JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2408:872f:200:3::1052

2408:872f:200:3::1052 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 11%: ?

11%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	China Unicom
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenyang, Liaoning

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2408:872f:200:3::1052

Whois 2408:872f:200:3::1052

IP Abuse Reports for 2408:872f:200:3::1052:

This IP address has been reported a total of 13 times from 4 distinct sources. 2408:872f:200:3::1052 was first reported on January 13th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-07-06 00:02:47 (6 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/bleart-tolaj-krijon-konfuzion-mes-ballkanit-dhe-gjilanit-anesori-zyrtarizohet-ne-te-njejten-kohe-nga-dy-rivale/907599 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-30 23:40:26 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-18 07:00:11 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 bigorre.org	2026-05-13 16:50:50 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇫🇷 bigorre.org	2026-05-05 14:51:54 (2 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇫🇷 bigorre.org	2026-05-02 16:28:47 (2 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2026-04-06 18:35:17 (2 months ago)	Agressive scraper not respecting robots.txt or not identifying itself properly ...	Bad Web Bot
🇫🇷 bigorre.org	2026-03-14 14:07:16 (3 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇫🇷 bigorre.org	2026-03-12 14:57:52 (3 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇫🇷 bigorre.org	2026-03-11 13:20:38 (3 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-11 03:12:43 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2408:872f:200:3::1052 (Unknown): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 2408:872f:200:3::1052 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 23:12:36.459109 2026] [security2:error] [pid 21873:tid 21873] [client 2408:872f:200:3::1052:3596] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pointillistic.com\|F\|2"] [data ".bravecoolworld.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pointillistic.com"] [uri "/vmps-audio/www.bravecoolworld.com"] [unique_id "abDdpK8LSZEDMbd5FIoySQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-01-28 15:05:59 (5 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇫🇷 bigorre.org	2026-01-13 13:32:22 (5 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.247.235

🇺🇸 172.178.115.138

🇺🇸 23.94.155.84

🇻🇳 14.191.150.247

🇺🇸 2607:f8b0:4001:c0c::124

🇬🇧 217.154.35.203

🇮🇳 165.225.124.120

🇮🇳 139.59.71.96

🇪🇸 139.47.48.250

🇮🇹 79.3.96.178

🇧🇷 45.164.251.106

🇳🇱 45.148.10.151

🇺🇸 216.180.246.61

🇵🇱 143.20.97.31

🇨🇳 139.199.228.228

🇨🇳 139.170.72.238

🇳🇿 121.73.163.223

🇩🇪 69.5.169.162

🇺🇸 23.241.145.240

🇬🇧 5.252.83.129