AbuseIPDB » 2001:1bb0:e000:1e::3ea

2001:1bb0:e000:1e::3ea was found in our database!

This IP was reported 4 times. Confidence of Abuse is 2%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	JSC RTComm.RU
Usage Type	Data Center/Web Hosting/Transit
Domain Name	rt-comm.ru
Country	Russian Federation
City	Moscow, Moskva

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 2001:1bb0:e000:1e::3ea

Whois 2001:1bb0:e000:1e::3ea

IP Abuse Reports for 2001:1bb0:e000:1e::3ea:

This IP address has been reported a total of 4 times from 1 distinct source. 2001:1bb0:e000:1e::3ea was first reported on August 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-09-18 10:22:28 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2001:1bb0:e000:1e::3ea (Unknown): 1 in the last ... show more(mod_security) mod_security (id:210492) triggered by 2001:1bb0:e000:1e::3ea (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 18 06:22:15.017931 2024] [security2:error] [pid 30882:tid 30882] [client 2001:1bb0:e000:1e::3ea:39964] [client 2001:1bb0:e000:1e::3ea] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nomanszone.org"] [uri "/.env.bak"] [unique_id "Zuqp1581ZdEtvhH05nk76gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-09-18 08:41:14 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 2001:1bb0:e000:1e::3ea (Unknown): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 2001:1bb0:e000:1e::3ea (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 18 04:41:00.765107 2024] [security2:error] [pid 331:tid 331] [client 2001:1bb0:e000:1e::3ea:56306] [client 2001:1bb0:e000:1e::3ea] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|valentinesails.com\|F\|2"] [data ".com.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "valentinesails.com"] [uri "/valentinesails.com.bak"] [unique_id "ZuqSHLSkUefFKXnQ8FsKfwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-11 15:09:02 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2001:1bb0:e000:1e::3ea (Unknown): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 2001:1bb0:e000:1e::3ea (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 11 11:08:48.542786 2024] [security2:error] [pid 904679:tid 904679] [client 2001:1bb0:e000:1e::3ea:38556] [client 2001:1bb0:e000:1e::3ea] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|joseluisperez.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "joseluisperez.com"] [uri "/blog.bak"] [unique_id "ZrjUAOMc0A-b5HM8vAd91QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-05 05:56:46 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2001:1bb0:e000:1e::3ea (Unknown): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 2001:1bb0:e000:1e::3ea (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 01:56:32.701522 2024] [security2:error] [pid 18882:tid 18882] [client 2001:1bb0:e000:1e::3ea:53358] [client 2001:1bb0:e000:1e::3ea] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|title34.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "title34.com"] [uri "/home.bak"] [unique_id "ZrBpkO1r96CIXSWHTajargAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack