JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2604:1380:4642:c300::2

2604:1380:4642:c300::2 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Packet Host, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS15830
Domain Name	equinix.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2604:1380:4642:c300::2

Whois 2604:1380:4642:c300::2

IP Abuse Reports for 2604:1380:4642:c300::2:

This IP address has been reported a total of 13 times from 13 distinct sources. 2604:1380:4642:c300::2 was first reported on April 27th 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2024-04-29 21:46:21 (2 years ago)	Unauthorized connections HTTP 403	Web App Attack
🇺🇸 Major Hostility	2024-04-29 20:32:58 (2 years ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "GET /lv.php HTTP/1.1" 404 "GET ... show more "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "GET /lv.php HTTP/1.1" 404 "GET /wp-22.php?sfilename=bdkr28tools.php&sfilecontent=&supfiles= HTTP/1.1" 404 "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 "GET /wp-includes/Requests/about.php HTTP/1.1" 404 "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 "GET /wp-content/banners/about.php HTTP/1.1" 404 "GET /wp-content/about.php HTTP/1.1" 404 "GET /.well-known/about.php HTTP/1.1" 404 "GET /wp-includes/Text/about.php HTTP/1.1" 404 "GET /wp-includes/ID3/about.php HTTP/1.1" 40 show less	Web App Attack
🇵🇱 strefapi_com	2024-04-29 18:53:52 (2 years ago)	Brute-force web ...	Hacking Brute-Force Web App Attack
🇩🇪 Ba-Yu	2024-04-29 18:32:06 (2 years ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 Donovan_DMC	2024-04-29 16:56:02 (2 years ago)	GET /wp-content/plugins/hellopress/wp_filemanager.php - 2604:1380:4642:c300::2 [wp-plugins]: WordPre ... show more GET /wp-content/plugins/hellopress/wp_filemanager.php - 2604:1380:4642:c300::2 [wp-plugins]: WordPress Plugin Scanner [wp-content]: WordPress Content Scanner [php-scanner]: PHP Scanner show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-04-29 06:57:51 (2 years ago)	7.319 4xx requests in 1 hour (1w5d19h)	Brute-Force Bad Web Bot
Anonymous	2024-04-29 06:00:00 (2 years ago)	Hacking	Hacking SQL Injection
Anonymous	2024-04-29 01:56:35 (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show more Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
Anonymous	2024-04-29 01:46:02 (2 years ago)	Fail2Ban apache-noscript	Bad Web Bot
🇩🇪 jasperedv.de	2024-04-28 23:17:07 (2 years ago)	Apache Login - Brutforcing	Brute-Force Web App Attack
Anonymous	2024-04-28 21:24:23 (2 years ago)	2604:1380:4642:c300::2 (US/United States/Texas/Dallas/-/[redacted]), more than 120 Apache 404 hits	Hacking
🇺🇸 TPI-Abuse	2024-04-28 20:26:49 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2604:1380:4642:c300::2 (prime): 1 in the last 3 ... show more (mod_security) mod_security (id:210730) triggered by 2604:1380:4642:c300::2 (prime): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 28 16:26:42.446384 2024] [security2:error] [pid 26589] [client 2604:1380:4642:c300::2:54799] [client 2604:1380:4642:c300::2] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|archaiusmusic.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "archaiusmusic.com"] [uri "/home/pupilpu5/archaiusmusic.com"] [unique_id "Zi6xAvt_WrfzNIeejDKycgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 netfactotum	2024-04-27 18:26:45 (2 years ago)		Hacking Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.133

🇧🇪 198.235.24.235

🇺🇸 136.115.135.242

🇭🇰 118.193.44.112

🇳🇬 105.116.14.3

🇺🇦 91.224.45.183

🇷🇴 81.18.88.198

🇷🇺 77.232.165.213

🇧🇷 45.65.222.52

🇰🇪 41.90.172.186

🇨🇳 36.104.147.6

🇺🇸 34.67.11.108

🇷🇴 2.57.122.150

🇲🇾 202.185.107.109

🇧🇷 200.222.7.143

🇨🇦 142.189.152.111

🇧🇬 109.160.32.73

🇹🇷 94.154.43.36

🇮🇳 64.227.191.20

🇺🇸 52.151.194.62