JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2400:cb00:532:1000:3c04:8641:cdc1:df06

Neutral Activity Whitelisted Subnet IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

29 reports

2 reporters · latest 6 hours ago

2400:cb00:532:1000:3c04:8641:cdc1:df06 is on our whitelist as Cloudflare Reverse Proxy via the subnet 2400:cb00::/32.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇫🇷 France
City: Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

29 from 2 distinct reporters

First reported

October 29th 2024

Most recent report

6 hours ago

Last 60 days

Top reporter locations 🇯🇵 Japan 2

Most common categories Port Scan 2

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 S.O.B.A. Dev.	2026-11-08 21:10:58 UTC · (6 hours ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-10-05 00:53:08 UTC · (1 month ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 TPI-Abuse	2026-08-31 19:08:51 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 15:08:46.153425 2026] [security2:error] [pid 17126:tid 17126] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 15:08:46.153425 2026] [security2:error] [pid 17126:tid 17126] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:10358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geriterry.com"] [uri "/.git/HEAD"] [unique_id "apXRPqtpiKJ4aef3KnB2AgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 16:21:40 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 12:21:37.097263 2026] [security2:error] [pid 3401:tid 3401] [ ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 12:21:37.097263 2026] [security2:error] [pid 3401:tid 3401] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:12951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.xirination.com"] [uri "/.git/HEAD"] [unique_id "apMHEYLR-tpyGba8Nik5pAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 01:47:24 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:47:15.533122 2026] [security2:error] [pid 15869:tid 15869] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:47:15.533122 2026] [security2:error] [pid 15869:tid 15869] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:11325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.austintrauma.com"] [uri "/.git/config"] [unique_id "apI6I5hPZ-PcYHSEzuwt4gAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 02:16:04 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 22:15:54.820687 2026] [security2:error] [pid 2728:tid 2728] [ ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 22:15:54.820687 2026] [security2:error] [pid 2728:tid 2728] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:13287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.winders.name"] [uri "/.git/config"] [unique_id "ao-d2sl5oBDFTk4eTUWHlgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 06:09:35 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:09:28.269478 2026] [security2:error] [pid 19041:tid 19041] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:09:28.269478 2026] [security2:error] [pid 19041:tid 19041] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:13926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.waltersnet.com"] [uri "/.git/HEAD"] [unique_id "ao6DGNCC2X7VXG-j9FxemQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 04:55:33 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 00:55:29.739940 2026] [security2:error] [pid 22206:tid 22300] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 00:55:29.739940 2026] [security2:error] [pid 22206:tid 22300] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:11626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gipsongrocerystore.digital4z.com"] [uri "/.git/HEAD"] [unique_id "ao5xwdSREbz8RoJobbAbqwAAAMs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 16:26:27 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:26:19.725702 2026] [security2:error] [pid 12830:tid 12830] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:26:19.725702 2026] [security2:error] [pid 12830:tid 12830] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:10814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.catzpaw.com"] [uri "/.git/HEAD"] [unique_id "ao3CKzFONtEJqmBHfUdykwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 16:02:39 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:02:33.290129 2026] [security2:error] [pid 19203:tid 19203] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:02:33.290129 2026] [security2:error] [pid 19203:tid 19203] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:11758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.stamford.org"] [uri "/.git/config"] [unique_id "ao28mZ85CezGqThXyYHmDAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 15:40:47 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:40:43.086239 2026] [security2:error] [pid 746:tid 746] [cl ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:40:43.086239 2026] [security2:error] [pid 746:tid 746] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:12259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.roigcorporativo.com"] [uri "/.git/config"] [unique_id "ao23ezZFbmruY3d5vxgJxgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 15:16:05 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:15:59.310293 2026] [security2:error] [pid 14969:tid 14969] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:15:59.310293 2026] [security2:error] [pid 14969:tid 14969] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:10004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.outofthebluephotography.com"] [uri "/.git/HEAD"] [unique_id "ao2xr5rAMFwFeXhB6Tj3xQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 14:46:13 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:46:06.286589 2026] [security2:error] [pid 32661:tid 32661] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:46:06.286589 2026] [security2:error] [pid 32661:tid 32661] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:13477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boat-registration-spain.com"] [uri "/.git/HEAD"] [unique_id "ao2qrknceg_P4W2eA6Sg1gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 14:20:08 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:20:01.608078 2026] [security2:error] [pid 18371:tid 18371] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:20:01.608078 2026] [security2:error] [pid 18371:tid 18371] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:13116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.benshermanguitar.com"] [uri "/.git/HEAD"] [unique_id "ao2kkU-2-RmxzNlKQ85L8gAAADQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 11:11:35 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 07:11:28.467211 2026] [security2:error] [pid 22056:tid 22056] ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:532:1000:3c04:8641:cdc1:df06 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 07:11:28.467211 2026] [security2:error] [pid 22056:tid 22056] [client 2400:cb00:532:1000:3c04:8641:cdc1:df06:13978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.infalliblebible.com"] [uri "/.git/config"] [unique_id "ao14YBOqu9EjbLmf5QqtcwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 147.185.132.222

🇺🇸 72.14.178.148

🇩🇪 69.5.169.91

🇸🇬 43.106.111.152

🇫🇷 2a01:cb10:8486:2900:2159:d34f:8cb7:bbbe

🇺🇸 216.25.90.14

🇺🇸 216.25.89.156

🇳🇱 213.209.159.226

🇷🇴 162.158.19.225

🇱🇻 90.139.199.20

🇷🇺 85.249.7.100

🇰🇷 43.131.249.17

🇵🇱 37.209.151.67

🇺🇸 207.90.244.4

🇧🇧 196.3.216.238

🇬🇧 195.96.139.118

🇺🇸 191.101.241.242

🇧🇴 190.129.65.235

🇩🇪 162.158.86.48

🇺🇸 154.29.78.141