AbuseIPDB » 2002:6d48:72c8::6d48:72c8

2002:6d48:72c8::6d48:72c8 was found in our database!

This IP was reported 2 times. Confidence of Abuse is 3%: ?

3%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Unknown
Usage Type	Reserved
ASN	AS6939
Domain Name	Unknown
Country	-
City	Unknown

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 2002:6d48:72c8::6d48:72c8

Whois 2002:6d48:72c8::6d48:72c8

IP Abuse Reports for 2002:6d48:72c8::6d48:72c8:

This IP address has been reported a total of 2 times from 1 distinct source. 2002:6d48:72c8::6d48:72c8 was first reported on April 7th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2025-06-10 08:33:55 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 2002:6d48:72c8::6d48:72c8 (Unknown): 1 in the l ... show more(mod_security) mod_security (id:210730) triggered by 2002:6d48:72c8::6d48:72c8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 10 04:33:50.860932 2025] [security2:error] [pid 607934:tid 607934] [client 2002:6d48:72c8::6d48:72c8:59126] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cnprcertificationreviews.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/facebook.com"] [unique_id "aEft7tEyFafsb4rMS32xNAAAAAw"], referer: https://cnprcertificationreviews.org/ show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-04-07 00:27:50 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2002:6d48:72c8::6d48:72c8 (Unknown): 1 in the l ... show more(mod_security) mod_security (id:210730) triggered by 2002:6d48:72c8::6d48:72c8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 06 20:27:41.542708 2025] [security2:error] [pid 90188:tid 90188] [client 2002:6d48:72c8::6d48:72c8:54090] [client 2002:6d48:72c8::6d48:72c8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cnprcertificationreviews.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/facebook.com"] [unique_id "Z_Mb_cB1_KuU7THvLdOLNAAAAAg"], referer: https://cnprcertificationreviews.org/ show less	Brute-Force Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩