Welcome to the new IP check page! We're rolling it out gradually and would love your input. Spot a bug, or have a suggestion?
Share feedback
2602:fb54:1a00::99
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
IPv6 SLAAC Note
Public IPv6 addresses may implement the SLAAC
privacy extension. With SLAAC, the interface identifier is randomly generated. SLAAC also implements a
configurable time out, so that the original IPv6 interface addresses will be discarded in favor of a new
interface identifier.
Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
2602:fb54:1a00::99 has been reported 256
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 2602:fb54:1a00::99:
This IP address has been reported a total of
256
times from
110 distinct
sources.
2602:fb54:1a00::99 was first reported on
, and the most recent report was
.
(modsecurity) srv201 ModSecurity 2602:fb54:1a00::99 (US/United States/-): 10 in the last 3600 secs; ...
show more(modsecurity) srv201 ModSecurity 2602:fb54:1a00::99 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
[FriJun1915:51:35.2006332026][security2:error][pid2406922:tid2407024][client2602:fb54:1a00::99:0]Mod ...
show more[FriJun1915:51:35.2006332026][security2:error][pid2406922:tid2407024][client2602:fb54:1a00::99:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"gpwealth.ch\"][uri\"/wp-content/debug.log\"][unique_id\"ajVJZ2hsOIIUJpduVwqeogAAAQI\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
2602:fb54:1a00::99 - - [19/Jun/2026:10:26:27 +0000] "GET /.docker/config.json HTTP/2.0" 404 1005 "- ...
show more2602:fb54:1a00::99 - - [19/Jun/2026:10:26:27 +0000] "GET /.docker/config.json HTTP/2.0" 404 1005 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" "2602:fb54:1a00::99" "-"
...
show less
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -69.96 (Bad < -10 / Very Bad < -20 / ...
show moreBot/Spam/Scrapper attack detected on www.handytreff.de - Score: -69.96 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.
show less
(mod_security) mod_security (id:210492) triggered by 2602:fb54:1a00::99 (Unknown): 10 in the last 36 ...
show more(mod_security) mod_security (id:210492) triggered by 2602:fb54:1a00::99 (Unknown): 10 in the last 3600 secs
show less