JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0c:5cc0:1:1::293c:1518

2a0c:5cc0:1:1::293c:1518 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	CLOUDLAYER8 LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197648
Hostname(s)	cyprus.exit.maxzrbn.it
Domain Name	cl8.com
Country	🇨🇾 Cyprus
City	Limassol, Limassol

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0c:5cc0:1:1::293c:1518

Whois 2a0c:5cc0:1:1::293c:1518

IP Abuse Reports for 2a0c:5cc0:1:1::293c:1518:

This IP address has been reported a total of 11 times from 3 distinct sources. 2a0c:5cc0:1:1::293c:1518 was first reported on August 29th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-26 21:05:05 (2 months ago)	2026-04-26 08:01:01,871 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0c:5cc0:1:1::293c:1518 2 ... show more 2026-04-26 08:01:01,871 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0c:5cc0:1:1::293c:1518 2026-04-26 12:01:47,002 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0c:5cc0:1:1::293c:1518 2026-04-26 18:01:44,598 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0c:5cc0:1:1::293c:1518 2026-04-26 21:01:43,883 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0c:5cc0:1:1::293c:1518 2026-04-27 00:05:03,384 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0c:5cc0:1:1::293c:1518 show less	Brute-Force
🇺🇸 xmission.com	2026-02-02 03:01:23 (4 months ago)	Blocked by UFW (TCP on 54682) Source port: 443 Packet length: 72 This report (for 2a0c:5cc0:0001:00 ... show more Blocked by UFW (TCP on 54682) Source port: 443 Packet length: 72 This report (for 2a0c:5cc0:0001:0001:0000:0000:293c:1518) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-01-04 07:16:17 (5 months ago)	Blocked by UFW (TCP on 49686) Source port: 443 Packet length: 2295 This report (for 2a0c:5cc0:0001: ... show more Blocked by UFW (TCP on 49686) Source port: 443 Packet length: 2295 This report (for 2a0c:5cc0:0001:0001:0000:0000:293c:1518) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2025-12-03 06:12:02 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (tor-exit-readme-4.max ... show more (mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (tor-exit-readme-4.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 01:11:55.101904 2025] [security2:error] [pid 32232:tid 32232] [client 2a0c:5cc0:1:1::293c:1518:62115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.midwayisland.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.midwayisland.com"] [uri "/wayisland.sql"] [unique_id "aS_Uq63YhNUdEBuRq3bPMAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-26 17:07:22 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (tor-exit-readme-4.max ... show more (mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (tor-exit-readme-4.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 26 13:07:15.953714 2025] [security2:error] [pid 12932:tid 12932] [client 2a0c:5cc0:1:1::293c:1518:63842] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|takeapawsboston.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "takeapawsboston.com"] [uri "/takeap.sql"] [unique_id "aP5VQ6ukCDurvMJko5Gw-wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-10-16 14:11:29 (8 months ago)	Blocked by UFW (TCP on 38082) Source port: 443 Packet length: 96 This report (for 2a0c:5cc0:0001:00 ... show more Blocked by UFW (TCP on 38082) Source port: 443 Packet length: 96 This report (for 2a0c:5cc0:0001:0001:0000:0000:293c:1518) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2025-10-02 21:57:36 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the la ... show more (mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 02 17:57:27.716429 2025] [security2:error] [pid 7301:tid 7301] [client 2a0c:5cc0:1:1::293c:1518:61568] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|fusteriafontane.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fusteriafontane.com"] [uri "/fu.sql"] [unique_id "aN71R6IXxl2s7SZ06Yi-lQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-24 06:35:19 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the la ... show more (mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 24 02:35:12.302764 2025] [security2:error] [pid 21268:tid 21268] [client 2a0c:5cc0:1:1::293c:1518:62926] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.goodfrequencies.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.goodfrequencies.com"] [uri "/goodfre.sql"] [unique_id "aKqyoHtYZLp5TKxC1N6dwgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-02 06:30:09 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the la ... show more (mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 02:29:59.647738 2025] [security2:error] [pid 27282:tid 27282] [client 2a0c:5cc0:1:1::293c:1518:53108] [client 2a0c:5cc0:1:1::293c:1518] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|puckerbottombikini.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "puckerbottombikini.com"] [uri "/database.sql"] [unique_id "Z-zZZ897lED9Zvmt8A8elAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-01 16:55:28 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the la ... show more (mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 11:55:16.011208 2025] [security2:error] [pid 21470:tid 21470] [client 2a0c:5cc0:1:1::293c:1518:45949] [client 2a0c:5cc0:1:1::293c:1518] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|trustsense.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "trustsense.net"] [uri "/mysql.sql"] [unique_id "Z8M79A8eyXOy2PV9zINIPwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-29 10:58:40 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the la ... show more (mod_security) mod_security (id:210730) triggered by 2a0c:5cc0:1:1::293c:1518 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 29 06:58:31.421513 2024] [security2:error] [pid 27705:tid 27705] [client 2a0c:5cc0:1:1::293c:1518:25488] [client 2a0c:5cc0:1:1::293c:1518] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|naominixon.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "naominixon.com"] [uri "/naomin.sql"] [unique_id "ZtBUV7RDBqkt-41gTL_GIAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.150

🇬🇧 185.216.145.186

🇮🇩 182.253.156.184

🇯🇵 20.78.128.244

🇭🇰 20.24.65.213

🇺🇸 20.14.73.62

🇹🇭 202.29.220.6

🇲🇽 187.191.48.23

🇳🇱 167.172.42.229

🇭🇰 152.32.239.122

🇰🇷 104.28.161.111

🇮🇩 103.155.47.50

🇨🇦 85.217.149.39

🇫🇷 51.68.234.139

🇺🇸 31.58.87.216

🇻🇳 27.71.230.31

🇬🇧 191.96.110.39

🇨🇦 167.114.139.15

🇸🇬 165.22.101.210

🇳🇱 81.19.216.76