JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2602:f6f6:2:dc17::1

2602:f6f6:2:dc17::1 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 12%: ?

12%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fourplex Telecom LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS27284
Domain Name	fourplex.net
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2602:f6f6:2:dc17::1

Whois 2602:f6f6:2:dc17::1

IP Abuse Reports for 2602:f6f6:2:dc17::1:

This IP address has been reported a total of 38 times from 7 distinct sources. 2602:f6f6:2:dc17::1 was first reported on July 30th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-03 17:57:23 (4 hours ago)	Blocked by UFW (TCP on 8333) Source port: 42286 Packet length: 80 This report (for 2602:f6f6:0002:d ... show more Blocked by UFW (TCP on 8333) Source port: 42286 Packet length: 80 This report (for 2602:f6f6:0002:dc17:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-02 22:54:56 (23 hours ago)	Blocked by UFW (TCP on 40820) Source port: 57386 Packet length: 80 This report (for 2602:f6f6:0002: ... show more Blocked by UFW (TCP on 40820) Source port: 57386 Packet length: 80 This report (for 2602:f6f6:0002:dc17:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-01 06:38:43 (2 days ago)	Blocked by UFW (TCP on 9850) Source port: 42238 Packet length: 80 This report (for 2602:f6f6:0002:d ... show more Blocked by UFW (TCP on 9850) Source port: 42238 Packet length: 80 This report (for 2602:f6f6:0002:dc17:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-26 19:48:51 (1 week ago)	Blocked by UFW (TCP on 47998) Source port: 41584 Packet length: 80 This report (for 2602:f6f6:0002: ... show more Blocked by UFW (TCP on 47998) Source port: 41584 Packet length: 80 This report (for 2602:f6f6:0002:dc17:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-26 03:40:59 (1 week ago)	Blocked by UFW (TCP on 47998) Source port: 48672 Packet length: 80 This report (for 2602:f6f6:0002: ... show more Blocked by UFW (TCP on 47998) Source port: 48672 Packet length: 80 This report (for 2602:f6f6:0002:dc17:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-26 21:02:09 (1 month ago)	2026-04-26 08:00:29,034 fail2ban.actions [7718]: NOTICE [tor] Ban 2602:f6f6:2:dc17::1 2026-0 ... show more 2026-04-26 08:00:29,034 fail2ban.actions [7718]: NOTICE [tor] Ban 2602:f6f6:2:dc17::1 2026-04-26 12:01:26,593 fail2ban.actions [7718]: NOTICE [tor] Ban 2602:f6f6:2:dc17::1 2026-04-26 18:01:24,372 fail2ban.actions [7718]: NOTICE [tor] Ban 2602:f6f6:2:dc17::1 2026-04-26 21:01:21,457 fail2ban.actions [7718]: NOTICE [tor] Ban 2602:f6f6:2:dc17::1 2026-04-27 00:02:08,568 fail2ban.actions [7718]: NOTICE [tor] Ban 2602:f6f6:2:dc17::1 show less	Brute-Force
🇮🇹 VHosting	2026-03-26 20:34:00 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-17 14:35:25 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 09:35:20.027056 2026] [security2:error] [pid 5087:tid 5087] [client 2602:f6f6:2:dc17::1:54354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.beachcitytshirts.com"] [uri "/.git/config"] [unique_id "aWueKNdAR4BLry9L5mJYIgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-05 10:53:09 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 05:52:58.229740 2026] [security2:error] [pid 603:tid 690] [client 2602:f6f6:2:dc17::1:59808] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|planmytrust.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "planmytrust.com"] [uri "/ust_com.sql"] [unique_id "aVuYClRcrgy_Bqt6bbkffwAAARU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-01 20:13:44 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 01 15:13:38.705015 2026] [security2:error] [pid 13548:tid 13548] [client 2602:f6f6:2:dc17::1:51968] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|talkingmess.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "talkingmess.com"] [uri "/backup_wp.sql"] [unique_id "aVbVcja-TxA2D32PIai7ZgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-23 06:47:45 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 01:47:37.445397 2025] [security2:error] [pid 29636:tid 29636] [client 2602:f6f6:2:dc17::1:40060] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|femalegamblers.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "femalegamblers.org"] [uri "/alegamblers_com.sql"] [unique_id "aUo7CaOUOe_nTL1KFk_p6gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-21 09:57:46 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 21 04:57:38.236677 2025] [security2:error] [pid 12153:tid 12153] [client 2602:f6f6:2:dc17::1:34806] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bundrenfarmstn.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bundrenfarmstn.com"] [uri "/bundrenfarms.sql"] [unique_id "aUfEkqttj04W3SBxu-3OhgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-20 20:30:50 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 15:30:31.614297 2025] [security2:error] [pid 27056:tid 27056] [client 2602:f6f6:2:dc17::1:45330] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kinderland-preschool.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kinderland-preschool.com"] [uri "/-preschool_com.sql"] [unique_id "aUcHZ6Q0pB3oRq9itq1bJgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-13 10:20:34 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 05:20:24.951387 2025] [security2:error] [pid 16506:tid 16506] [client 2602:f6f6:2:dc17::1:58246] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|velocitymech.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "velocitymech.com"] [uri "/backups.sql"] [unique_id "aT096PgYF9TmfKenZ6fsKgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-11 02:40:20 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 2602:f6f6:2:dc17::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 21:40:12.033243 2025] [security2:error] [pid 23917:tid 23917] [client 2602:f6f6:2:dc17::1:46368] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kairoslogammakmur.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kairoslogammakmur.com"] [uri "/kairoslogammakmur.sql"] [unique_id "aTovDFc7d1XlufbX-ARpLwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.131

🇷🇺 85.95.166.40

🇺🇸 195.184.76.29

🇳🇱 192.142.24.43

🇮🇩 180.240.181.38

🇮🇳 171.61.20.182

🇨🇳 122.246.238.161

🇨🇳 106.13.146.205

🇺🇸 66.132.195.22

🇯🇵 43.165.183.231

🇮🇪 34.255.100.45

🇱🇹 185.169.4.11

🇫🇮 147.185.133.251

🇰🇷 106.251.244.178

🇮🇩 36.66.16.233

🇺🇸 20.127.185.37

🇺🇸 2602:fb54:1a00::86

🇧🇷 191.253.105.30

🇧🇷 187.62.86.175

🇨🇭 186.190.215.90