JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0c:9f00:a000:f2ca::1

2a0c:9f00:a000:f2ca::1 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 50%: ?

50%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	RARE MOOD AGENCY SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14315
Domain Name	raremood.agency
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0c:9f00:a000:f2ca::1

Whois 2a0c:9f00:a000:f2ca::1

IP Abuse Reports for 2a0c:9f00:a000:f2ca::1:

This IP address has been reported a total of 10 times from 7 distinct sources. 2a0c:9f00:a000:f2ca::1 was first reported on June 17th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-18 19:25:52 (2 hours ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇩🇪 LRob.fr	2026-06-18 18:00:06 (4 hours ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 agenciahypelab.com.br	2026-06-18 15:33:08 (6 hours ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-18 15:03:57 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a0c:9f00:a000:f2ca::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a0c:9f00:a000:f2ca::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 11:03:50.307862 2026] [security2:error] [pid 898:tid 898] [client 2a0c:9f00:a000:f2ca::1:45672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloscopie.net"] [uri "/.env.staging"] [unique_id "ajQI1oPnmASWBGnNpmJcAwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 07:40:48 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a0c:9f00:a000:f2ca::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a0c:9f00:a000:f2ca::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 03:40:42.953954 2026] [security2:error] [pid 32546:tid 32546] [client 2a0c:9f00:a000:f2ca::1:33768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.animatuevento.com.mx"] [uri "/.env.old"] [unique_id "ajOg-gsrQYBh3_E7LLQEWgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-18 06:36:19 (15 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 21:44:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a0c:9f00:a000:f2ca::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a0c:9f00:a000:f2ca::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 17:44:22.157382 2026] [security2:error] [pid 21400:tid 21474] [client 2a0c:9f00:a000:f2ca::1:34120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ejspizzeriahudson.com"] [uri "/app/.env"] [unique_id "ajMVNqDbddR4RICnzZt1cAAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-06-17 18:20:47 (1 day ago)	2a0c:9f00:a000:f2ca::1 - - [17/Jun/2026:21:20:37 +0300] "GET /api/.env HTTP/1.1" 404 680 "-" "CCBot/ ... show more 2a0c:9f00:a000:f2ca::1 - - [17/Jun/2026:21:20:37 +0300] "GET /api/.env HTTP/1.1" 404 680 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 2a0c:9f00:a000:f2ca::1 - - [17/Jun/2026:21:20:39 +0300] "GET /admin/.env HTTP/1.1" 404 628 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 17:43:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a0c:9f00:a000:f2ca::1 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 2a0c:9f00:a000:f2ca::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 13:42:57.821202 2026] [security2:error] [pid 23512:tid 23612] [client 2a0c:9f00:a000:f2ca::1:39182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gilesrentalcars.com"] [uri "/.env"] [unique_id "ajLcoYE_IF0BcrHsGfLtYQAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-06-17 17:25:03 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.228.163

🇨🇳 171.38.103.68

🇺🇸 135.237.122.43

🇧🇷 129.121.32.44

🇰🇪 102.210.149.105

🇷🇴 82.78.75.106

🇮🇩 36.93.249.106

🇨🇳 182.91.36.117

🇧🇷 179.48.33.184

🇺🇸 170.205.31.153

🇻🇳 125.212.217.143

🇨🇭 104.244.72.132

🇷🇴 80.94.92.182

🇨🇳 49.88.156.34

🇺🇸 3.83.54.244

🇺🇸 208.84.100.207

🇮🇳 168.144.115.137

🇨🇳 111.113.88.22

🇳🇬 102.88.137.213

🇵🇱 94.26.68.11