This IP was reported 14 times. Confidence of
Abuse
is 35%: ?
35%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
14
times from
8 distinct
sources.
2602:f6f6:2:65fe::1 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[WedJun1714:08:32.7304032026][security2:error][pid2757574:tid2757747][client2602:f6f6:2:65fe::1:0]Mo ...
show more[WedJun1714:08:32.7304032026][security2:error][pid2757574:tid2757747][client2602:f6f6:2:65fe::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.wildpferde.ch\"][uri\"/.env.staging\"][unique_id\"ajKOQIcRbfUGGPB3lw5wcgAAANQ\"]
show less
(mod_security) mod_security (id:243320) triggered by 2602:f6f6:2:65fe::1 (Unknown): 1 in the last 30 ...
show more(mod_security) mod_security (id:243320) triggered by 2602:f6f6:2:65fe::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 12:23:31.049131 2026] [security2:error] [pid 369:tid 478] [client 2602:f6f6:2:65fe::1:56358] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||coloradomohs.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "coloradomohs.aafm.us"] [uri "/.profile"] [unique_id "ajAnAy-ffj300-_6BbFPkAAAAAI"]
show less
[fail2ban Auto Report] {"time":"2026-04-25T18:28:41.862498242-04:00","level":"INFO","source":{"funct ...
show more[fail2ban Auto Report] {"time":"2026-04-25T18:28:41.862498242-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"/","user_agent":"","accept_language":"zh-CN","priority":"u=0, i","x-forwarded-for":"2602:f6f6:2:65fe::1","x-real-ip":"2602:f6f6:2:65fe::1","host":"searxng.canine.tools","check_result":{"name":"bot/no-user-agent-string","rule":"DENY","weight":0}}
...
show less