JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2604:4300:a:30e:463d:e7f9:c8a6:d18b

2604:4300:a:30e:463d:e7f9:c8a6:d18b was found in our database!

This IP was reported 59 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Nocix, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS33387
Domain Name	nocix.net
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2604:4300:a:30e:463d:e7f9:c8a6:d18b

Whois 2604:4300:a:30e:463d:e7f9:c8a6:d18b

IP Abuse Reports for 2604:4300:a:30e:463d:e7f9:c8a6:d18b:

This IP address has been reported a total of 59 times from 31 distinct sources. 2604:4300:a:30e:463d:e7f9:c8a6:d18b was first reported on October 15th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-10-17 03:11:15 (6 hours ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 2604:4300:a:30e:463d:e7f9:c8a6:d18b 172.68.150.88 - - [15 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 2604:4300:a:30e:463d:e7f9:c8a6:d18b 172.68.150.88 - - [15/Oct/2026:16:26:05 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇭🇺 kranem	2026-10-16 18:00:39 (15 hours ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 33387 (Nocix, LLC) Protocol: HTTP/1.1 (PO ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 33387 (Nocix, LLC) Protocol: HTTP/1.1 (POST method) Endpoint: / Timestamp: 2026-10-16T12:41:23Z User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Bad Web Bot
🇮🇩 origrata	2026-10-16 13:38:23 (19 hours ago)	[OGWAF] path_traversal attack blocked \| severity: high \| GET /.env \| UA: Mozilla/5.0 (X11; Linux x86 ... show more [OGWAF] path_traversal attack blocked \| severity: high \| GET /.env \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/5 show less	Hacking Web App Attack
🇭🇺 kranem	2026-10-16 12:00:27 (21 hours ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 33387 (Nocix, LLC) Protocol: HTTP/1.1 (PO ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 33387 (Nocix, LLC) Protocol: HTTP/1.1 (POST method) Endpoint: / Timestamp: 2026-10-16T09:51:33Z User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-16 08:35:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2604:4300:a:30e:463d:e7f9:c8a6:d18b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2604:4300:a:30e:463d:e7f9:c8a6:d18b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 04:35:40.210991 2026] [security2:error] [pid 28789:tid 28789] [client 2604:4300:a:30e:463d:e7f9:c8a6:d18b:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goalsnet.net"] [uri "/.env"] [unique_id "atHh3H64Suev0Gzty1zR0AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 07:25:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2604:4300:a:30e:463d:e7f9:c8a6:d18b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2604:4300:a:30e:463d:e7f9:c8a6:d18b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:25:39.943789 2026] [security2:error] [pid 562:tid 603] [client 2604:4300:a:30e:463d:e7f9:c8a6:d18b:55422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seracon.com.ec"] [uri "/.env"] [unique_id "atHRc-pVeSd0fT7Qp1845QAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-16 06:19:59 (1 day ago)	Automatically blocked after 1 security event. Observed sensitive configuration-file probes. Source: ... show more Automatically blocked after 1 security event. Observed sensitive configuration-file probes. Source: Cloudflare security controls. show less	Hacking Web App Attack
Anonymous	2026-10-16 05:29:17 (1 day ago)	Automated report (2026-10-16T01:29:17-04:00). Caught probing for env file.	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-10-16 05:15:53 (1 day ago)	2 attacks on env grabbing URLs: GET /.env HTTP/1.1	Hacking
Anonymous	2026-10-16 03:43:04 (1 day ago)	Malicious scan detected (score: 5 >= 4): Path Matches Pattern (/.env, weight 5) on path: /.env	Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-10-16 03:37:19 (1 day ago)	Cloudflare WAF: Request Path: /.env Request Query: Host: warzone.elhacker.net userAgent: Mozilla/5. ... show more Cloudflare WAF: Request Path: /.env Request Query: Host: warzone.elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 Action: block Source: firewallCustom ASN Description: Nocix, LLC Country: US Method: GET Timestamp: 2026-10-16T03:37:19Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. show less	Hacking SQL Injection Web App Attack
🇵🇱 mscode.pl	2026-10-16 03:36:08 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE ASN: 33387 (Nocix, LLC) P ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE ASN: 33387 (Nocix, LLC) Protocol: HTTP/1.1 (POST method) Zone: cp.mscode.pl Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-16 03:33:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2604:4300:a:30e:463d:e7f9:c8a6:d18b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2604:4300:a:30e:463d:e7f9:c8a6:d18b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:33:39.738493 2026] [security2:error] [pid 27958:tid 27958] [client 2604:4300:a:30e:463d:e7f9:c8a6:d18b:64263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lmga.net"] [uri "/.env"] [unique_id "atGbE58V6w0tx8kCUQ-fTgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 03:15:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2604:4300:a:30e:463d:e7f9:c8a6:d18b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2604:4300:a:30e:463d:e7f9:c8a6:d18b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:15:22.209557 2026] [security2:error] [pid 14697:tid 14697] [client 2604:4300:a:30e:463d:e7f9:c8a6:d18b:58292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secuencia.com"] [uri "/.env"] [unique_id "atGWyg-ZGYmiSSa3iEBUmAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kkw	2026-10-16 03:12:09 (1 day ago)	[REDACTED] 2604:4300:a:30e:463d:e7f9:c8a6:d18b - - [16/Oct/2026:05:12:08 +0200] "GET /.env HTTP/2.0" ... show more [REDACTED] 2604:4300:a:30e:463d:e7f9:c8a6:d18b - - [16/Oct/2026:05:12:08 +0200] "GET /.env HTTP/2.0" 404 281892 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... (mode: searching http-sensitive-files) show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.68.23.11

🇦🇷 131.255.240.10

🇮🇩 103.155.46.254

🇺🇸 66.132.159.41

🇿🇦 41.25.43.103

🇹🇼 198.235.24.10

🇮🇳 152.58.122.148

🇺🇸 147.90.234.13

🇨🇳 121.224.78.164

🇨🇳 49.64.85.138

🇧🇪 35.233.26.156

🇮🇹 2.159.41.138

🇺🇸 2001:4860:4844:400::

🇷🇼 197.243.14.52

🇷🇴 193.32.162.84

🇮🇳 103.132.243.250

🇳🇱 89.248.172.10

🇩🇪 87.106.13.39

🇨🇳 36.152.7.48

🇷🇴 2.57.121.25