AbuseIPDB » 2a05:f480:2400:19fd:5400:5ff:fe25:fa67

2a05:f480:2400:19fd:5400:5ff:fe25:fa67 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 13%: ?

13%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	The Constant Company, LLC.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	constant.com
Country	Poland
City	Warsaw, Mazovia

Report 2a05:f480:2400:19fd:5400:5ff:fe25:fa67

Whois 2a05:f480:2400:19fd:5400:5ff:fe25:fa67

IP Abuse Reports for 2a05:f480:2400:19fd:5400:5ff:fe25:fa67:

This IP address has been reported a total of 4 times from 3 distinct sources. 2a05:f480:2400:19fd:5400:5ff:fe25:fa67 was first reported on November 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-11-11 12:03:56 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a05:f480:2400:19fd:5400:5ff:fe25:fa67 (Unknown ... show more(mod_security) mod_security (id:210730) triggered by 2a05:f480:2400:19fd:5400:5ff:fe25:fa67 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 07:03:49.684071 2024] [security2:error] [pid 4676:tid 4676] [client 2a05:f480:2400:19fd:5400:5ff:fe25:fa67:52383] [client 2a05:f480:2400:19fd:5400:5ff:fe25:fa67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|tecnoconce.cl\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tecnoconce.cl"] [uri "/wp-content/debug.log"] [unique_id "ZzHypROa4E3VdYFBiItdTAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-11 08:40:48 (1 month ago)	(mod_security) mod_security (id:210580) triggered by 2a05:f480:2400:19fd:5400:5ff:fe25:fa67 (Unknown ... show more(mod_security) mod_security (id:210580) triggered by 2a05:f480:2400:19fd:5400:5ff:fe25:fa67 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 03:40:43.566552 2024] [security2:error] [pid 15742:tid 15742] [client 2a05:f480:2400:19fd:5400:5ff:fe25:fa67:51735] [client 2a05:f480:2400:19fd:5400:5ff:fe25:fa67] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "wp-config.php" at ARGS:logfile. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|sipco.cl\|F\|2"] [data "Matched Data: wp-config.php found within ARGS:logfile: ../../../../wp-config.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "sipco.cl"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "ZzHDC6uHLH4gFuq4TjTHEAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
cmbplf	2024-11-05 00:30:59 (1 month ago)	31 requests to /wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php	Brute-Force Bad Web Bot
ardexter	2024-11-03 20:30:03 (1 month ago)	Wordpress attack and DDOS	DDoS Attack Web App Attack