt"] [unique_id "aomCqNjjqGeUI0ShJXWTgQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:01:36 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:01:28.153796 2026] [security2:error] [pid 8173:tid 8173] [client 2400:fa80:4:f:2c7c:dc8d:7a09:4150:47004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cms2020.com"] [uri "/wp-config.php.swp"] [unique_id "aoktKPLMXsZVqHVLOLU73AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 02:22:11 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2400:fa80:4:f:2c7c:dc8d:7a09:4150 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 22:22:02.644757 2026] [security2:error] [pid 11356:tid 11356] [client 2400:fa80:4:f:2c7c:dc8d:7a09:4150:45700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bickleton.org"] [uri "/wp-config.php.BAK"] [unique_id "aokHyjBsfKO_h7uvlfBu7AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2404:7c80:85:4286:693e:d780:4f6d:adaa

🇸🇦 2001:16a2:6832:6e38:e99d:bb31:5ce4:f88d

🇳🇱 206.189.5.249

🇺🇸 205.210.31.68

🇬🇧 195.96.139.227

🇨🇦 184.162.209.22

🇺🇸 147.185.132.195

🇭🇰 109.206.247.77

🇺🇸 104.228.210.115

🇮🇳 103.178.64.142

🇮🇹 94.156.32.33

🇪🇸 81.172.78.210

🇨🇳 61.184.71.235

🇨🇳 58.220.39.200

🇯🇵 8.216.4.69

🇺🇸 207.90.244.26

🇺🇸 205.210.31.41

🇹🇼 198.235.24.51

🇹🇳 197.15.4.168

🇬🇪 178.134.185.82