JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a02:4840:2:238:a854:7c82:6d7c:82df

2a02:4840:2:238:a854:7c82:6d7c:82df was found in our database!

This IP was reported 26 times. Confidence of Abuse is 58%: ?

58%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	SIA RixHost
Usage Type	Data Center/Web Hosting/Transit
ASN	AS52048
Domain Name	rixhost.lv
Country	🇱🇻 Latvia
City	Riga, Riga

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a02:4840:2:238:a854:7c82:6d7c:82df

Whois 2a02:4840:2:238:a854:7c82:6d7c:82df

IP Abuse Reports for 2a02:4840:2:238:a854:7c82:6d7c:82df:

This IP address has been reported a total of 26 times from 14 distinct sources. 2a02:4840:2:238:a854:7c82:6d7c:82df was first reported on December 2nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-23 07:12:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 03:12:17.463798 2026] [security2:error] [pid 1182355:tid 1182386] [client 2a02:4840:2:238:a854:7c82:6d7c:82df:48226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.visionforandfromchildren.org"] [uri "/wp-config.php.html"] [unique_id "aoqdUbGsB_AK39zqXqznCwAAAFc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 XICTRON	2026-08-23 06:50:07 (1 day ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 19:13:22 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 15:13:12.895305 2026] [security2:error] [pid 859:tid 859] [client 2a02:4840:2:238:a854:7c82:6d7c:82df:37220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.modalguitarist.com"] [uri "/wp-config.php~"] [unique_id "aon0yKpYbT_dpMpS3pPwZwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-22 09:49:39 (2 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 ghostwarriors	2026-08-22 08:20:04 (2 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 08:05:58 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 04:05:50.976407 2026] [security2:error] [pid 31215:tid 31215] [client 2a02:4840:2:238:a854:7c82:6d7c:82df:33184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.elimer.com.ve"] [uri "/.wp-config.php.swp"] [unique_id "aolYXuLvxJEQttNPlulfJAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 yitzhaq	2026-08-22 07:54:27 (2 days ago)	2a02:4840:2:238:a854:7c82:6d7c:82df - - [22/Aug/2026:09:54:25 +0200] "GET /wp-config.php.save HTTP/1 ... show more 2a02:4840:2:238:a854:7c82:6d7c:82df - - [22/Aug/2026:09:54:25 +0200] "GET /wp-config.php.save HTTP/1.1" 404 80112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0" 2a02:4840:2:238:a854:7c82:6d7c:82df - - [22/Aug/2026:09:54:25 +0200] "GET /wp-config.php.txt HTTP/1.1" 404 80114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 2a02:4840:2:238:a854:7c82:6d7c:82df - - [22/Aug/2026:09:54:25 +0200] "GET /wp-config-sample.php HTTP/1.1" 500 7182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0" 2a02:4840:2:238:a854:7c82:6d7c:82df - - [22/Aug/2026:09:54:25 +0200] "GET /wp-config.php.inc HTTP/1.1" 404 80113 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 2a02:4840:2:238:a854:7c82:6d7c:82df - - [22/Aug/2026:09:54:25 +0200] "GET /wp-config.php.bk HTTP/1.1" 404 80112 "-" "Mozilla/5.0 (Macintosh; In show less	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-08-22 06:15:40 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:15:34.393446 2026] [security2:error] [pid 16884:tid 16884] [client 2a02:4840:2:238:a854:7c82:6d7c:82df:58992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.davidharrisgriffith.com"] [uri "/wp-config.php.swp"] [unique_id "aok-hovB4k8BrEB-dhX-GQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:25:50 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): ... show more (mod_security) mod_security (id:210730) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:25:44.603589 2026] [security2:error] [pid 18448:tid 18448] [client 2a02:4840:2:238:a854:7c82:6d7c:82df:36390] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.coolcustomweddingproducts.benshermanguitar.com\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.coolcustomweddingproducts.benshermanguitar.com"] [uri "/wp-config.inc"] [unique_id "aoky2IhToUeJPlinhzlAdgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 04:13:56 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 00:13:49.681615 2026] [security2:error] [pid 2104:tid 2104] [client 2a02:4840:2:238:a854:7c82:6d7c:82df:41458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.centrodentalsindolor.com"] [uri "/wp-config.php.BAK"] [unique_id "aokh_VDktMEkwaKkrx6WIwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-22 00:00:43 (2 days ago)	\| [Dangerous/Belize] Aggressive IP 2a02:4840:2:238:a854:7c82:6d7c:82df (~30 hits). Type: DoS Defende ... show more \| [Dangerous/Belize] Aggressive IP 2a02:4840:2:238:a854:7c82:6d7c:82df (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-08-21 19:59:31 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 15:59:21.549525 2026] [security2:error] [pid 20504:tid 20504] [client 2a02:4840:2:238:a854:7c82:6d7c:82df:37300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.americanacademyofteachersofsinging.org"] [uri "/wp-config.php.txt"] [unique_id "aoiuGVlCJmMlitrw-ZPHkwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-03 05:54:13 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:4840:2:238:a854:7c82:6d7c:82df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 01:54:07.522275 2026] [security2:error] [pid 2325144:tid 2325144] [client 2a02:4840:2:238:a854:7c82:6d7c:82df:60206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frenchla.com"] [uri "/wp-config.txt"] [unique_id "anAs_41gzNQC2MMkzqgbEAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-02 23:26:34 (3 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 dtorrer	2026-08-02 22:41:32 (3 weeks ago)	General vulnerability scan.	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 136.119.16.4

🇨🇳 114.220.238.21

🇦🇷 38.159.180.4

🇺🇸 216.180.246.181

🇰🇷 211.226.113.136

🇩🇪 202.78.173.172

🇩🇪 202.78.173.161

🇺🇸 147.185.132.98

🇨🇮 102.209.222.41

🇵🇱 87.239.170.74

🇺🇸 20.168.121.167

🇲🇽 158.23.147.79

🇺🇸 147.185.132.94

🇺🇸 147.185.132.93

🇺🇸 147.185.132.91

🇨🇦 142.166.146.237

🇵🇱 109.95.118.116

🇵🇱 46.151.19.77

🇰🇷 222.107.156.227

🇺🇸 205.210.31.94