JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0a:b640:1:c:fafb:51dc:545e:7499

2a0a:b640:1:c:fafb:51dc:545e:7499 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 42%: ?

42%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	M247 LTD Singapore Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0a:b640:1:c:fafb:51dc:545e:7499

Whois 2a0a:b640:1:c:fafb:51dc:545e:7499

IP Abuse Reports for 2a0a:b640:1:c:fafb:51dc:545e:7499:

This IP address has been reported a total of 20 times from 7 distinct sources. 2a0a:b640:1:c:fafb:51dc:545e:7499 was first reported on March 4th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-08-23 11:40:00 (5 days ago)	138 requests with url.path *.php.bak	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-23 00:24:33 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 20:24:29.051528 2026] [security2:error] [pid 13673:tid 13673] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:54256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rogerheath.com"] [uri "/wp-config.php.original"] [unique_id "aoo9vRwGIYrsLimzwUtq2wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 22:45:29 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 18:45:20.300354 2026] [security2:error] [pid 23475:tid 23475] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:50894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.prayers4america.com"] [uri "/wp-config.php.bak"] [unique_id "aoomgMz0oRFMR1KbI8VvIQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 20:34:56 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:34:48.019473 2026] [security2:error] [pid 10271:tid 10271] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:51316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nwuoregon.org"] [uri "/wp-config.php"] [unique_id "aooH6Hy4Ff0WLAZ7PU_DWgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 17:13:17 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 13:13:07.354517 2026] [security2:error] [pid 24399:tid 24399] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:36874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lumentravel.com"] [uri "/.wp-config.php.swp"] [unique_id "aonYo_VUxhVvImfkJo-q8gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 16:17:39 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 12:17:34.080036 2026] [security2:error] [pid 25714:tid 25722] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:35936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.leaderoftheopposition.com"] [uri "/.wp-config.php.swp"] [unique_id "aonLnvuI0lwCnVFQnpDMSAAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 13:56:55 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 09:56:45.288258 2026] [security2:error] [pid 17003:tid 17003] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:49026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ixd.net"] [uri "/wp-config.php.BAK"] [unique_id "aomqnaC5WZeo4BfH3EXG8AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 12:57:49 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 08:57:45.006057 2026] [security2:error] [pid 15207:tid 15207] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:36938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.idahostem.org"] [uri "/wp-config.php.dist"] [unique_id "aomcyVAuGpfDHbWiQTngVwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 09:12:01 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 05:11:51.046869 2026] [security2:error] [pid 17408:tid 17408] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:38978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fgrotary.org"] [uri "/wp-config.php.bak"] [unique_id "aoln16JG5V8LamlemDYS_QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Lunix	2026-08-22 07:31:26 (6 days ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:40:23 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:40:05.079476 2026] [security2:error] [pid 21034:tid 21034] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:60518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.csm-dtc.com"] [uri "/wp-config.php"] [unique_id "aok2NZ9afC34EF3iuBhvzAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:18:53 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:18:47.591833 2026] [security2:error] [pid 6383:tid 6383] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:34842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cornerstonecharitablescholarshiptrust.org"] [uri "/wp-config.php"] [unique_id "aokxN5xLKBHM-6F872MUwAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-22 05:05:06 (6 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 22:21:15 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a0a:b640:1:c:fafb:51dc:545e:7499 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 18:21:07.291964 2026] [security2:error] [pid 24774:tid 24774] [client 2a0a:b640:1:c:fafb:51dc:545e:7499:53468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.415test.com"] [uri "/wp-config.php.save"] [unique_id "aojPU29_lK1q2abapIi6-wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-14 03:25:27 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 193.33.241.158

🇬🇧 187.40.250.107

🇳🇱 185.190.25.168

🇺🇸 162.216.150.50

🇺🇸 52.176.211.73

🇲🇦 196.75.193.157

🇳🇱 195.178.110.30

🇩🇪 193.124.20.227

🇺🇸 162.216.149.130

🇦🇷 152.169.164.2

🇩🇪 130.185.123.55

🇨🇳 118.145.238.60

🇳🇱 89.248.172.9

🇧🇬 78.128.112.6

🇮🇪 54.170.119.104

🇺🇸 47.85.212.192

🇻🇳 42.96.33.3

🇸🇬 168.144.244.44

🇭🇰 156.225.1.10

🇰🇷 61.85.9.49