JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0c:9f00:a000:3660::1

2a0c:9f00:a000:3660::1 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	RARE MOOD AGENCY SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14315
Domain Name	raremood.agency
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0c:9f00:a000:3660::1

Whois 2a0c:9f00:a000:3660::1

IP Abuse Reports for 2a0c:9f00:a000:3660::1:

This IP address has been reported a total of 41 times from 26 distinct sources. 2a0c:9f00:a000:3660::1 was first reported on June 17th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-22 22:31:48 (2 days ago)		Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-22 22:03:12 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-21. show less	Web App Attack SSH Hacking
🇺🇸 Charlesiv	2026-06-22 02:02:02 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14315 (1GSERVERS, LLC) P ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14315 (1GSERVERS, LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /.next/required-server-files.json Timestamp: 2026-06-22T01:51:20Z Ray ID: a0f79b786a9a97f4 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot show less	Bad Web Bot
🇬🇧 andypiper	2026-06-22 01:03:03 (3 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 Vianpyro	2026-06-21 23:27:17 (3 days ago)	Honeypot: 106 request(s) in 0 min. Paths: /, /application.yml, /.aws/credentials, /wp-content/debug. ... show more Honeypot: 106 request(s) in 0 min. Paths: /, /application.yml, /.aws/credentials, /wp-content/debug.log, /api/.env. Method(s): GET. UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters. ASN: 14315 (RARE MOOD AGENCY SRL). show less	Web App Attack Bad Web Bot Hacking Brute-Force
🇳🇱 Site.eu	2026-06-21 22:48:26 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 SpaceHost-Server	2026-06-21 22:29:43 (3 days ago)		Brute-Force Web App Attack
Anonymous	2026-06-21 20:07:01 (3 days ago)	Automated web scanner. Requested suspicious paths: /.env.example \| /.env \| /api/.env. UTC: 2026-06-2 ... show more Automated web scanner. Requested suspicious paths: /.env.example \| /.env \| /api/.env. UTC: 2026-06-21 19:13:46. show less	Web App Attack
🇩🇪 big-cloud.nl	2026-06-21 20:01:18 (3 days ago)	Try to access /.aws/credentials	Web App Attack
🇫🇷 dynamix	2026-06-21 19:57:24 (3 days ago)	Multiple WAF Violations	Web App Attack
🇫🇮 as211431.net	2026-06-21 19:13:30 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /__/firebase/init.json UA: CCBot/2.0 (https://commoncrawl.org/faq/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Charlesiv	2026-06-21 18:08:56 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14315 (1GSERVERS, LLC) P ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14315 (1GSERVERS, LLC) Protocol: HTTP/2 (GET method) Endpoint: /.next/required-server-files.json Timestamp: 2026-06-21T17:11:00Z Ray ID: a0f4a142bfdd0111 UA: Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html) show less	Bad Web Bot
🇩🇪 todix	2026-06-21 16:06:52 (3 days ago)	Web App Attack Exploid from 2a0c:9f00:a000:3660::1	Web App Attack
🇵🇱 nakordoni.eu	2026-06-21 13:30:02 (3 days ago)	Blocked by nakordoni.eu automated security: 404 flood / bad web bot. Jail: nakordoni-404-flood, 30 m ... show more Blocked by nakordoni.eu automated security: 404 flood / bad web bot. Jail: nakordoni-404-flood, 30 matches. ISP: RARE MOOD AGENCY SRL (US), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 94/100. show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 13:06:49 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 2a0c:9f00:a000:3660::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2a0c:9f00:a000:3660::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 09:06:42.810471 2026] [security2:error] [pid 13857:tid 13857] [client 2a0c:9f00:a000:3660::1:40800] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|imagesbyaubrey.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "imagesbyaubrey.com"] [uri "/wp-content/debug.log"] [unique_id "ajfh4p3bUkkS7176kwqvMQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.108.77.138

🇳🇱 167.172.42.87

🇰🇷 125.137.115.145

🇷🇴 92.118.39.71

🇳🇱 45.148.10.157

🇫🇷 37.66.60.180

🇭🇰 8.217.193.233

🇹🇭 1.20.228.110

🇺🇸 193.203.9.68

🇺🇸 147.185.132.103

🇸🇬 118.194.234.189

🇺🇸 65.49.1.99

🇨🇳 36.62.32.190

🇺🇸 35.130.111.146

🇧🇪 34.156.7.73

🇺🇸 2a04:c300:400::16b

🇹🇼 198.235.24.36

🇨🇳 111.49.64.66

🇮🇳 103.117.184.157

🇨🇳 36.158.125.210