JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a00:1dc0:caff:90::b3de

2a00:1dc0:caff:90::b3de

Activity Trending Down IPv6 SLAAC Note

19 reports found in our database

3% ▼ ▼ ▼ Caution

Abuse confidence score ?

ISP

Trabia

Usage Type

Data Center/Web Hosting/Transit

ASN

AS43289

Hostname(s)

moldova.exit.maxzrbn.it

Domain Name

trabia.com

Country

🇲🇩 Moldova (the Republic of)

City

Chisinau, Chisinau Municipality

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a00:1dc0:caff:90::b3de:

This IP address has been reported a total of 19 times from 6 distinct sources. 2a00:1dc0:caff:90::b3de was first reported on December 2nd 2025, and the most recent report was 1 week ago. In the last 60 days, the only reporter location was: United States of America with 2 reports. The only category in these recent reports was: Port Scan 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-09-04 02:18:59 (1 week ago)	Blocked by UFW (TCP on 50606) Source port: 443 Packet length: 1500 This report (for 2a00:1dc0:caff: ... show more Blocked by UFW (TCP on 50606) Source port: 443 Packet length: 1500 This report (for 2a00:1dc0:caff:0090:0000:0000:0000:b3de) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-22 03:10:41 (1 month ago)	Blocked by UFW (TCP on 33480) Source port: 443 Packet length: 2290 This report (for 2a00:1dc0:caff: ... show more Blocked by UFW (TCP on 33480) Source port: 443 Packet length: 2290 This report (for 2a00:1dc0:caff:0090:0000:0000:0000:b3de) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-26 21:03:16 (4 months ago)	2026-04-26 08:00:42,378 fail2ban.actions [7718]: NOTICE [tor] Ban 2a00:1dc0:caff:90::b3de 20 ... show more 2026-04-26 08:00:42,378 fail2ban.actions [7718]: NOTICE [tor] Ban 2a00:1dc0:caff:90::b3de 2026-04-26 12:01:34,791 fail2ban.actions [7718]: NOTICE [tor] Ban 2a00:1dc0:caff:90::b3de 2026-04-26 18:01:32,495 fail2ban.actions [7718]: NOTICE [tor] Ban 2a00:1dc0:caff:90::b3de 2026-04-26 21:01:29,937 fail2ban.actions [7718]: NOTICE [tor] Ban 2a00:1dc0:caff:90::b3de 2026-04-27 00:03:14,628 fail2ban.actions [7718]: NOTICE [tor] Ban 2a00:1dc0:caff:90::b3de show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-22 20:17:35 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (moldova.exit.maxzrbn.i ... show more (mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (moldova.exit.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 16:17:28.580007 2026] [security2:error] [pid 1753884:tid 1753884] [client 2a00:1dc0:caff:90::b3de:56870] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nuewines.com\|F\|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nuewines.com"] [uri "/wp-config.cfg"] [unique_id "aeks2LxiZ6cYESb9eoBdJQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-03-26 20:59:04 (5 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-24 09:13:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrb ... show more (mod_security) mod_security (id:210492) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 04:12:57.449473 2026] [security2:error] [pid 22832:tid 22832] [client 2a00:1dc0:caff:90::b3de:49892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.burdetteconsulting.com"] [uri "/.git/config"] [unique_id "aZ1rmef4jNtsK8FskiBiIQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 20:16:09 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrb ... show more (mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 15:16:02.825774 2026] [security2:error] [pid 24358:tid 24358] [client 2a00:1dc0:caff:90::b3de:33302] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dwightbrown.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dwightbrown.com"] [uri "/db_n.sql"] [unique_id "aZy1ghjWzZbQ31hxAHhDbAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 23:59:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrb ... show more (mod_security) mod_security (id:210492) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 18:59:33.131789 2026] [security2:error] [pid 16514:tid 16514] [client 2a00:1dc0:caff:90::b3de:34726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.nue18.com"] [uri "/.git/config"] [unique_id "aY-65UvE_T-kWJGo1X3I6QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-12 00:53:11 (7 months ago)	GET / \| UA: req/v3 (https://github.com/imroc/req) \| Time: 2026-02-12 00:53:11 UTC	Web App Attack
🇳🇱 jjnxpct	2026-01-06 04:47:59 (8 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /tr.sql (Rule ID: 920440) - URL file extension is restricted by policy show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-01-02 04:52:29 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrb ... show more (mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 01 23:52:20.915579 2026] [security2:error] [pid 11631:tid 11631] [client 2a00:1dc0:caff:90::b3de:40998] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|raintechgutters.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "raintechgutters.com"] [uri "/techgutters_com.sql"] [unique_id "aVdPBKNYXDSci9rAj9vYkQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-20 14:00:13 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrb ... show more (mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 09:00:10.282189 2025] [security2:error] [pid 12490:tid 12516] [client 2a00:1dc0:caff:90::b3de:54896] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pennassociatenotary.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pennassociatenotary.com"] [uri "/pennassociatenota.sql"] [unique_id "aUar6l8Yj3eCRyUB7Bb3igAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-15 09:58:07 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrb ... show more (mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 04:58:03.564964 2025] [security2:error] [pid 13713:tid 13737] [client 2a00:1dc0:caff:90::b3de:38992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|minutosrobados.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "minutosrobados.com"] [uri "/obados_com.sql"] [unique_id "aT_bqwNreNN16R1pJObacAAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-11 19:20:31 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrb ... show more (mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 14:20:26.634787 2025] [security2:error] [pid 7102:tid 7102] [client 2a00:1dc0:caff:90::b3de:34992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|joevallone.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "joevallone.com"] [uri "/latest.sql"] [unique_id "aTsZeqhXClxRSFZlhm_pxAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-11 04:27:28 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrb ... show more (mod_security) mod_security (id:210730) triggered by 2a00:1dc0:caff:90::b3de (tor-exit-readme.maxzrbn.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 23:27:21.581265 2025] [security2:error] [pid 12111:tid 12111] [client 2a00:1dc0:caff:90::b3de:40206] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|footballxp.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "footballxp.com"] [uri "/backupwp.sql"] [unique_id "aTpIKeXcU0qHGMLiJhBD_QAAACA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇴🇲 194.233.110.192

🇺🇸 66.132.172.149

🇺🇸 66.132.172.148

🇮🇪 54.194.111.138

🇳🇱 195.178.110.228

🇬🇧 192.248.150.180

🇩🇪 164.92.227.102

🇺🇸 158.94.187.213

🇦🇷 131.161.184.46

🇨🇳 114.230.239.139

🇺🇸 100.49.117.77

🇺🇸 73.128.220.159

🇺🇸 66.132.172.125

🇩🇪 46.101.137.209

🇨🇳 36.135.62.89

🇧🇪 34.62.8.231

🇧🇷 200.106.183.4

🇺🇸 167.99.234.30

🇺🇸 66.132.172.124

🇺🇸 66.132.172.123