AbuseIPDB » 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3
2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3
This IP was reported 7 times. Confidence of
Abuse
is 23% : ?
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
ISP
Amazon Data Services Ireland Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Domain Name
amazon.com
Country
🇩🇪
Germany
City
Frankfurt am Main, Hesse
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 :
This IP address has been reported a total of
7
times from
3 distinct
sources.
2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 was first reported on
September 19th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
lostswordfish.com
2026-09-22 07:08:03
(1 day ago)
Wordfence waf block on lostswordfish
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 01:24:26
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 21:24:21.458474 2026] [security2:error] [pid 31645:tid 31645] [client 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3:55016] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.xhumanlikerobots.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.xhumanlikerobots.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq81xTRfcX53WbRLCHewqQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 21:54:18
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 17:54:13.648186 2026] [security2:error] [pid 2654:tid 2654] [client 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3:34732] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ronjamestelevision.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ronjamestelevision.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq8EhR21IxcS0i4czsk0OgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 18:13:16
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 14:13:10.008115 2026] [security2:error] [pid 32318:tid 32318] [client 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3:43792] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.reyadecostarica.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.reyadecostarica.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq7Qtk1S_d187gUm-XuoCAAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 17:15:35
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 13:15:29.216662 2026] [security2:error] [pid 30347:tid 30347] [client 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3:44312] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||renjunews.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "renjunews.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq7DMbwPJWdRMlFUunYX4gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 16:03:53
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 12:03:47.774068 2026] [security2:error] [pid 5912:tid 5981] [client 2a05:d014:df2:fb00:bdcf:befd:2fc1:e2f3:44312] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||leadingedgesupply.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "leadingedgesupply.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6yYzMrziptkTNt6OYMrAAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-19 15:15:40
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: