JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8

2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 100%: ?

100%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Compañía Dominicana de Teléfonos S. A.
Usage Type	Fixed Line ISP
ASN	AS6400
Domain Name	claro.com.do
Country	🇩🇴 Dominican Republic
City	La Romana, La Romana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8

Whois 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8

IP Abuse Reports for 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8:

This IP address has been reported a total of 107 times from 50 distinct sources. 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 was first reported on June 26th 2026, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-06-30 08:04:45 (43 minutes ago)	(php_susp_dir) srv103 PHP in suspicious dir 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 (DO/Dominican Rep ... show more (php_susp_dir) srv103 PHP in suspicious dir 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 (DO/Dominican Republic/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇮🇹 VHosting	2026-06-30 07:20:09 (1 hour ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 Baking333	2026-06-30 06:56:28 (1 hour ago)	[redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:07:56:27 +0100] "GET /[redacted] ... show more [redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:07:56:27 +0100] "GET /[redacted] HTTP/1.1" 302 1563 0/98636 "http://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" [redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:07:56:27 +0100] "GET / HTTP/1.1" 200 7980 0/133840 "https://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" show less	Bad Web Bot Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-06-30 06:48:55 (1 hour ago)	Web vulnerability scanning	Brute-Force Web Spam Web App Attack
🇫🇷 demomodule	2026-06-30 06:34:19 (2 hours ago)	PrestaShop Security Module: WordPress probe path detected	Web App Attack
🇩🇪 Jarda_H	2026-06-30 06:31:49 (2 hours ago)	php-url-scan Attack Detected	Hacking Web App Attack
🇫🇷 bazter.pro	2026-06-30 06:29:49 (2 hours ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇭🇺 kranem	2026-06-30 06:00:02 (2 hours ago)	Triggered Cloudflare WAF from DO. Action taken: BLOCK ASN: 6400 (Compañía Dominicana de Teléfonos S. ... show more Triggered Cloudflare WAF from DO. Action taken: BLOCK ASN: 6400 (Compañía Dominicana de Teléfonos S. A.) Protocol: HTTP/1.1 (POST method) Endpoint: /cms/xmlrpc.php Timestamp: 2026-06-30T05:43:02Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0 show less	Bad Web Bot
🇫🇷 Baking333	2026-06-30 04:54:53 (3 hours ago)	[redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:05:54:51 +0100] "GET /[redacted] ... show more [redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:05:54:51 +0100] "GET /[redacted] HTTP/1.1" 302 1583 0/70613 "http://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" [redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:05:54:51 +0100] "GET / HTTP/1.1" 200 7723 0/184427 "https://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-30 03:17:51 (5 hours ago)	[TueJun3005:17:48.4528262026][security2:error][pid3844186:tid3844207][client2001:1308:2887:4c00:20a: ... show more [TueJun3005:17:48.4528262026][security2:error][pid3844186:tid3844207][client2001:1308:2887:4c00:20a:f7ff:fe7e:75c8:0]ModSecurity:Accessdeniedwithcode403$phase1$.Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"akM1XHT9cYfJo_p3rBN1-gAAAAo\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 Baking333	2026-06-30 02:18:15 (6 hours ago)	[redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:03:18:13 +0100] "GET /[redacted] ... show more [redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:03:18:13 +0100] "GET /[redacted] HTTP/1.1" 302 1528 0/76494 "http://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" [redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:03:18:14 +0100] "GET / HTTP/1.1" 200 7133 0/124111 "https://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-06-30 01:03:04 (7 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 monn45888	2026-06-30 00:10:56 (8 hours ago)	$f2bV_matches	Web App Attack
🇩🇪 LRob.fr	2026-06-30 00:01:37 (8 hours ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇷 Baking333	2026-06-29 23:40:37 (9 hours ago)	[redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:00:40:34 +0100] "GET /[redacted] ... show more [redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:00:40:34 +0100] "GET /[redacted] HTTP/1.1" 302 1558 0/145244 "http://[redacted]/[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" [redacted] 2001:1308:2887:4c00:20a:f7ff:fe7e:75c8 - - [30/Jun/2026:00:40:35 +0100] "GET / HTTP/1.1" 200 7976 0/100811 "https://[redacted]/[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 185.100.212.141

🇨🇳 111.26.62.46

🇧🇬 45.95.170.45

🇨🇲 41.204.82.238

🇺🇸 35.236.71.81

🇳🇱 34.7.215.97

🇰🇷 211.228.97.97

🇳🇱 195.178.110.30

🇫🇷 194.163.150.184

🇧🇷 186.215.107.189

🇺🇸 146.190.112.200

🇰🇷 125.142.37.91

🇩🇪 69.5.169.7

🇸🇬 43.173.173.239

🇬🇧 2a06:4880:6000::7a

🇨🇳 210.16.168.11

🇧🇷 187.120.106.147

🇫🇷 176.136.93.18

🇺🇸 162.216.150.81

🇵🇱 153.19.161.177