JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a00:7ee0:9:3:42::1

2a00:7ee0:9:3:42::1 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Groupe LWS SARL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210403
Domain Name	lws.fr
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a00:7ee0:9:3:42::1

Whois 2a00:7ee0:9:3:42::1

IP Abuse Reports for 2a00:7ee0:9:3:42::1:

This IP address has been reported a total of 48 times from 32 distinct sources. 2a00:7ee0:9:3:42::1 was first reported on February 14th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 JimArchon72	2026-08-30 05:00:01 (2 days ago)	2026/08/30 04:55:03 "GET /wp-login.php HTTP/2.0"	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 04:20:59 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 2a00:7ee0:9:3:42::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a00:7ee0:9:3:42::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 00:20:54.072702 2026] [security2:error] [pid 10495:tid 10495] [client 2a00:7ee0:9:3:42::1:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|southernbroadcast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southernbroadcast.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apOvpm4OktD43KAstujorwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-08-30 03:02:05 (2 days ago)	2a00:7ee0:9:3:42::1 - - [30/Aug/2026:05:02:04 +0200] "POST /wp-login.php HTTP/1.1" 200 15756 "https: ... show more 2a00:7ee0:9:3:42::1 - - [30/Aug/2026:05:02:04 +0200] "POST /wp-login.php HTTP/1.1" 200 15756 "https://www.wp4dich.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 2a00:7ee0:9:3:42::1 - - [30/Aug/2026:05:02:04 +0200] "POST /wp-login.php HTTP/1.1" 200 15756 "https://www.wp4dich.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 2a00:7ee0:9:3:42::1 - - [30/Aug/2026:05:02:04 +0200] "POST /wp-login.php HTTP/1.1" 200 15750 "https://www.wp4dich.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-30 02:25:05 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇮🇹 VHosting	2026-08-30 00:25:03 (2 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 francoisunix	2026-08-30 00:22:10 (2 days ago)	2a00:7ee0:9:3:42::1 - - [30/Aug/2026:02:22:06 +0200] "GET //wp-login.php HTTP/1.1" 401 15029 "https: ... show more 2a00:7ee0:9:3:42::1 - - [30/Aug/2026:02:22:06 +0200] "GET //wp-login.php HTTP/1.1" 401 15029 "https://eco-conscient.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "2a00:7ee0:9:3:42::1" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.321 ua="unix:/var/run/php/php8.2-fpm.sock" us="401" ut="0.322" ul="15043" cs=BYPASScf_country="FR" cf_region="\xC3\x8Ele-de-France" cf_city="Paris"rip=127.0.0.1 cf_ip=2a00:7ee0:9:3:42::1 xff="2a00:7ee0:9:3:42::1" p_xff="2a00:7ee0:9:3:42::1, 2a00:7ee0:9:3:42::1" 2a00:7ee0:9:3:42::1 - - [30/Aug/2026:02:22:06 +0200] "GET //wp-login.php HTTP/1.1" 401 15029 "https://eco-conscient.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "2a00:7ee0:9:3:42::1" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.539 ua="unix:/var/run/php/php8.2-fpm.sock" us="401" ut="0.538" ul="15043" cs=BYPASScf ... show less	Web App Attack
Anonymous	2026-08-29 23:21:40 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 ger-stg-sifi1	2026-08-29 22:57:18 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 stinpriza	2026-08-29 21:52:00 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 08:04:34 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 2a00:7ee0:9:3:42::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a00:7ee0:9:3:42::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 04:04:24.744217 2026] [security2:error] [pid 14546:tid 14546] [client 2a00:7ee0:9:3:42::1:53478] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ggaccounting.services\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ggaccounting.services"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apFBCAnwSVUI2NYFAihEsQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 05:22:07 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 2a00:7ee0:9:3:42::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a00:7ee0:9:3:42::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 01:21:54.488724 2026] [security2:error] [pid 26193:tid 26193] [client 2a00:7ee0:9:3:42::1:44978] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vespaitaliancafe.matteozacchino.dev\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vespaitaliancafe.matteozacchino.dev"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apEa8pKsOHmuWJoXYLc0GgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-08-28 04:24:41 (4 days ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇩🇪 ger-stg-sifi1	2026-08-28 03:40:44 (4 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 BRHosting	2026-08-28 03:19:02 (4 days ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 03:06:49 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 2a00:7ee0:9:3:42::1 (Unknown): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 2a00:7ee0:9:3:42::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 23:06:43.198643 2026] [security2:error] [pid 28786:tid 28786] [client 2a00:7ee0:9:3:42::1:33368] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gaeltv.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gaeltv.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apD7Q7XoH--Crhc_G55-kgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 210.16.189.78

🇧🇷 187.59.177.210

🇧🇷 187.17.228.241

🇮🇳 103.225.135.3

🇧🇪 34.79.52.241

🇺🇸 2607:f8b0:4023:1000::121

🇰🇷 210.178.5.231

🇨🇳 210.16.168.11

🇨🇭 209.99.191.19

🇺🇸 209.38.128.153

🇰🇷 203.247.143.193

🇦🇿 188.253.222.62

🇨🇦 184.70.159.86

🇫🇷 143.244.57.118

🇺🇸 134.199.231.149

🇷🇺 109.106.140.76

🇷🇺 95.79.57.221

🇺🇸 76.155.131.115

🇮🇳 74.125.178.212

🇩🇪 69.5.169.170