JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:448a:5040:485a:ad06:964:4d82:302c

2001:448a:5040:485a:ad06:964:4d82:302c was found in our database!

This IP was reported 14 times. Confidence of Abuse is 71%: ?

71%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	PT Telekomunikasi Indonesia
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Kertosono, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:448a:5040:485a:ad06:964:4d82:302c

Whois 2001:448a:5040:485a:ad06:964:4d82:302c

IP Abuse Reports for 2001:448a:5040:485a:ad06:964:4d82:302c:

This IP address has been reported a total of 14 times from 13 distinct sources. 2001:448a:5040:485a:ad06:964:4d82:302c was first reported on September 16th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BlueWire Hosting	2026-09-16 15:44:11 (1 day ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇳🇱 WeCloudit-Anti-Abuse	2026-09-16 14:19:05 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 BlueWire Hosting	2026-09-16 13:55:51 (1 day ago)	Aggressive scanning resulting into 404	Bad Web Bot
🇫🇮 as211431.net	2026-09-16 13:38:56 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 maxpower	2026-09-16 12:54:11 (1 day ago)	(PERMBLOCK) 2001:448a:5040:485a:ad06:964:4d82:302c (ID/Indonesia/-) has had more than 4 temp blocks ... show more (PERMBLOCK) 2001:448a:5040:485a:ad06:964:4d82:302c (ID/Indonesia/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇳🇱 Site.eu	2026-09-16 11:33:02 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 Alt255	2026-09-16 11:29:52 (1 day ago)	[ti-02ov] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-02ov] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:13:29:14 +0200] "POST /wp-login.php HTTP/1.1" 302 217 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:13:29:29 +0200] "POST /wp-login.php HTTP/1.1" 302 217 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:13:29:42 +0200] "POST /xmlrpc.php HTTP/1.1" 403 7905 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/ ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 11:11:15 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 2001:448a:5040:485a:ad06:964:4d82:302c (Unknown ... show more (mod_security) mod_security (id:225170) triggered by 2001:448a:5040:485a:ad06:964:4d82:302c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 07:11:11.623971 2026] [security2:error] [pid 2261:tid 2261] [client 2001:448a:5040:485a:ad06:964:4d82:302c:6801] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.achildsspace.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.achildsspace.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqp5TzOQFY6KoLoPzc-07AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-09-16 10:20:03 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-09-16 10:02:37 (1 day ago)	2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:12:02:32 +0200] "GET / HTTP/1.1" 301 512 "-" ... show more 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:12:02:32 +0200] "GET / HTTP/1.1" 301 512 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:12:02:33 +0200] "GET / HTTP/1.1" 200 11896 "http://[site]/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:12:02:33 +0200] "HEAD / HTTP/1.1" 200 716 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:12:02:33 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:12:02:33 +0200] "POST /wp-json/batch/v1 HT show less	Web App Attack Hacking
🇫🇷 Omar Martínez	2026-09-16 08:44:06 (1 day ago)	2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:02:44:05 -0600] "POST /?rest_route=/batch/v1 ... show more 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:02:44:05 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" ... show less	Phishing Email Spam Blog Spam
🇩🇪 expandmade.com	2026-09-16 08:25:59 (1 day ago)	unauthorized rest api call [16/Sep/2026:08:25:59 "POST /index.php"]	Web App Attack
Anonymous	2026-09-16 02:00:03 (1 day ago)	Attack detected: 2001:448a:5040:485a:ad06:964:4d82:302c [2026-09-16] Categories: 21 --- wp2shell/bat ... show more Attack detected: 2001:448a:5040:485a:ad06:964:4d82:302c [2026-09-16] Categories: 21 --- wp2shell/batch exploit (1 hits) --- 2001:448a:5040:485a:ad06:964:4d82:302c - - [16/Sep/2026:01:28:15 +0000] "POST /?rest_route=/batch/v1 HTTP/2.0" 207 359 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 1025591 show less	Web App Attack
Anonymous	2026-09-16 01:30:09 (1 day ago)	\| [Dangerous/Indonesia] Aggressive IP 2001:448a:5040:485a:ad06:964:4d82:302c (~30 hits). Type: DoS D ... show more \| [Dangerous/Indonesia] Aggressive IP 2001:448a:5040:485a:ad06:964:4d82:302c (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.172.155.136

🇫🇷 185.177.72.56

🇮🇳 164.52.216.130

🇿🇦 160.119.251.92

🇨🇳 123.121.75.126

🇨🇦 51.161.122.254

🇺🇸 45.90.223.114

🇺🇸 2a03:2880:f802:3c::

🇳🇱 152.55.185.18

🇬🇧 138.68.143.68

🇺🇸 20.169.55.114

🇧🇷 205.210.31.165

🇺🇸 162.218.226.251

🇺🇸 158.51.96.38

🇻🇳 103.28.38.27

🇩🇪 91.92.240.229

🇫🇷 85.217.140.41

🇺🇸 67.81.165.166

🇬🇧 35.203.211.149

🇯🇵 34.97.47.201