JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2800:ba0:28:c1:64ec:15ff:fe0c:9099

2800:ba0:28:c1:64ec:15ff:fe0c:9099 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	IPXON Networks Argentina - Cordoba
Usage Type	Data Center/Web Hosting/Transit
ASN	AS263812
Domain Name	ipxon.com
Country	🇦🇷 Argentina
City	Cordoba, Cordoba

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2800:ba0:28:c1:64ec:15ff:fe0c:9099

Whois 2800:ba0:28:c1:64ec:15ff:fe0c:9099

IP Abuse Reports for 2800:ba0:28:c1:64ec:15ff:fe0c:9099:

This IP address has been reported a total of 27 times from 12 distinct sources. 2800:ba0:28:c1:64ec:15ff:fe0c:9099 was first reported on May 3rd 2023, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Murazaki	2025-09-03 22:01:47 (11 months ago)	2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [03/Sep/2025:03:09:59 +0200] "CONNECT lemmy.balamb.fr:443 HTT ... show more 2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [03/Sep/2025:03:09:59 +0200] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 500 170 "-" "-" "-" ... show less	Hacking
🇫🇷 Murazaki	2025-09-02 22:03:32 (11 months ago)	2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [02/Sep/2025:12:48:02 +0200] "CONNECT lemmy.balamb.fr:443 HTT ... show more 2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [02/Sep/2025:12:48:02 +0200] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 500 170 "-" "-" "-" ... show less	Hacking
🇩🇪 CommanderRoot	2025-08-30 18:33:14 (11 months ago)	Invalid HTTP request flood	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-08-30 11:23:53 (11 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-06-27 09:47:39 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 ... show more (mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 27 05:47:32.723655 2025] [security2:error] [pid 2017980:tid 2017980] [client 2800:ba0:28:c1:64ec:15ff:fe0c:9099:2738] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ik3co.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ik3co.com"] [uri "/mailto:[email protected]"] [unique_id "aF5otKd4MUmroo46rfIxjgAAAAQ"], referer: http://ik3co.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-26 17:05:21 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 ... show more (mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 26 13:05:13.888315 2025] [security2:error] [pid 1957301:tid 1957301] [client 2800:ba0:28:c1:64ec:15ff:fe0c:9099:8526] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ronniescedarinn.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ronniescedarinn.com"] [uri "/mailto:[email protected]"] [unique_id "aF19yVETgu1WEFcGSninqgAAAAc"], referer: http://ronniescedarinn.com/contact_us.htm show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-24 13:12:48 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 ... show more (mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 24 09:12:41.600760 2025] [security2:error] [pid 1190066:tid 1190066] [client 2800:ba0:28:c1:64ec:15ff:fe0c:9099:33872] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thevillageartcenter.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thevillageartcenter.com"] [uri "/mailto:[email protected]"] [unique_id "aFqkSQpz58iSiF9dDSKlQAAAAAI"], referer: http://thevillageartcenter.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-22 10:09:34 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 ... show more (mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 06:09:30.088951 2025] [security2:error] [pid 2374035:tid 2374035] [client 2800:ba0:28:c1:64ec:15ff:fe0c:9099:43222] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rcrgalicia.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rcrgalicia.com"] [uri "/mailto:[email protected]"] [unique_id "aFfWWvRuVgrSwcksfJdwjwAAAAU"], referer: http://rcrgalicia.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-21 09:01:10 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 ... show more (mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 21 05:01:05.065811 2025] [security2:error] [pid 2898953:tid 2898964] [client 2800:ba0:28:c1:64ec:15ff:fe0c:9099:36704] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|adventuresdotcom.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "adventuresdotcom.com"] [uri "/mailto:[email protected]"] [unique_id "aFZ00RAEA6QL3u1w_19vlQAAAEc"], referer: http://adventuresdotcom.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 elijahr	2025-06-16 03:09:31 (1 year ago)	2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [15/Jun/2025:23:09:13 -0400] "CONNECT elijahr.dev:443:443 HTT ... show more 2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [15/Jun/2025:23:09:13 -0400] "CONNECT elijahr.dev:443:443 HTTP/1.1" 400 157 "-" "-" 2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [15/Jun/2025:23:09:19 -0400] "CONNECT elijahr.dev:443:443 HTTP/1.1" 400 157 "-" "-" 2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [15/Jun/2025:23:09:22 -0400] "CONNECT elijahr.dev:443:443 HTTP/1.1" 400 157 "-" "-" 2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [15/Jun/2025:23:09:23 -0400] "CONNECT elijahr.dev:443:443 HTTP/1.1" 400 157 "-" "-" ... show less	Brute-Force
🇨🇭 SOC [GOLINE SA]	2025-02-15 15:02:27 (1 year ago)	Port Scan detected from 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (AR/Argentina/Cordoba/-/-/[AS263812 SON ... show more Port Scan detected from 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (AR/Argentina/Cordoba/-/-/[AS263812 SONDATECH S.A.S.]). 21 hits in the last 76 seconds; IP: 2800:ba0:28:c1:64ec:15ff:fe0c:9099; Ports: *; Direction: 0; Trigger: PS_LIMIT; Logs: show less	Brute-Force
🇸🇪 sweplox.se	2024-08-25 05:10:35 (1 year ago)	2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [10/Aug/2024:18:31:56 +0000] "GET https://cryptoforum.ovh/mem ... show more 2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [10/Aug/2024:18:31:56 +0000] "GET https://cryptoforum.ovh/member.php?action=profile HTTP/1.0" 301 162 "https://cryptoforum.ovh/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" 2800:ba0:28:c1:64ec:15ff:fe0c:9099 - - [25/Aug/2024:05:10:34 +0000] "GET https://cryptoforum.ovh/newthread.php?fid=70 HTTP/1.0" 301 162 "https://cryptoforum.ovh/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" ... show less	Bad Web Bot SSH
🇩🇪 CommanderRoot	2024-07-05 05:07:23 (2 years ago)	Invalid HTTP request flood	DDoS Attack Web Spam
🇩🇪 Reinhard	2024-06-18 17:04:00 (2 years ago)	Msg from error-handling: IP-Addr: 2800:ba0:28:c1:64ec:15ff:fe0c:9099, Fehler: /wp-login.php?action=r ... show more Msg from error-handling: IP-Addr: 2800:ba0:28:c1:64ec:15ff:fe0c:9099, Fehler: /wp-login.php?action=register. Body: Tue, 18 Jun 2024 19:04:26 +0200, IP-Addr:2800:ba0:28:c1:64ec:15ff:fe0c:9099, Host: 2800:ba0:28:c1:64ec:15ff:fe0c:9099 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-03-25 03:26:15 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 ... show more (mod_security) mod_security (id:210730) triggered by 2800:ba0:28:c1:64ec:15ff:fe0c:9099 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 24 23:26:07.620888 2024] [security2:error] [pid 7123] [client 2800:ba0:28:c1:64ec:15ff:fe0c:9099:8870] [client 2800:ba0:28:c1:64ec:15ff:fe0c:9099] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.unigroupeu.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.unigroupeu.com"] [uri "/mailto:[email protected]"] [unique_id "ZgDuz2bkZ-dFUowtFHQ5eAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:828:f230:8665:654d:dbd6:ecac:abe2

🇨🇳 220.161.52.149

🇹🇬 196.170.243.57

🇳🇱 195.178.110.30

🇺🇸 166.157.228.67

🇭🇰 150.109.66.254

🇨🇳 139.170.72.58

🇨🇳 112.31.109.13

🇵🇱 109.205.211.110

🇭🇰 103.30.40.129

🇷🇴 80.94.92.55

🇺🇸 54.67.104.137

🇺🇸 45.194.67.26

🇰🇷 13.125.206.227

🇺🇸 2400:cb00:988:1000:9d01:4a8a:40b4:2987

🇺🇸 216.73.216.68

🇫🇷 176.31.21.38

🇭🇰 154.12.24.136

🇺🇸 152.163.8.81

🇺🇸 152.32.235.96