JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a00:f940:2:1:2::1453

2a00:f940:2:1:2::1453

Neutral Activity IPv6 SLAAC Note

62 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Reg.Ru Hosting

Usage Type

Data Center/Web Hosting/Transit

ASN

AS197695

Hostname(s)

uzabacus.uz

Domain Name

reg.ru

Country

🇷🇺 Russian Federation

City

Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a00:f940:2:1:2::1453 has been reported 62 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a00:f940:2:1:2::1453:

This IP address has been reported a total of 62 times from 19 distinct sources. 2a00:f940:2:1:2::1453 was first reported on November 12th 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 maxxsense	2024-01-17 02:57:28 (2 years ago)	(wordpress-user-enum) Failed wordpress-user-enum trigger from 2a00:f940:2:1:2::1453 (RU/Russia/uzaba ... show more (wordpress-user-enum) Failed wordpress-user-enum trigger from 2a00:f940:2:1:2::1453 (RU/Russia/uzabacus.uz) show less	Brute-Force
🇺🇸 TPI-Abuse	2024-01-14 20:10:08 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 14 15:10:02.944686 2024] [security2:error] [pid 20018] [client 2a00:f940:2:1:2::1453:35038] [client 2a00:f940:2:1:2::1453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nimbusclub.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nimbusclub.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZaQ_mhWzSC-HV-Swt2iOJgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2024-01-07 19:21:34 (2 years ago)	5fm.nu:443 2a00:f940:2:1:2::1453 - - [07/Jan/2024:20:21:33 +0100] 5fm.nu "POST /xmlrpc.php HTTP/1.1" ... show more 5fm.nu:443 2a00:f940:2:1:2::1453 - - [07/Jan/2024:20:21:33 +0100] 5fm.nu "POST /xmlrpc.php HTTP/1.1" 403 3961 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" show less	Bad Web Bot
🇳🇱 ipoac.nl	2024-01-06 11:51:25 (2 years ago)	5fm.nu:443 2a00:f940:2:1:2::1453 - - [06/Jan/2024:12:51:24 +0100] 5fm.nu "POST /xmlrpc.php HTTP/1.1" ... show more 5fm.nu:443 2a00:f940:2:1:2::1453 - - [06/Jan/2024:12:51:24 +0100] 5fm.nu "POST /xmlrpc.php HTTP/1.1" 403 3959 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" show less	Bad Web Bot
🇺🇸 mawan	2024-01-03 19:01:49 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇬🇧 Swiptly	2023-12-29 15:01:28 (2 years ago)	WordPress xmlrpc spam or enumeration ...	Web Spam Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2023-12-20 21:10:10 (2 years ago)	Probing for Wordpress vulnerabilities	Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2023-12-20 09:23:32 (2 years ago)	2a00:f940:2:1:2::1453 - - [20/Dec/2023:08:13:42 +0000] "POST /wp-login.php HTTP/1.0" 200 4080 "-" "M ... show more 2a00:f940:2:1:2::1453 - - [20/Dec/2023:08:13:42 +0000] "POST /wp-login.php HTTP/1.0" 200 4080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2a00:f940:2:1:2::1453 - - [20/Dec/2023:09:23:38 +0000] "POST /wp-login.php HTTP/1.0" 200 4080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force
🇩🇪 niceshops.com	2023-12-18 06:35:18 (2 years ago)	Web Attack ([18/Dec/2023:07:35:17.366] GET /wp-login.php)	Web App Attack
🇸🇪 maxxsense	2023-12-18 03:40:51 (2 years ago)	(wordpress-user-enum) Failed wordpress-user-enum trigger from 2a00:f940:2:1:2::1453 (RU/Russia/uzaba ... show more (wordpress-user-enum) Failed wordpress-user-enum trigger from 2a00:f940:2:1:2::1453 (RU/Russia/uzabacus.uz) show less	Brute-Force
🇺🇸 TPI-Abuse	2023-12-18 02:34:49 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 21:34:45.113409 2023] [security2:error] [pid 23771] [client 2a00:f940:2:1:2::1453:56518] [client 2a00:f940:2:1:2::1453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|coolerboxes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coolerboxes.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-vxY9YpSeneFqC8u_zGwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-18 02:13:27 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 21:13:20.232395 2023] [security2:error] [pid 17664] [client 2a00:f940:2:1:2::1453:38786] [client 2a00:f940:2:1:2::1453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nbreen.nancybcatering.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nbreen.nancybcatering.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-qwDQYmdFMgrkHUw32-QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ph	2023-12-18 01:36:07 (2 years ago)	Bad web bot attempting to run wp-login.php on non-WP site	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-18 00:52:22 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 19:52:15.280746 2023] [security2:error] [pid 587] [client 2a00:f940:2:1:2::1453:38432] [client 2a00:f940:2:1:2::1453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hallandaleautotag.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hallandaleautotag.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-XvyGQsisswrnDMFr4rwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-17 23:51:08 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2a00:f940:2:1:2::1453 (uzabacus.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 18:51:00.982098 2023] [security2:error] [pid 26364:tid 47560087324416] [client 2a00:f940:2:1:2::1453:41170] [client 2a00:f940:2:1:2::1453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kettlehill.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kettlehill.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-JZHLVkx3BmVNaSfnkuQAAAQQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 182.8.97.90

🇲🇽 68.155.159.216

🇸🇬 47.82.51.147

🇩🇪 195.182.16.23

🇧🇷 191.187.42.242

🇺🇸 172.253.0.29

🇧🇷 167.126.6.183

🇺🇸 162.216.149.114

🇺🇸 104.196.140.9

🇿🇦 102.221.12.6

🇫🇷 91.231.89.230

🇧🇬 91.191.209.98

🇳🇱 91.92.42.11

🇸🇬 85.203.21.204

🇸🇬 85.203.21.183

🇺🇸 73.59.149.225

🇺🇸 66.132.186.187

🇰🇷 59.8.75.163

🇨🇳 58.220.39.200

🇮🇳 47.11.108.168