JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2400:cb00:1032:1000:d596:44e1:fd39:395

Neutral Activity Whitelisted Subnet IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

22 reports

5 reporters · latest 1 hour ago

2400:cb00:1032:1000:d596:44e1:fd39:395 is on our whitelist as Cloudflare Reverse Proxy via the subnet 2400:cb00::/32.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇸🇪 Sweden
City: Stockholm, Stockholm

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

22 from 5 distinct reporters

First reported

February 14th 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇯🇵 Japan 2 🇺🇸 United States of America 2

Most common categories Web App Attack 2 Brute-Force 2 Bad Web Bot 2 Port Scan 2

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 S.O.B.A. Dev.	2026-11-07 21:15:16 UTC · (1 hour ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-10-30 08:27:38 UTC · (1 week ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 TPI-Abuse	2026-09-29 22:08:50 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:08:42.703879 2026] [security2:error] [pid 23761:tid 23761] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:08:42.703879 2026] [security2:error] [pid 23761:tid 23761] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:10394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "13waggoners.com"] [uri "/.git/config"] [unique_id "arw26tRTiFlu9W9POCAkPQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-27 04:16:01 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 00:15:55.598627 2026] [security2:error] [pid 7083:tid 7083] [ ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 00:15:55.598627 2026] [security2:error] [pid 7083:tid 7083] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:13580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nomorenicenice.net"] [uri "/.git/config"] [unique_id "ariYe9QJ86YfEETNlQtzpQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 06:28:53 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 02:28:50.296684 2026] [security2:error] [pid 27675:tid 27675] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 02:28:50.296684 2026] [security2:error] [pid 27675:tid 27675] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:10413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.stoughtonpipeandwelding.net"] [uri "/.git/HEAD"] [unique_id "aoVNIl3X7LCsOlJCNz0d0QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 05:48:14 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 01:48:09.078874 2026] [security2:error] [pid 24112:tid 24112] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 01:48:09.078874 2026] [security2:error] [pid 24112:tid 24112] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:13512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nlc-calumet.org.dhsgrad.net"] [uri "/.git/HEAD"] [unique_id "aoVDmbmYPv55a-RiyVFA_AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 05:07:24 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 01:07:17.114327 2026] [security2:error] [pid 9878:tid 9878] [ ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 01:07:17.114327 2026] [security2:error] [pid 9878:tid 9878] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:9971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tactara.net"] [uri "/.git/HEAD"] [unique_id "aoU6BaV60N4cfUjDn4M_8QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 04:21:42 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 00:21:37.913446 2026] [security2:error] [pid 13549:tid 13549] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 00:21:37.913446 2026] [security2:error] [pid 13549:tid 13549] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:12993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.pete-n-sheila.net"] [uri "/.git/HEAD"] [unique_id "aoUvUdZfMG2wyLOS4IoS-QAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 03:50:59 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:50:54.200698 2026] [security2:error] [pid 29927:tid 29927] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:50:54.200698 2026] [security2:error] [pid 29927:tid 29927] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:11424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newschristianview.afjm.net"] [uri "/.git/HEAD"] [unique_id "aoUoHpRR3rmldtdZgIXweQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 03:27:11 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:27:05.722093 2026] [security2:error] [pid 21653:tid 21659] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:27:05.722093 2026] [security2:error] [pid 21653:tid 21659] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:12330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sitetest.coldwave.net"] [uri "/.git/HEAD"] [unique_id "aoUiiVtCr7AcdGV5XtpALgAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 03:00:52 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:00:46.203273 2026] [security2:error] [pid 28907:tid 28907] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:00:46.203273 2026] [security2:error] [pid 28907:tid 28907] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:9751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hayatmotifi.com.kircali.net"] [uri "/.git/HEAD"] [unique_id "aoUcXoEkxcG9VWykAuFFFQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 08:42:07 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:41:59.035923 2026] [security2:error] [pid 30814:tid 30814] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:41:59.035923 2026] [security2:error] [pid 30814:tid 30814] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:11533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.asiaan.net"] [uri "/.git/HEAD"] [unique_id "aoLJV3bYj2c81adhSGqzlwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 00:29:27 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 20:29:23.318982 2026] [security2:error] [pid 31244:tid 31250] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 20:29:23.318982 2026] [security2:error] [pid 31244:tid 31250] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:11660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thebiglies.net"] [uri "/.git/HEAD"] [unique_id "aoJV4_B7poIng_3ymJ7h1gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 23:21:38 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 19:21:32.404923 2026] [security2:error] [pid 1279913:tid 1279 ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 19:21:32.404923 2026] [security2:error] [pid 1279913:tid 1279913] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:9672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.infinitynull.net"] [uri "/.git/HEAD"] [unique_id "aoJF_Hx27leNfy0AeoKalwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 03:22:49 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 23:22:44.598710 2026] [security2:error] [pid 9140:tid 9140] [ ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:d596:44e1:fd39:395 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 23:22:44.598710 2026] [security2:error] [pid 9140:tid 9140] [client 2400:cb00:1032:1000:d596:44e1:fd39:395:12658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.socialenterprise.net"] [uri "/.git/HEAD"] [unique_id "aoEtBIHLd1f-xs3srXOkEgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 198.235.24.171

🇮🇳 182.76.115.214

🇳🇱 142.93.224.178

🇺🇸 135.119.92.2

🇺🇸 104.28.152.187

🇬🇧 86.176.48.207

🇺🇸 52.204.81.148

🇺🇸 47.251.243.208

🇺🇸 47.162.81.35

🇯🇵 8.216.12.140

🇺🇸 143.110.128.178

🇨🇳 115.191.35.22

🇫🇷 88.181.113.113

🇫🇮 80.223.201.173

🇨🇳 61.169.191.60

🇧🇷 2804:7f4:322a:7d9f:2986:ae04:557a:a34

🇬🇧 193.163.125.48

🇺🇸 193.36.224.52

🇹🇭 180.180.242.201

🇨🇦 149.56.31.99