This IP was reported 89 times. Confidence of
Abuse
is 100%: ?
100%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
89
times from
34 distinct
sources.
2602:fb54:1a00::37 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[WedJun1715:13:29.7442132026][security2:error][pid2757571:tid2757706][client2602:fb54:1a00::37:0]Mod ...
show more[WedJun1715:13:29.7442132026][security2:error][pid2757571:tid2757706][client2602:fb54:1a00::37:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"ipv6.ponzellini.ch\"][uri\"/wp-content/debug.log\"][unique_id\"ajKdeQ15ft7kdm56qlM8nQAAAAo\"]
show less
Triggered Cloudflare WAF (linkMaze) from US.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GE ...
show moreTriggered Cloudflare WAF (linkMaze) from US.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
(modsecurity) srv104 ModSecurity 2602:fb54:1a00::37 (US/United States/-): 10 in the last 3600 secs; ...
show more(modsecurity) srv104 ModSecurity 2602:fb54:1a00::37 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
{"level":"info","ts":1781536284.7108946,"logger":"http.log.access.log0","msg":"handled request","req ...
show more{"level":"info","ts":1781536284.7108946,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"2602:fb54:1a00::37","remote_port":"56926","client_ip":"2602:fb54:1a00::37","proto":"HTTP/1.1","method":"GET","host":"60cb.status.updown.io","uri":"/","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"],"Accept":["*/*"]}},"bytes_read":0,"user_id":"","duration":0.000091504,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://60cb.status.updown.io/"]}}
{"level":"info","ts":1781536288.7429464,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"2602:fb54:1a00::37","remote_port":"61232","client_ip":"2602:fb54:1a00::37","proto":"HTTP/1.1","method":"GET","host":"60cb.status.updown.io","uri":"/server/.env","headers":{"Accept-Language":["en-US,en;q=0.9"],"Accept-Encoding":["gzip"],"
...
show less
DDoS Attack
Web App Attack
Showing 1 to
15
of 89 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩