AbuseIPDB » 2a12:5940:5753::2

2a12:5940:5753::2 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 25%: ?

25%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	AEZA-NETWORK-VIENNA
Usage Type	Data Center/Web Hosting/Transit
Domain Name	aeza.network
Country	Netherlands (Kingdom of the)
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 2a12:5940:5753::2

Whois 2a12:5940:5753::2

IP Abuse Reports for 2a12:5940:5753::2:

This IP address has been reported a total of 9 times from 6 distinct sources. 2a12:5940:5753::2 was first reported on August 8th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-08-09 22:31:10 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 2a12:5940:5753::2 (Unknown): 1 in the last 300 ... show more(mod_security) mod_security (id:225170) triggered by 2a12:5940:5753::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 09 18:31:00.260221 2024] [security2:error] [pid 896768:tid 896768] [client 2a12:5940:5753::2:43584] [client 2a12:5940:5753::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|meganmurph.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "meganmurph.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZraYpDOtKtfhx-TqdGJsjwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-09 16:33:44 (4 weeks ago)	(mod_security) mod_security (id:234930) triggered by 2a12:5940:5753::2 (Unknown): 1 in the last 300 ... show more(mod_security) mod_security (id:234930) triggered by 2a12:5940:5753::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 09 12:33:31.155720 2024] [security2:error] [pid 19320:tid 19340] [client 2a12:5940:5753::2:36978] [client 2a12:5940:5753::2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.killasgarage.bike\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.killasgarage.bike"] [uri "/uncategorized/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ZrZE22Bswx0SWhzqUcmGPwAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-09 14:59:08 (4 weeks ago)	(mod_security) mod_security (id:234930) triggered by 2a12:5940:5753::2 (Unknown): 1 in the last 300 ... show more(mod_security) mod_security (id:234930) triggered by 2a12:5940:5753::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 09 10:58:59.363879 2024] [security2:error] [pid 7840:tid 7840] [client 2a12:5940:5753::2:55168] [client 2a12:5940:5753::2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.comobarbershop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.comobarbershop.com"] [uri "/uncategorized/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ZrYus5QAKcYhX3N9wv_aowAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
applemooz	2024-08-09 14:31:51 (4 weeks ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
stinpriza	2024-08-09 10:09:30 (4 weeks ago)	Drupal Authentication failure	Brute-Force Web App Attack
4server	2024-08-09 08:05:02 (4 weeks ago)	[FriAug0910:04:56.5395752024][security2:error][pid3497751:tid3497942][client2a12:5940:5753::2:0][cli ... show more[FriAug0910:04:56.5395752024][security2:error][pid3497751:tid3497942][client2a12:5940:5753::2:0][client2a12:5940:5753::2]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"wp-content/uploads/.\*\\\\\\\\.ph$\?:p\\|tml\\|t$\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploadsdirectorydenied\"][data\"wp-content/uploads/mfw-activity-logger/csv-uploads/evil.php\"][severity\"CRITICAL\"][hostname\"giftech.ch\"][uri\"/wp-content/uploads/mfw-activity-logger/csv-uploads/evil.php\"][unique_id\"ZrXNqOlif8kUGZ2POMpwywAAAIA\"][FriAug0910:04:56.9378452024][security2:error][pid3497751:tid3497942][client2a12:5940:5753::2:0][client2a12:5940:5753::2]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"connector\\\\\\\\.minimal\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"306\"][id\"393781\"][rev\"1\"][msg\"Atomicorp.comWAFRule show less	Port Scan Brute-Force Web App Attack
TPI-Abuse	2024-08-09 07:41:15 (4 weeks ago)	(mod_security) mod_security (id:234930) triggered by 2a12:5940:5753::2 (Unknown): 1 in the last 300 ... show more(mod_security) mod_security (id:234930) triggered by 2a12:5940:5753::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 09 03:41:09.142425 2024] [security2:error] [pid 363:tid 363] [client 2a12:5940:5753::2:42522] [client 2a12:5940:5753::2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.limestoneroof.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.limestoneroof.com"] [uri "/2013/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ZrXIFWuv7CcjL_rcq9yyNAAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
mawan	2024-08-09 01:33:49 (4 weeks ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
cmbplf	2024-08-08 21:28:20 (4 weeks ago)	1.600 requests to */xmlrpc.php	Brute-Force Bad Web Bot