AbuseIPDB » 2804:14d:7890:5e4a:869f:16b:fa9a:a819

2804:14d:7890:5e4a:869f:16b:fa9a:a819 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 22%: ?

22%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Claro NXT Telecomunicacoes Ltda
Usage Type	Fixed Line ISP
ASN	AS28573
Domain Name	claro.com.br
Country	Brazil
City	Santo Andre, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 2804:14d:7890:5e4a:869f:16b:fa9a:a819

Whois 2804:14d:7890:5e4a:869f:16b:fa9a:a819

IP Abuse Reports for 2804:14d:7890:5e4a:869f:16b:fa9a:a819:

This IP address has been reported a total of 29 times from 10 distinct sources. 2804:14d:7890:5e4a:869f:16b:fa9a:a819 was first reported on February 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
akac	2025-04-19 05:01:38 (2 months ago)	Web vulnerability scanning: HTTP/1.1 POST /xmlrpc.php	Hacking Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-04-18 17:13:44 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown) ... show more(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 13:13:37.874940 2025] [security2:error] [pid 21841:tid 21841] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819:61318] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nuewines.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nuewines.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aAKIQZjYHxwhCQPtiuD1bgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-04-18 01:55:10 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown) ... show more(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 17 21:55:06.025256 2025] [security2:error] [pid 22287:tid 22287] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819:52601] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||riccardiagency.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "riccardiagency.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aAGw-jQPOVEAi88OpWL8FQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-03-26 18:32:28 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown) ... show more(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 26 14:32:25.060557 2025] [security2:error] [pid 4430:tid 4435] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819:62358] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arizonasolutionsgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arizonasolutionsgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-RIOYcm75yNw2JW-P57LAAAAEM"] show less	Brute-Force Bad Web Bot Web App Attack
LRob.fr	2025-03-18 00:02:07 (3 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
maxxsense	2025-03-07 00:03:19 (4 months ago)	(wordpress) Failed wordpress login from 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (BR/Brazil/-)	Brute-Force
TPI-Abuse	2025-03-05 03:21:31 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown) ... show more(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 22:21:24.609889 2025] [security2:error] [pid 1710:tid 1710] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819:62219] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fadcometal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fadcometal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z8fDNLy5hTIHZRjtVOkoAgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
vestibtech	2025-02-24 22:04:56 (4 months ago)	2804:14d:7890:5e4a:869f:16b:fa9a:a819 - - [24/Feb/2025:15:04:56 -0700] "POST /xmlrpc.php HTTP/1.1" 4 ... show more2804:14d:7890:5e4a:869f:16b:fa9a:a819 - - [24/Feb/2025:15:04:56 -0700] "POST /xmlrpc.php HTTP/1.1" 404 10479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Web App Attack
LRob.fr	2025-02-24 20:15:11 (4 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
TPI-Abuse	2025-02-23 11:42:36 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown) ... show more(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 23 06:42:32.269468 2025] [security2:error] [pid 23181:tid 23181] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819:54239] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gilgoinn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gilgoinn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7sJqM3ETQeyFLDZTSgRDAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
maxxsense	2025-02-23 07:27:26 (4 months ago)	(wordpress) Failed wordpress login from 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (BR/Brazil/-)	Brute-Force
TPI-Abuse	2025-02-23 04:12:29 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown) ... show more(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 22 23:12:24.153573 2025] [security2:error] [pid 2597:tid 2597] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819:58364] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||elegantdwellings.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "elegantdwellings.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7qgKLgUWzq-3MRhJBmLBwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-02-22 00:50:29 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown) ... show more(mod_security) mod_security (id:225170) triggered by 2804:14d:7890:5e4a:869f:16b:fa9a:a819 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 21 19:50:23.797128 2025] [security2:error] [pid 3863709:tid 3863709] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819:56705] [client 2804:14d:7890:5e4a:869f:16b:fa9a:a819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||californiacbcdelegation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "californiacbcdelegation.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7kfTzvHMQ0ZaLQM4d-CZQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
karger	2025-02-21 23:32:53 (4 months ago)	Wordpress attack - soft filter	Brute-Force Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩