This IP address has been reported a total of
397
times from
44 distinct
sources.
2a03:2880:f806:9:: was first reported on
July 5th 2024 , and the most recent report was
1 hour ago Poland
with 27
reports;
Germany
with 17
reports;
United States of America
with 6
reports.
The most common categories in these recent reports were:
Bad Web Bot
57
times;
Web App Attack
44
times;
Brute-Force
7
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
ghostwarriors
2024-07-24 11:50:11
(2 years ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2024-07-24 11:38:02
(2 years ago)
2024/07/24 13:38:01 [error] 25223#101024: *1783481 limiting requests, excess: 0.472 by zone "crawler ...
show more
2024/07/24 13:38:01 [error] 25223#101024: *1783481 limiting requests, excess: 0.472 by zone "crawler", client: 2a03:2880:f806:9::, server: crxforum.ksol.io, request: "GET /showTopic.php?topicId=565&action=showComment&commentUniqId=5b01b00b0c40f&seed=663c22b05a721 HTTP/2.0", host: "crxforum.ksol.io"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2024-07-20 16:51:37
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 20 12:51:33.009837 2024] [security2:error] [pid 17182:tid 17182] [client 2a03:2880:f806:9:::38902] [client 2a03:2880:f806:9::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sandiegoautostarsmog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sandiegoautostarsmog.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZpvrFVQWQbED13i_9_HV4QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-07-11 00:25:17
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 10 20:25:12.287264 2024] [security2:error] [pid 8098] [client 2a03:2880:f806:9:::36704] [client 2a03:2880:f806:9::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.baliaccommodationpadangpadang.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.baliaccommodationpadangpadang.com"] [uri "/what-we-offer/airport-shuttle/[email protected] "] [unique_id "Zo8maP8ZJMoCTcr87_TQoQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-07-10 09:20:07
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 10 05:20:02.333784 2024] [security2:error] [pid 4578] [client 2a03:2880:f806:9:::56232] [client 2a03:2880:f806:9::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mainefirst.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mainefirst.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Zo5SQlcnRQzWlZQzZwykyQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-07-06 20:18:59
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 06 16:18:52.866207 2024] [security2:error] [pid 14660] [client 2a03:2880:f806:9:::45894] [client 2a03:2880:f806:9::] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ZommrBpF4Kc2nv6YsILkDAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-07-05 17:09:46
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:9:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 05 13:09:43.290064 2024] [security2:error] [pid 27040] [client 2a03:2880:f806:9:::40356] [client 2a03:2880:f806:9::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.walc.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.walc.net"] [uri "/wp-json/wp/v2/users/9"] [unique_id "Zogo1weu4TliTRElavu5hgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 391 to
397
of 397 reports
