JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2400:cb00:994:1000:a52:e1bb:b468:3f24

Neutral Activity Whitelisted Subnet IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

21 reports

6 reporters · latest 3 days ago

2400:cb00:994:1000:a52:e1bb:b468:3f24 is an IP address from within our whitelist belonging to the subnet 2400:cb00::/32, which we identify as "Cloudflare Reverse Proxy".

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2400:cb00:994:1000:a52:e1bb:b468:3f24

Export CSV

This IP address has been reported a total of 21 times from 6 distinct sources. 2400:cb00:994:1000:a52:e1bb:b468:3f24 was first reported on March 31st 2025, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: United States of America with 16 reports; Germany with 2 reports. The most common categories in these recent reports were: Web App Attack 18 times; Brute-Force 17 times; Bad Web Bot 17 times; Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-01 10:59:33 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 06:59:26.129701 2026] [security2:error] [pid 16704:tid 16704] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:9402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fluff3.instagenii.com"] [uri "/.env.backup"] [unique_id "ar49DlUZe4EC6VGPanrV4wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-01 08:43:43 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 04:43:36.191069 2026] [security2:error] [pid 28336:tid 28336] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:10212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idetailingcreatives.com"] [uri "/.git/HEAD"] [unique_id "ar4dOOg2dwpsI0snsajysgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-01 02:45:27 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 22:45:22.433384 2026] [security2:error] [pid 28479:tid 28479] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:9325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centuryabsinthe.com"] [uri "/.git/HEAD"] [unique_id "ar3JQuOGtOXhzwiXqpMUWwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-01 01:08:42 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 21:08:35.325986 2026] [security2:error] [pid 13552:tid 13552] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:12909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.majesticsolutions.co"] [uri "/.git/config"] [unique_id "ar2yk_EM3CU1HtTtlqDXAwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-30 08:33:16 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 04:33:09.507085 2026] [security2:error] [pid 19051:tid 19051] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:14174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joepaladino.com"] [uri "/.git/config"] [unique_id "arzJRZ_rNvAk2Rw_IyeIagAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-30 01:56:55 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:56:48.643329 2026] [security2:error] [pid 31327:tid 31327] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:12009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easy2surf.com"] [uri "/.env.backup"] [unique_id "arxsYMXgLnuB1FBHXnaQYAAAADM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-30 00:02:48 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:02:44.226995 2026] [security2:error] [pid 8577:tid 8577] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:9242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaire-construction-4-0.com"] [uri "/.git/config"] [unique_id "arxRpNVH1fwjctwwReD0ywAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-29 16:18:30 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 12:18:25.287525 2026] [security2:error] [pid 11216:tid 11216] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:11264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amybeam.info"] [uri "/wp-config.php"] [unique_id "arvk0dGM_YfWOZWTpMBJfwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-29 13:27:12 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 09:27:08.418679 2026] [security2:error] [pid 13805:tid 13805] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:10852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "birthplaceofprohockey.org"] [uri "/.git/HEAD"] [unique_id "aru8rJ1ZLM6tNba5ADTgTQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-29 06:29:30 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:29:27.554745 2026] [security2:error] [pid 18717:tid 18723] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:13250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.icecc.com"] [uri "/.env.production"] [unique_id "artaxwXn_sj-GauVX7F7rgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 20:16:08 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:16:02.342396 2026] [security2:error] [pid 6605:tid 6605] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:10243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accordionclub.org"] [uri "/.git/HEAD"] [unique_id "arrLAr5OcIYp-T-jhzTtBAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 19:01:17 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:01:13.128310 2026] [security2:error] [pid 21109:tid 21109] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:11518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "professionalpartyplanner.org"] [uri "/wp-config.php.bak"] [unique_id "arq5eRR3dVx2V_fSpeG_nwAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 18:03:34 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:03:25.353565 2026] [security2:error] [pid 27522:tid 27527] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:12440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joanagauer.com"] [uri "/.env.backup"] [unique_id "arqr7Viiv343ZfSpxXsi3QAAAIM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 17:07:25 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 13:07:22.026041 2026] [security2:error] [pid 15637:tid 15637] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:11109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hendersonhomes.com"] [uri "/.git/HEAD"] [unique_id "arqeym-gKxBVZF3y6K4i5AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 12:16:33 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown) ... show more (mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:a52:e1bb:b468:3f24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 08:16:26.844077 2026] [security2:error] [pid 32447:tid 32447] [client 2400:cb00:994:1000:a52:e1bb:b468:3f24:13562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brbcash.com"] [uri "/.env.local"] [unique_id "arpamrZuU--rj_p7LyYw9QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.117.106.119

🇮🇷 89.45.230.130

🇺🇸 66.132.172.100

🇺🇸 65.49.1.232

🇴🇲 37.41.251.180

🇵🇰 223.123.92.102

🇮🇩 222.124.177.148

🇨🇦 216.26.242.198

🇸🇪 178.255.112.115

🇫🇷 173.249.15.224

🇺🇸 147.185.132.8

🇺🇸 107.172.71.177

🇸🇾 89.43.134.42

🇬🇧 89.37.172.158

🇳🇱 77.239.124.121

🇩🇪 69.5.169.248

🇺🇸 64.62.156.117

🇺🇸 64.62.156.94

🇸🇬 47.128.120.207

🇵🇱 45.158.111.22