JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2400:8901::2000:6cff:fef5:b452

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

68 reports

21 reporters · latest 2 months ago

ISP	Akamai Connected Cloud / Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Domain Name	akamai.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2400:8901::2000:6cff:fef5:b452 has been reported 68 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2400:8901::2000:6cff:fef5:b452

Export CSV

This IP address has been reported a total of 68 times from 21 distinct sources. 2400:8901::2000:6cff:fef5:b452 was first reported on July 20th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-08-01 09:23:37 (2 months ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇩🇪 Viveronese	2026-08-01 07:59:47 (2 months ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 4server	2026-07-31 14:48:55 (2 months ago)	[FriJul3116:48:52.1103462026][security2:error][pid285212:tid285295][client2400:8901::2000:6cff:fef5: ... show more [FriJul3116:48:52.1103462026][security2:error][pid285212:tid285295][client2400:8901::2000:6cff:fef5:b452:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"fidmeyer.ch\"][uri\"/sftp-config.json\"][unique_id\"amy11D6MeZZDHZB23napDgAAAIw\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-30 17:41:49 (2 months ago)	2400:8901::2000:6cff:fef5:b452 - - [30/Jul/2026:12:41:44 -0500] "GET /sftp-config.json HTTP/2.0" 301 ... show more 2400:8901::2000:6cff:fef5:b452 - - [30/Jul/2026:12:41:44 -0500] "GET /sftp-config.json HTTP/2.0" 301 249 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 2400:8901::2000:6cff:fef5:b452 - - [30/Jul/2026:12:41:44 -0500] "GET /sftp-config.json HTTP/2.0" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 2400:8901::2000:6cff:fef5:b452 - - [30/Jul/2026:12:41:49 -0500] "GET /.sftp-config.json HTTP/2.0" 301 250 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Brute-Force Web App Attack
🇩🇪 evilrave	2026-07-30 01:30:43 (2 months ago)	2400:8901::2000:6cff:fef5:b452 - - [30/Jul/2026:01:30:40 +0000] "GET /sftp-config.json HTTP/1.1" 308 ... show more 2400:8901::2000:6cff:fef5:b452 - - [30/Jul/2026:01:30:40 +0000] "GET /sftp-config.json HTTP/1.1" 308 164 Host="[REDACTED_HOSTNAME].dev" SNI="-" 2400:8901::2000:6cff:fef5:b452 - - [30/Jul/2026:01:30:41 +0000] "GET /.vscode/sftp.json HTTP/1.1" 308 164 Host="[REDACTED_HOSTNAME].dev" SNI="-" 2400:8901::2000:6cff:fef5:b452 - - [30/Jul/2026:01:30:43 +0000] "GET /.vscode/ftp-config.json HTTP/1.1" 308 164 Host="[REDACTED_HOSTNAME].dev" SNI="-" ... show less	Bad Web Bot
🇧🇪 cmbplf	2026-07-29 10:38:31 (2 months ago)	170 requests with url.path config.json 123 requests with url.path ftp-sync.json	Brute-Force Bad Web Bot
🇩🇪 4server	2026-07-29 01:22:17 (2 months ago)	[WedJul2903:22:13.0136432026][security2:error][pid898778:tid898881][client2400:8901::2000:6cff:fef5: ... show more [WedJul2903:22:13.0136432026][security2:error][pid898778:tid898881][client2400:8901::2000:6cff:fef5:b452:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"enricoalbertini.com\"][uri\"/sftp-config.json\"][unique_id\"amlVxclzrIyqx7AidlwoCwAAAQU\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-07-28 04:19:55 (2 months ago)	[TueJul2806:19:51.3625322026][security2:error][pid3518060:tid3518236][client2400:8901::2000:6cff:fef ... show more [TueJul2806:19:51.3625322026][security2:error][pid3518060:tid3518236][client2400:8901::2000:6cff:fef5:b452:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"edomustech.ch\"][uri\"/sftp-config.json\"][unique_id\"amgt52DrlNdBLesJuPg0QwAAAAc\"] show less	Hacking Web App Attack
🇩🇪 pltcldvlpr	2026-07-28 04:02:03 (2 months ago)	CMS/framework probe: 2400:8901::2000:6cff:fef5:b452 - - [28/Jul/2026:06:02:03 +0200] "GET /.vscode/s ... show more CMS/framework probe: 2400:8901::2000:6cff:fef5:b452 - - [28/Jul/2026:06:02:03 +0200] "GET /.vscode/sftp.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" asn=63949 org="Akamai Technologies, Inc." country=SG ... show less	Web App Attack
🇫🇷 ELYAZ	2026-07-28 02:16:08 (2 months ago)	(y3) Failed access -byebye- from 2400:8901::2000:6cff:fef5:b452 (Unknown): (CF_ENABLE)	Hacking
🇪🇸 alferez	2026-07-27 09:55:36 (2 months ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 07:00:39 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:6cff:fef5:b452 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2400:8901::2000:6cff:fef5:b452 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:00:29.181272 2026] [security2:error] [pid 3009886:tid 3009886] [client 2400:8901::2000:6cff:fef5:b452:65493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "englishmagic.us"] [uri "/sftp-config.json"] [unique_id "amcCDf-2SwecgXSkWQPzvwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-27 06:13:50 (2 months ago)	[MonJul2708:13:47.9990622026][security2:error][pid2588433:tid2588476][client2400:8901::2000:6cff:fef ... show more [MonJul2708:13:47.9990622026][security2:error][pid2588433:tid2588476][client2400:8901::2000:6cff:fef5:b452:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"elyon2.ch\"][uri\"/sftp-config.json\"][unique_id\"amb3GxQa7a5w4LwU0p4TNgAAAEM\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 03:39:40 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:6cff:fef5:b452 (Unknown): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 2400:8901::2000:6cff:fef5:b452 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 23:39:31.944214 2026] [security2:error] [pid 3637485:tid 3637485] [client 2400:8901::2000:6cff:fef5:b452:58608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forerunnersjazz.org"] [uri "/sftp-config.json"] [unique_id "ambS83l2fm-N2asu6Kc5xwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hugopvigo	2026-07-26 21:10:12 (2 months ago)	"2026-07-26 21:10:12+00:00 2400:8901::2000:6cff:fef5:b452 IP con score alto (86) detectada en el log ... show more "2026-07-26 21:10:12+00:00 2400:8901::2000:6cff:fef5:b452 IP con score alto (86) detectada en el log." show less	Brute-Force SSH

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:5:3586:8001

🇨🇴 190.60.55.86

🇸🇬 168.144.139.240

🇲🇦 41.143.151.241

🇧🇷 205.210.31.227

🇨🇳 106.12.127.112

🇳🇱 77.239.124.201

🇺🇸 71.6.235.4

🇲🇾 49.124.151.63

🇲🇲 37.111.53.110

🇺🇸 34.205.18.102

🇨🇳 27.24.141.161

🇦🇺 20.193.50.139

🇲🇽 189.143.66.6

🇺🇸 67.215.246.69

🇷🇺 178.178.222.59

🇺🇸 142.93.49.93

🇩🇪 139.59.148.132

🇹🇼 128.14.227.89

🇮🇩 124.40.252.3