JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2602:fb54:99a::

2602:fb54:99a:: was found in our database!

This IP was reported 512 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Advin Services LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22295
Domain Name	advinservers.com
Country	🇺🇸 United States of America
City	North Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2602:fb54:99a::

Whois 2602:fb54:99a::

IP Abuse Reports for 2602:fb54:99a:::

This IP address has been reported a total of 512 times from 170 distinct sources. 2602:fb54:99a:: was first reported on May 16th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-09 18:21:41 (3 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 Catalin Negru	2026-06-09 17:05:26 (3 months ago)	2026-05-22 07:33:31,731 fail2ban.actions [671]: NOTICE [apache-404] Ban 2602:fb54:99a:: 2026 ... show more 2026-05-22 07:33:31,731 fail2ban.actions [671]: NOTICE [apache-404] Ban 2602:fb54:99a:: 2026-05-22 07:33:31,829 fail2ban.actions [671]: NOTICE [web-scanner] Ban 2602:fb54:99a:: 2026-05-22 07:33:31,848 fail2ban.actions [671]: NOTICE [laravel-auth] Ban 2602:fb54:99a:: 2026-05-22 07:33:31,923 fail2ban.actions [671]: NOTICE [laravel-env] Ban 2602:fb54:99a:: 2026-05-22 07:33:31,952 fail2ban.actions [671]: NOTICE [apache-dirscan] Ban 2602:fb54:99a:: ... show less	Brute-Force Web App Attack
🇩🇪 4server	2026-06-09 13:17:12 (3 months ago)	[TueJun0915:17:10.7654682026][security2:error][pid2969638:tid2969763][client2602:fb54:99a:::0]ModSec ... show more [TueJun0915:17:10.7654682026][security2:error][pid2969638:tid2969763][client2602:fb54:99a:::0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.gmint.ch\"][uri\"/wp-content/debug.log\"][unique_id\"aigSVsxZskSZPtq0KOShHwAAAIk\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 Baking333	2026-06-09 13:04:35 (3 months ago)	[redacted] 2602:fb54:99a:: - - [09/Jun/2026:14:04:31 +0100] "GET /wp-content/[redacted] HTTP/1.1" 30 ... show more [redacted] 2602:fb54:99a:: - - [09/Jun/2026:14:04:31 +0100] "GET /wp-content/[redacted] HTTP/1.1" 302 5268 0/150103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" [redacted] 2602:fb54:99a:: - - [09/Jun/2026:14:04:33 +0100] "GET /.env HTTP/1.1" 302 1539 0/132653 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" show less	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-06-09 12:59:00 (3 months ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 10:15:09 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2602:fb54:99a:: (Unknown): 1 in the last 300 se ... show more (mod_security) mod_security (id:210492) triggered by 2602:fb54:99a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:15:02.449258 2026] [security2:error] [pid 24470:tid 24470] [client 2602:fb54:99a:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdn-7.socialstudiesforkids.com"] [uri "/.env"] [unique_id "aifnpjSlOz2gLiarygd3iAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 clapper	2026-06-09 09:16:38 (3 months ago)	(mod_security) mod_security (id:949110) triggered by 2602:fb54:99a:: (Unknown): 3 in the last 3600 s ... show more (mod_security) mod_security (id:949110) triggered by 2602:fb54:99a:: (Unknown): 3 in the last 3600 secs; ID: LUC show less	Brute-Force Bad Web Bot
🇩🇪 4server	2026-06-09 06:48:40 (3 months ago)	[TueJun0908:48:35.1537832026][security2:error][pid2495995:tid2496090][client2602:fb54:99a:::0]ModSec ... show more [TueJun0908:48:35.1537832026][security2:error][pid2495995:tid2496090][client2602:fb54:99a:::0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"federicorella.ch\"][uri\"/wp-content/debug.log\"][unique_id\"aie3QwRrZYexQnQRJP-zDwAAAEs\"] show less	Port Scan Brute-Force Web App Attack
🇧🇪 sid3windr	2026-06-09 03:13:31 (3 months ago)	GET /config/credentials.json (Tarpitted for 1d15h8m26s, wasted 8.06MB)	Web App Attack
🇵🇱 itsvic.dev	2026-06-09 01:24:56 (3 months ago)	2602:fb54:99a:: - - [09/Jun/2026:01:24:55 +0000] "GET /wp-content/debug.log HTTP/1.1" 404 14 "-" "Mo ... show more 2602:fb54:99a:: - - [09/Jun/2026:01:24:55 +0000] "GET /wp-content/debug.log HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 2602:fb54:99a:: - - [09/Jun/2026:01:24:56 +0000] "GET /api/.env HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 2602:fb54:99a:: - - [09/Jun/2026:01:24:56 +0000] "GET /backend/.env HTTP/1.1" 404 14 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" ... show less	Brute-Force Web App Attack
🇩🇪 netclix.gr	2026-06-09 00:58:31 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 2602:fb54:99a:: (Unknown): (CF_ENABLE)	SQL Injection
🇳🇱 larse99	2026-06-08 23:50:41 (3 months ago)	Detected Scanning / Hacking activity	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-08 23:23:17 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2602:fb54:99a:: (Unknown): 1 in the last 300 se ... show more (mod_security) mod_security (id:210492) triggered by 2602:fb54:99a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 19:23:13.119936 2026] [security2:error] [pid 14311:tid 14311] [client 2602:fb54:99a:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.c2cservices.com"] [uri "/.env"] [unique_id "aidO4d8prSt5j0EEA5T0ewAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Ribeye375	2026-06-08 18:52:14 (3 months ago)	HIPS recon-attempt - Block tcp/0:65535	Web App Attack
🇩🇪 Hazzard	2026-06-08 18:23:05 (3 months ago)	Port Scan detected from 2602:fb54:99a:: (US/United States/Missouri/North Kansas City/-/[redacted]) ... show more Port Scan detected from 2602:fb54:99a:: (US/United States/Missouri/North Kansas City/-/[redacted]). show less	Port Scan

Showing 121 to 135 of 512 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 88.151.9.133

🇳🇱 62.60.131.232

🇺🇸 24.98.204.9

🇺🇸 8.231.223.109

🇳🇱 195.178.110.232

🇺🇸 188.215.127.49

🇳🇵 182.50.66.109

🇺🇸 172.202.117.31

🇺🇸 172.202.106.160

🇨🇦 161.216.56.242

🇰🇷 112.186.102.33

🇰🇷 112.166.41.154

🇳🇱 91.199.163.144

🇺🇸 52.176.211.73

🇮🇳 49.248.197.50

🇺🇸 47.251.121.162

🇨🇳 8.130.67.182

🇦🇪 2a00:f29:1148:6a80:e44c:42df:76c9:dee1

🇨🇦 178.128.234.151

🇺🇸 172.236.228.227