AbuseIPDB » 2a04:52c0:128:c6e7::1

2a04:52c0:128:c6e7::1 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 9%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	theinfrastructure.group
Country	Netherlands (Kingdom of the)
City	Alkmaar, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 2a04:52c0:128:c6e7::1

Whois 2a04:52c0:128:c6e7::1

IP Abuse Reports for 2a04:52c0:128:c6e7::1:

This IP address has been reported a total of 3 times from 2 distinct sources. 2a04:52c0:128:c6e7::1 was first reported on August 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
VHosting	2024-08-11 10:32:12 (1 month ago)	Attempt from 2a04:52c0:128:c6e7::1, reason: FailedCaptchaVerify	DDoS Attack Bad Web Bot
TPI-Abuse	2024-08-10 12:58:52 (1 month ago)	(mod_security) mod_security (id:234930) triggered by 2a04:52c0:128:c6e7::1 (Unknown): 1 in the last ... show more(mod_security) mod_security (id:234930) triggered by 2a04:52c0:128:c6e7::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 10 08:58:45.936773 2024] [security2:error] [pid 7985:tid 8055] [client 2a04:52c0:128:c6e7::1:40522] [client 2a04:52c0:128:c6e7::1] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|dasperformance.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "dasperformance.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ZrdkBVpqizcBLMlQlUuZwAAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-06 11:51:02 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a04:52c0:128:c6e7::1 (Unknown): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 2a04:52c0:128:c6e7::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 06 07:50:52.609271 2024] [security2:error] [pid 22847:tid 22985] [client 2a04:52c0:128:c6e7::1:58798] [client 2a04:52c0:128:c6e7::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thecraftsycat.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thecraftsycat.com"] [uri "/thec.sql"] [unique_id "ZrIOHDIj2rnSa4H0_QIHDgAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack