JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2605:6400:c2e5:2378:b95b:1638:2452:e2a1

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

2 reports

1 reporter · latest 5 months ago

ISP	FranTech Solutions
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Domain Name	frantech.ca
Country	🇺🇸 United States of America
City	Cheyenne, Wyoming

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2605:6400:c2e5:2378:b95b:1638:2452:e2a1 has been reported 2 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2605:6400:c2e5:2378:b95b:1638:2452:e2a1

Export CSV

This IP address has been reported a total of 2 times from 1 distinct source. 2605:6400:c2e5:2378:b95b:1638:2452:e2a1 was first reported on May 13th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 zthomas	2026-05-13 00:31:04 (5 months ago)	Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ... show more Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Luxembourg, Luxembourg, LU. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack. show less	Brute-Force Web App Attack
🇺🇸 zthomas	2026-05-13 00:31:04 (5 months ago)	M365 password spray attack. Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Luxembour ... show more M365 password spray attack. Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Luxembourg, Luxembourg, LU. 1 failed auth attempt. Azure CLI. show less	Brute-Force Web App Attack

Showing 1 to 2 of 2 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:5:35ac:5001

🇺🇸 185.244.215.12

🇺🇸 185.226.196.19

🇺🇸 149.102.228.43

🇺🇸 75.127.6.2

🇺🇸 64.16.133.84

🇩🇪 213.209.159.208

🇺🇸 162.216.149.43

🇩🇪 109.160.32.116

🇷🇴 86.127.220.220

🇩🇪 69.5.169.56

🇩🇪 69.5.169.5

🇺🇸 66.132.186.139

🇷🇺 62.118.107.125

🇺🇸 47.77.234.70

🇨🇦 45.198.224.233

🇳🇱 45.148.10.141

🇧🇷 34.39.156.196

🇺🇸 2604:a880:400:d1:0:5:35a1:9001

🇳🇱 195.178.110.217