JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a00:1c98:60:1::3c2

2a00:1c98:60:1::3c2 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Combell NV
Usage Type	Content Delivery Network
ASN	AS34762
Domain Name	combell.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a00:1c98:60:1::3c2

Whois 2a00:1c98:60:1::3c2

IP Abuse Reports for 2a00:1c98:60:1::3c2:

This IP address has been reported a total of 66 times from 17 distinct sources. 2a00:1c98:60:1::3c2 was first reported on April 11th 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 warp	2025-09-22 19:42:08 (9 months ago)	Repeated brute-force login attempts on WordPress (wp-login.php / xmlrpc.php). Reported by Jenka/Bott ... show more Repeated brute-force login attempts on WordPress (wp-login.php / xmlrpc.php). Reported by Jenka/Bottega del Vespro. show less	Brute-Force
🇺🇸 TPI-Abuse	2025-07-08 07:40:46 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 03:40:41.696972 2025] [security2:error] [pid 15007:tid 15007] [client 2a00:1c98:60:1::3c2:14798] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.dianamead.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dianamead.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGzLeSGS_iiFZY0Qnq-_FgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-08 04:16:16 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 00:16:09.485555 2025] [security2:error] [pid 23604:tid 23604] [client 2a00:1c98:60:1::3c2:53994] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|breinesberger.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "breinesberger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGybiYpijytKBFnB-yGlLgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-08 03:33:53 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 23:33:46.875065 2025] [security2:error] [pid 2305:tid 2305] [client 2a00:1c98:60:1::3c2:9510] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|willieplaymoreband.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "willieplaymoreband.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGyRmlFl1KJLVcpUwnuYiAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-07 21:22:40 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 17:22:36.054015 2025] [security2:error] [pid 11180:tid 11180] [client 2a00:1c98:60:1::3c2:58504] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.clcmillvale.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.clcmillvale.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGw6nAj1BE7o6O9yQLcrggAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-07 15:22:09 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a00:1c98:60:1::3c2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 11:22:03.663877 2025] [security2:error] [pid 8554:tid 8709] [client 2a00:1c98:60:1::3c2:36844] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.seriousgames-system.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.seriousgames-system.info"] [uri "/wp-json/wp/v2/users"] [unique_id "aGvmG5qOJ_xGqko_mwNO9gAAARU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2025-07-07 03:15:10 (1 year ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 Hazzard	2025-07-06 23:19:42 (1 year ago)	(wordpress) Failed wordpress login from 2a00:1c98:60:1::3c2 (DE/Germany/Hesse/Frankfurt am Main/-/[r ... show more (wordpress) Failed wordpress login from 2a00:1c98:60:1::3c2 (DE/Germany/Hesse/Frankfurt am Main/-/[redacted]) show less	Brute-Force
🇦🇺 MAGIC	2025-07-06 00:03:15 (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 Hazzard	2025-07-05 07:41:49 (1 year ago)	(wordpress) Failed wordpress login from 2a00:1c98:60:1::3c2 (DE/Germany/Hesse/Frankfurt am Main/-/[r ... show more (wordpress) Failed wordpress login from 2a00:1c98:60:1::3c2 (DE/Germany/Hesse/Frankfurt am Main/-/[redacted]) show less	Brute-Force
🇩🇪 neckaralb-admin.de	2025-07-03 17:48:18 (1 year ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 stinpriza	2025-07-03 17:06:56 (1 year ago)	(XMLRPC) xmlrpc banned 2a00:1c98:60:1::3c2 (DE/Germany/-): 1 in the last 3600 secs	Web App Attack
🇩🇪 Hazzard	2025-07-03 15:45:49 (1 year ago)	(wordpress) Failed wordpress login from 2a00:1c98:60:1::3c2 (DE/Germany/Hesse/Frankfurt am Main/-/[r ... show more (wordpress) Failed wordpress login from 2a00:1c98:60:1::3c2 (DE/Germany/Hesse/Frankfurt am Main/-/[redacted]) show less	Brute-Force
🇩🇪 LRob	2025-07-02 20:30:11 (1 year ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 LRob	2025-07-02 13:15:17 (1 year ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a04:4e40:1700:0:f4f:1cae:96ba:85e1

🇭🇰 172.253.5.19

🇫🇮 147.185.133.189

🇷🇴 92.118.39.212

🇧🇷 45.205.1.241

🇬🇧 35.203.210.213

🇧🇬 192.178.24.174

🇨🇳 183.63.119.73

🇳🇱 176.65.149.224

🇫🇮 147.185.133.97

🇺🇸 107.175.202.133

🇵🇱 57.128.246.101

🇳🇱 45.148.10.239

🇬🇧 35.203.210.18

🇬🇧 35.203.210.13

🇧🇷 189.93.225.53

🇵🇰 103.82.120.157

🇱🇹 62.60.130.219

🇳🇱 45.148.10.152

🇸🇬 45.82.78.105