JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2400:8901::2000:62ff:fe0c:b04d

2400:8901::2000:62ff:fe0c:b04d was found in our database!

This IP was reported 46 times. Confidence of Abuse is 78%: ?

78%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Akamai Connected Cloud / Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Domain Name	akamai.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2400:8901::2000:62ff:fe0c:b04d

Whois 2400:8901::2000:62ff:fe0c:b04d

IP Abuse Reports for 2400:8901::2000:62ff:fe0c:b04d:

This IP address has been reported a total of 46 times from 14 distinct sources. 2400:8901::2000:62ff:fe0c:b04d was first reported on August 22nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-27 02:41:22 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 22:41:15.900181 2026] [security2:error] [pid 31216:tid 31216] [client 2400:8901::2000:62ff:fe0c:b04d:61980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bladesoflegend.com"] [uri "/sftp-config.json"] [unique_id "ao-jy_mgzrKiNjix0HI3tgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 19:13:03 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 15:12:49.725832 2026] [security2:error] [pid 5046:tid 5046] [client 2400:8901::2000:62ff:fe0c:b04d:56321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baystreet.news"] [uri "/sftp-config.json"] [unique_id "ao86sQAhYdggJeaiSoHY1QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 15:40:29 (12 hours ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-26 03:26:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 23:26:18.532699 2026] [security2:error] [pid 25205:tid 25205] [client 2400:8901::2000:62ff:fe0c:b04d:49303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biketurtlehill.com"] [uri "/sftp-config.json"] [unique_id "ao5c2qjspLS0qijtIghWvgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-08-26 01:45:04 (1 day ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇩🇪 webko.si	2026-08-26 00:23:18 (1 day ago)	BARUTANA.si: Bruteforce web app access, URI detail: '/.vscode/sftp.json'.	Web App Attack
🇳🇱 BlueWire Hosting	2026-08-26 00:11:05 (1 day ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 22:09:54 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 18:09:45.757737 2026] [security2:error] [pid 30608:tid 30608] [client 2400:8901::2000:62ff:fe0c:b04d:53620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bee432.com"] [uri "/sftp-config.json"] [unique_id "ao4SqQUqjQfGepYh4mAyJgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 20:43:08 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 16:42:55.961566 2026] [security2:error] [pid 14209:tid 14209] [client 2400:8901::2000:62ff:fe0c:b04d:50835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bfpsamoa.com"] [uri "/sftp-config.json"] [unique_id "ao3-T6RXJFjWWFp2BpvlAwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-08-25 19:52:42 (1 day ago)	[TueAug2521:52:37.7387632026][security2:error][pid1281618:tid1281928][client2400:8901::2000:62ff:fe0 ... show more [TueAug2521:52:37.7387632026][security2:error][pid1281618:tid1281928][client2400:8901::2000:62ff:fe0c:b04d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"benvenutialfood.biz\"][uri\"/sftp-config.json\"][unique_id\"ao3yhW8SL9WM1z5_0jf4QQAAAJE\"] show less	Hacking Web App Attack
🇩🇪 LRob	2026-08-25 19:34:45 (1 day ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /sftp-config.json \| 2026-08-25 19:34 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 18:47:07 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 14:46:59.713515 2026] [security2:error] [pid 28518:tid 28518] [client 2400:8901::2000:62ff:fe0c:b04d:65078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bentonflybox.com"] [uri "/sftp-config.json"] [unique_id "ao3jI-9AA5XlBlrmawVRSAAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Jksharp2	2026-08-25 15:04:00 (1 day ago)		Web Spam Port Scan Spoofing Brute-Force Bad Web Bot Web App Attack FTP Brute-Force Ping of Death Phishing Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-08-25 14:47:00 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2400:8901::2000:62ff:fe0c:b04d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:46:53.797358 2026] [security2:error] [pid 11000:tid 11000] [client 2400:8901::2000:62ff:fe0c:b04d:54826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bentechconstruction.com"] [uri "/sftp-config.json"] [unique_id "ao2q3Wu_vn009ixCwXnjtAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-25 05:20:32 (1 day ago)	[TueAug2507:20:27.2278212026][security2:error][pid2054685:tid2054717][client2400:8901::2000:62ff:fe0 ... show more [TueAug2507:20:27.2278212026][security2:error][pid2054685:tid2054717][client2400:8901::2000:62ff:fe0c:b04d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"bianchitecno.ch\"][uri\"/sftp-config.json\"][unique_id\"ao0mG2MHMgolpJN5Eo2-MAAAAIA\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.120.176.6

🇳🇱 193.47.62.69

🇮🇳 103.211.54.67

🇺🇸 195.184.76.247

🇫🇮 147.185.133.111

🇺🇸 91.230.168.4

🇺🇸 76.79.213.69

🇺🇸 74.125.45.25

🇺🇦 46.172.197.60

🇳🇱 45.148.10.230

🇧🇪 198.235.24.226

🇺🇿 95.46.160.63

🇧🇪 46.178.54.9

🇻🇳 42.113.154.234

🇸🇦 8.213.80.163

🇩🇪 207.154.197.113

🇹🇼 198.235.24.98

🇲🇳 180.149.125.208

🇺🇸 162.216.149.201

🇮🇳 152.59.14.194