JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2605:6400:10:984:41e7:4ad6:a11e:cdcc

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

96 reports

19 reporters · latest 2 months ago

ISP	FranTech Solutions
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Domain Name	frantech.ca
Country	🇺🇸 United States of America
City	New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2605:6400:10:984:41e7:4ad6:a11e:cdcc has been reported 96 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2605:6400:10:984:41e7:4ad6:a11e:cdcc

Export CSV

This IP address has been reported a total of 96 times from 19 distinct sources. 2605:6400:10:984:41e7:4ad6:a11e:cdcc was first reported on May 10th 2023, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-17 06:03:43 (2 months ago)	Blocked by UFW (TCP on 47098) Source port: 9100 Packet length: 1460 This report (for 2605:6400:0010 ... show more Blocked by UFW (TCP on 47098) Source port: 9100 Packet length: 1460 This report (for 2605:6400:0010:0984:41e7:4ad6:a11e:cdcc) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-13 04:57:11 (2 months ago)	Blocked by UFW (TCP on 40876) Source port: 9000 Packet length: 2290 This report (for 2605:6400:0010 ... show more Blocked by UFW (TCP on 40876) Source port: 9000 Packet length: 2290 This report (for 2605:6400:0010:0984:41e7:4ad6:a11e:cdcc) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-08 17:58:08 (2 months ago)	Blocked by UFW (TCP on 54018) Source port: 9000 Packet length: 2290 This report (for 2605:6400:0010 ... show more Blocked by UFW (TCP on 54018) Source port: 9000 Packet length: 2290 This report (for 2605:6400:0010:0984:41e7:4ad6:a11e:cdcc) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-10 19:58:09 (3 months ago)	Blocked by UFW (TCP on 48534) Source port: 9000 Packet length: 96 This report (for 2605:6400:0010:0 ... show more Blocked by UFW (TCP on 48534) Source port: 9000 Packet length: 96 This report (for 2605:6400:0010:0984:41e7:4ad6:a11e:cdcc) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-16 21:09:54 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNe ... show more (mod_security) mod_security (id:210492) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNewTor7.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 17:09:49.947058 2026] [security2:error] [pid 30539:tid 30539] [client 2605:6400:10:984:41e7:4ad6:a11e:cdcc:44764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.newfedco.com"] [uri "/.git/config"] [unique_id "ajG7nfw8tCLzlI5qX8ntbwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-16 03:15:19 (4 months ago)	Blocked by UFW (TCP on 8333) Source port: 55422 Packet length: 80 This report (for 2605:6400:0010:0 ... show more Blocked by UFW (TCP on 8333) Source port: 55422 Packet length: 80 This report (for 2605:6400:0010:0984:41e7:4ad6:a11e:cdcc) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-12 08:20:17 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNe ... show more (mod_security) mod_security (id:210492) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNewTor7.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:20:09.800322 2026] [security2:error] [pid 9099:tid 9109] [client 2605:6400:10:984:41e7:4ad6:a11e:cdcc:24346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.triestemagica.org"] [uri "/.git/config"] [unique_id "aivBOWb658FxakY73c-jGQAAAQg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 10:57:01 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNe ... show more (mod_security) mod_security (id:210492) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNewTor7.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 06:56:53.931747 2026] [security2:error] [pid 13682:tid 13682] [client 2605:6400:10:984:41e7:4ad6:a11e:cdcc:52312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.rockwaychiropractic.com"] [uri "/.git/config"] [unique_id "aiKrdcc06_LTmGP9odLZBwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-08 14:13:00 (5 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:02:21 (5 months ago)	2026-04-26 08:00:31,057 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:10:984:41e7:4ad6 ... show more 2026-04-26 08:00:31,057 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:10:984:41e7:4ad6:a11e:cdcc 2026-04-26 12:01:27,753 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:10:984:41e7:4ad6:a11e:cdcc 2026-04-26 18:01:25,531 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:10:984:41e7:4ad6:a11e:cdcc 2026-04-26 21:01:22,705 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:10:984:41e7:4ad6:a11e:cdcc 2026-04-27 00:02:19,698 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:10:984:41e7:4ad6:a11e:cdcc show less	Brute-Force
🇮🇹 VHosting	2026-03-26 20:36:19 (6 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 Hobby Bob	2026-02-12 06:14:00 (8 months ago)	2026-02-12T06:14:00.432122+00:00 server dovecot: pop3-login: Disconnected: Connection closed (no aut ... show more 2026-02-12T06:14:00.432122+00:00 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 4 secs): user=, rip=2605:6400:10:984:41e7:4ad6:a11e:cdcc, lip=X.X.X.X session= show less	Port Scan Hacking
Anonymous	2026-01-09 12:10:06 (9 months ago)	Detected Hacking, SQL Injection or general Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-01-04 12:26:01 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNe ... show more (mod_security) mod_security (id:210730) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNewTor7.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 07:25:56.306668 2026] [security2:error] [pid 3240770:tid 3240770] [client 2605:6400:10:984:41e7:4ad6:a11e:cdcc:48880] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|speedysremodeling.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "speedysremodeling.com"] [uri "/eedysremodeling_com.sql"] [unique_id "aVpcVCcpdXHujL6I9EQyxgAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-02 15:58:35 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNe ... show more (mod_security) mod_security (id:210730) triggered by 2605:6400:10:984:41e7:4ad6:a11e:cdcc (NewYorkNewTor7.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 10:58:28.262930 2026] [security2:error] [pid 14845:tid 14845] [client 2605:6400:10:984:41e7:4ad6:a11e:cdcc:30696] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bigislandhawaiicoffee.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bigislandhawaiicoffee.com"] [uri "/weekly.sql"] [unique_id "aVfrJFpjntFFPh52IfjXrwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2400:cb00:1041:1000:f42c:f546:6cce:7170

🇫🇷 185.194.178.92

🇧🇬 79.124.49.234

🇺🇸 74.235.81.92

🇺🇸 66.132.172.115

🇷🇴 2.57.122.208

🇩🇪 2400:cb00:1041:1000:cf86:d51f:2fd4:8995

🇩🇪 2400:cb00:1041:1000:435b:1413:5429:3c6f

🇭🇷 172.216.15.92

🇩🇪 172.70.250.67

🇩🇪 172.70.250.66

🇺🇸 161.35.116.146

🇺🇸 147.185.132.168

🇨🇳 123.180.188.162

🇨🇳 114.104.131.59

🇮🇱 95.35.26.164

🇺🇸 64.227.16.130

🇨🇳 61.179.24.55

🇳🇱 45.148.10.5

🇸🇬 43.159.62.129