JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:2168:a06:3c9c::1

2a02:2168:a06:3c9c::1 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	PJSC Rostelecom
Usage Type	Fixed Line ISP
ASN	AS42610
Domain Name	rt.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:2168:a06:3c9c::1

Whois 2a02:2168:a06:3c9c::1

IP Abuse Reports for 2a02:2168:a06:3c9c::1:

This IP address has been reported a total of 11 times from 9 distinct sources. 2a02:2168:a06:3c9c::1 was first reported on October 22nd 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2025-11-06 00:19:47 (7 months ago)	2025-11-05 01:41:04 /goods.php 2025-11-05 01:41:05 /mah.php 2025-11-05 01:41:04 /chosen.php	Web App Attack
🇺🇸 LotPhantom	2025-11-04 20:04:20 (7 months ago)	2a02:2168:a06:3c9c::1 - - [04/Nov/2025:20:04:04 +0000] "GET /tiny.php HTTP/1.1" 404 9 "-" "Mozilla/5 ... show more 2a02:2168:a06:3c9c::1 - - [04/Nov/2025:20:04:04 +0000] "GET /tiny.php HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" ... show less	Web App Attack
🇬🇧 pinguin	2025-11-04 06:30:05 (7 months ago)	Triggered Cloudflare WAF (firewallManaged) from RU. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from RU. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /tiny.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 jmr777	2025-11-01 20:52:00 (7 months ago)	IM360 WAF: Block access to the shell\|\|MV:/xleet-shell.php\|\|RSV:7.42\|\|T:APACHE\|\| Sensor: modsec Ru ... show more IM360 WAF: Block access to the shell\|\|MV:/xleet-shell.php\|\|RSV:7.42\|\|T:APACHE\|\| Sensor: modsec Rule: 77350296 Abuser: 2a02:2168:a06:3c9c::1 show less	Hacking Web App Attack
🇺🇸 Charlesiv	2025-10-30 02:39:13 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from RU. Action taken: BLOCK ASN: 42610 (NCNET-AS OJSC Nat ... show more Triggered Cloudflare WAF (firewallCustom) from RU. Action taken: BLOCK ASN: 42610 (NCNET-AS OJSC National Cable Networks) Protocol: HTTP/1.1 (GET method) Endpoint: /tiny.php Timestamp: 2025-10-30T01:03:04Z Ray ID: 9966fda3dc1de953 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15 show less	Bad Web Bot
🇵🇱 mscode.pl	2025-10-28 11:45:36 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from RU. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from RU. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /goods.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-25 09:29:25 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 2a02:2168:a06:3c9c::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 2a02:2168:a06:3c9c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 05:29:20.744885 2025] [security2:error] [pid 3230996:tid 3230996] [client 2a02:2168:a06:3c9c::1:59018] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sharawi-gum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharawi-gum.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPyYcNV6KQU67V0jkrcF6AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-24 20:56:13 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 2a02:2168:a06:3c9c::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 2a02:2168:a06:3c9c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 24 16:56:04.717678 2025] [security2:error] [pid 29696:tid 29696] [client 2a02:2168:a06:3c9c::1:57976] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kenometer.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kenometer.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPvn5K-C8TQ6HqChwRa2tgAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-23 18:38:13 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 2a02:2168:a06:3c9c::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 2a02:2168:a06:3c9c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 14:38:09.553666 2025] [security2:error] [pid 31031:tid 31031] [client 2a02:2168:a06:3c9c::1:60334] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|protection4allsecurity.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "protection4allsecurity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPp2EVtgPCN9aZRdtoSydAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 KiekerJan	2025-10-22 22:01:00 (8 months ago)	2a02:2168:a06:3c9c::1 - - [23/Oct/2025:00:00:59 +0200] "GET /wp-content/plugins/drag-and-drop-multip ... show more 2a02:2168:a06:3c9c::1 - - [23/Oct/2025:00:00:59 +0200] "GET /wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/codedropz-uploader-min.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 2a02:2168:a06:3c9c::1 - - [23/Oct/2025:00:00:59 +0200] "GET /wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/codedropz-uploader-min.js HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" ... show less	Web App Attack
🇱🇻 garmtech.com	2025-10-22 14:35:28 (8 months ago)	IM360 WAF: Interaction with fake plugin MV:/wp-content/plugins/WordPressCore/include.php	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 200.10.29.236

🇧🇴 181.115.172.109

🇪🇸 158.49.70.49

🇺🇸 74.235.139.143

🇺🇸 66.94.117.226

🇺🇸 64.62.197.118

🇺🇸 2604:a880:400:d1:0:4:6c78:b001

🇺🇸 2001:470:2cc:1::212

🇬🇧 217.146.80.110

🇬🇧 195.206.182.199

🇧🇷 177.107.91.11

🇺🇸 147.185.132.125

🇩🇪 147.45.222.123

🇺🇸 144.172.114.51

🇭🇰 118.26.38.251

🇹🇼 114.37.197.37

🇹🇭 110.164.228.242

🇰🇷 49.247.37.22

🇸🇬 47.79.206.31

🇳🇱 5.61.209.43