JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2600:3c00::f03c:93ff:fea8:e8c0

2600:3c00::f03c:93ff:fea8:e8c0 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 40%: ?

40%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Richardson, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2600:3c00::f03c:93ff:fea8:e8c0

Whois 2600:3c00::f03c:93ff:fea8:e8c0

IP Abuse Reports for 2600:3c00::f03c:93ff:fea8:e8c0:

This IP address has been reported a total of 11 times from 9 distinct sources. 2600:3c00::f03c:93ff:fea8:e8c0 was first reported on June 11th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-06-13 05:14:31 (2 weeks ago)	5 attacks on env grabbing URLs: GET /.env HTTP/1.1	Hacking
🇱🇻 garmtech.com	2026-06-12 13:36:05 (2 weeks ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇬🇧 Aetherweb Ark	2026-06-12 07:01:09 (2 weeks ago)	(mod_security) mod_security (id:949110) triggered by 2600:3c00::f03c:93ff:fea8:e8c0 (Unknown): N in ... show more (mod_security) mod_security (id:949110) triggered by 2600:3c00::f03c:93ff:fea8:e8c0 (Unknown): N in the last X secs show less	Web App Attack
🇧🇪 cmbplf	2026-06-12 03:29:54 (2 weeks ago)	712 requests with url.path *.env	Brute-Force Bad Web Bot
🇳🇱 e.fierstra	2026-06-12 02:03:31 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-12 01:54:35 (2 weeks ago)	Try to access /.env	Web App Attack
🇳🇱 BlueWire Hosting	2026-06-12 01:28:37 (2 weeks ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 20:38:50 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2600:3c00::f03c:93ff:fea8:e8c0 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2600:3c00::f03c:93ff:fea8:e8c0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 16:38:42.989636 2026] [security2:error] [pid 22157:tid 22157] [client 2600:3c00::f03c:93ff:fea8:e8c0:51756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nomorenicenice.net"] [uri "/.env"] [unique_id "aisc0tu7nKK5tf9zA0OAKgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2026-06-11 20:25:18 (2 weeks ago)	[2026-06-11 23:25:17] Probing for dotfiles "GET /.env HTTP/1.1" 301	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 20:20:56 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2600:3c00::f03c:93ff:fea8:e8c0 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2600:3c00::f03c:93ff:fea8:e8c0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 16:20:53.646727 2026] [security2:error] [pid 17967:tid 17990] [client 2600:3c00::f03c:93ff:fea8:e8c0:34256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nickkonstantinidis.appraisalteam.net"] [uri "/.env"] [unique_id "aisYpV189Qxg4lJc0rjd0AAAANQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 16:00:10 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2600:3c00::f03c:93ff:fea8:e8c0 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2600:3c00::f03c:93ff:fea8:e8c0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 12:00:03.053912 2026] [security2:error] [pid 7150:tid 7150] [client 2600:3c00::f03c:93ff:fea8:e8c0:34760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.melton.space"] [uri "/.env"] [unique_id "airbg8n0StxyMcLQWJDUigAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 213.232.121.139

🇫🇷 195.154.55.188

🇳🇱 185.107.80.93

🇨🇳 182.44.10.68

🇸🇬 101.47.159.50

🇸🇬 43.156.148.224

🇧🇪 34.14.6.90

🇨🇳 223.107.72.234

🇩🇪 212.30.36.7

🇧🇷 205.210.31.208

🇺🇸 192.81.229.179

🇨🇳 175.9.152.190

🇺🇸 159.89.158.247

🇮🇳 143.110.247.221

🇺🇸 137.175.30.210

🇺🇸 135.237.127.188

🇮🇳 128.185.235.110

🇱🇹 81.30.98.49

🇩🇪 69.5.169.33

🇸🇬 43.128.92.189