JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2602:fa59:9:1c2::1

2602:fa59:9:1c2::1

Neutral Activity IPv6 SLAAC Note

54 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

RouterHosting LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14956

Domain Name

cloudzy.com

Country

🇺🇸 United States of America

City

Ogden, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2602:fa59:9:1c2::1 has been reported 54 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2602:fa59:9:1c2::1:

This IP address has been reported a total of 54 times from 31 distinct sources. 2602:fa59:9:1c2::1 was first reported on October 7th 2025, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Major Hostility	2025-11-10 14:36:07 (9 months ago)	"GET /xmlrpc.php HTTP/1.1" 403 "GET /api/config HTTP/1.1" 404 "GET /api/settings HTTP/1.1" 404 "GET ... show more "GET /xmlrpc.php HTTP/1.1" 403 "GET /api/config HTTP/1.1" 404 "GET /api/settings HTTP/1.1" 404 "GET /config.json HTTP/1.1" 404 "GET /settings.json HTTP/1.1" 404 "GET /app-config.json HTTP/1.1" 404 show less	Web App Attack
🇬🇧 Mendip_Defender	2025-11-10 02:46:24 (9 months ago)	2602:fa59:9:1c2::1 - - [10/Nov/2025:02:46:06 +0000] "GET /xmlrpc.php HTTP/1.1" 403 146 "-" "python-h ... show more 2602:fa59:9:1c2::1 - - [10/Nov/2025:02:46:06 +0000] "GET /xmlrpc.php HTTP/1.1" 403 146 "-" "python-httpx/0.28.1" 2602:fa59:9:1c2::1 - - [10/Nov/2025:02:46:14 +0000] "GET /config.json HTTP/1.0" 404 46446 "-" "python-httpx/0.28.1" 2602:fa59:9:1c2::1 - - [10/Nov/2025:02:46:15 +0000] "GET /app-config.json HTTP/1.0" 404 46446 "-" "python-httpx/0.28.1" ... show less	Hacking Web App Attack
🇮🇹 ciccio diddo	2025-11-10 02:18:32 (9 months ago)	CMS/WP Exploit xmlrpc port:Tcp/80,443	Brute-Force Web App Attack
🇷🇺 Reaper	2025-11-09 07:47:03 (9 months ago)	Repeated 404 errors from 2602:fa59:9:1c2::1	Web App Attack
🇩🇰 swrlly	2025-11-09 06:43:10 (9 months ago)	1 unauthorized webserver connection	Web App Attack
🇳🇱 Site.eu	2025-11-09 04:36:08 (9 months ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 conseilgouz	2025-11-07 18:42:47 (10 months ago)	doe-17 : Block hidden directories=>/.env(/)	Hacking
🇩🇪 conseilgouz	2025-11-07 13:36:09 (10 months ago)	ece-17 : Block hidden directories=>/.env(/)	Hacking
🇬🇧 Swiptly	2025-11-06 23:52:03 (10 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇩🇪 Skyrider	2025-11-06 22:50:55 (10 months ago)	2602:fa59:9:1c2::1 - - [06/Nov/2025:23:50:53 +0100] "GET /api/config HTTP/2.0" 404 114 "-" "python-h ... show more 2602:fa59:9:1c2::1 - - [06/Nov/2025:23:50:53 +0100] "GET /api/config HTTP/2.0" 404 114 "-" "python-httpx/0.28.1" 2602:fa59:9:1c2::1 - - [06/Nov/2025:23:50:53 +0100] "GET /api/settings HTTP/2.0" 404 114 "-" "python-httpx/0.28.1" 2602:fa59:9:1c2::1 - - [06/Nov/2025:23:50:54 +0100] "GET /.env HTTP/2.0" 404 114 "-" "python-httpx/0.28.1" 2602:fa59:9:1c2::1 - - [06/Nov/2025:23:50:55 +0100] "GET /config.json HTTP/2.0" 404 114 "-" "python-httpx/0.28.1" 2602:fa59:9:1c2::1 - - [06/Nov/2025:23:50:55 +0100] "GET /settings.json HTTP/2.0" 404 114 "-" "python-httpx/0.28.1" show less	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-11-06 12:50:19 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /config.js UA: python-httpx/0.28.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 cycastic	2025-11-06 06:34:02 (10 months ago)	Probed /.env on 11/06/2025 06:31:36 +00:00 (UA: python-httpx/0.28.1, Query: )	Web App Attack
🇬🇧 [email protected]	2025-11-06 00:55:45 (10 months ago)	...	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-11-05 23:52:31 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 2602:fa59:9:1c2::1 (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2602:fa59:9:1c2::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 18:52:25.785538 2025] [security2:error] [pid 17567:tid 17567] [client 2602:fa59:9:1c2::1:59596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dadlounge.com"] [uri "/.env"] [unique_id "aQvjOfenhfsk9tg-43Q61QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-05 22:51:51 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 2602:fa59:9:1c2::1 (Unknown): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 2602:fa59:9:1c2::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 17:51:44.980398 2025] [security2:error] [pid 12955:tid 12955] [client 2602:fa59:9:1c2::1:60719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "decroos.org"] [uri "/.env"] [unique_id "aQvVACHaJ520d-e3tY2xZQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:ef7f:4001

🇳🇱 195.178.110.218

🇳🇱 193.176.31.242

🇬🇧 193.176.29.6

🇨🇴 190.131.215.233

🇧🇴 186.121.247.100

🇬🇧 185.247.137.189

🇬🇧 185.247.137.188

🇬🇧 185.247.137.187

🇬🇧 185.247.137.186

🇬🇧 185.247.137.19

🇫🇮 147.185.133.29

🇧🇬 109.160.32.61

🇮🇩 103.188.168.207

🇷🇺 95.105.0.28

🇰🇷 61.80.158.202

🇨🇳 59.47.34.156

🇳🇱 34.147.11.21

🇮🇩 34.50.69.122

🇺🇸 20.40.253.27