JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a09:bac1:7680:1048::16b:63

2a09:bac1:7680:1048::16b:63 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 3%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Cloudflare London, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a09:bac1:7680:1048::16b:63

Whois 2a09:bac1:7680:1048::16b:63

IP Abuse Reports for 2a09:bac1:7680:1048::16b:63:

This IP address has been reported a total of 22 times from 1 distinct source. 2a09:bac1:7680:1048::16b:63 was first reported on May 29th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-14 10:28:06 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 06:28:02.005674 2026] [security2:error] [pid 16421:tid 16421] [client 2a09:bac1:7680:1048::16b:63:39502] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|guardmagic.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "guardmagic.com"] [uri "/"] [unique_id "ai6CMiALVDIX5xtBwQ_XBgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 06:37:31 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:37:23.670256 2026] [security2:error] [pid 12408:tid 12408] [client 2a09:bac1:7680:1048::16b:63:65188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|davidnevue.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davidnevue.com"] [uri "/"] [unique_id "ai5MI98Yd94wKuo62YnzKgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 02:10:52 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 22:10:43.984330 2026] [security2:error] [pid 3231:tid 3231] [client 2a09:bac1:7680:1048::16b:63:22778] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|wmionline.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wmionline.org"] [uri "/"] [unique_id "ai4No2_MhkOF1CmYHwylQAAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 12:59:36 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:59:32.435008 2026] [security2:error] [pid 6601:tid 6601] [client 2a09:bac1:7680:1048::16b:63:60964] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|z-mgmt.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "z-mgmt.com"] [uri "/"] [unique_id "ai1UNIhLYAEiWh_3idIDyQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 12:40:11 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:40:05.589027 2026] [security2:error] [pid 21793:tid 21793] [client 2a09:bac1:7680:1048::16b:63:33058] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cchockeyhistory.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cchockeyhistory.org"] [uri "/"] [unique_id "ai1PpQB9u8go3XgfffY1AAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 12:10:09 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:10:03.924416 2026] [security2:error] [pid 10905:tid 10905] [client 2a09:bac1:7680:1048::16b:63:11346] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|travelswithfriends.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "travelswithfriends.com"] [uri "/"] [unique_id "ai1Im8vGSd5UxrGd70iTfAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 23:58:57 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 19:58:52.129625 2026] [security2:error] [pid 30026:tid 30026] [client 2a09:bac1:7680:1048::16b:63:22690] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|globaldentalservices.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "globaldentalservices.com"] [uri "/"] [unique_id "aiydPGnDXz2GjyKNh6l9HwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 20:59:25 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 16:59:18.711607 2026] [security2:error] [pid 18071:tid 18071] [client 2a09:bac1:7680:1048::16b:63:9202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.majesticsolutions.co\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.majesticsolutions.co"] [uri "/"] [unique_id "aixzJngLmhOAnIBMboPHpgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 08:29:30 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:29:25.837263 2026] [security2:error] [pid 4195:tid 4195] [client 2a09:bac1:7680:1048::16b:63:28056] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|franzexpress.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "franzexpress.com"] [uri "/"] [unique_id "aivDZQQXjrOFn4keP75I1wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 05:25:10 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 01:25:02.667755 2026] [security2:error] [pid 23566:tid 23566] [client 2a09:bac1:7680:1048::16b:63:27602] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|whiteblackbird.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "whiteblackbird.com"] [uri "/"] [unique_id "aiuYLml4S1AB2gQs2bY0qQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 17:16:27 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 13:16:22.231715 2026] [security2:error] [pid 21256:tid 21256] [client 2a09:bac1:7680:1048::16b:63:50952] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|whitmarshinc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "whitmarshinc.com"] [uri "/"] [unique_id "airtZp5m38FVk-TZPVlIUAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 05:59:09 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 01:59:00.920905 2026] [security2:error] [pid 8227:tid 8227] [client 2a09:bac1:7680:1048::16b:63:27954] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|littlehornengineering.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "littlehornengineering.com"] [uri "/"] [unique_id "aipOpONpWGcNWUtwjxRg-gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 23:33:56 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 19:33:52.100157 2026] [security2:error] [pid 12175:tid 12175] [client 2a09:bac1:7680:1048::16b:63:58306] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|hawleyrentals.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hawleyrentals.com"] [uri "/"] [unique_id "ain0YENXXhWqyTKeqYI_HAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 22:32:28 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 18:32:23.519160 2026] [security2:error] [pid 19493:tid 19493] [client 2a09:bac1:7680:1048::16b:63:14282] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|anbruskitchens.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "anbruskitchens.com"] [uri "/"] [unique_id "ainl9x22Ou_QVpf0YjsBhgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 21:44:00 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210350) triggered by 2a09:bac1:7680:1048::16b:63 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 17:43:54.021134 2026] [security2:error] [pid 17184:tid 17211] [client 2a09:bac1:7680:1048::16b:63:34170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|windowtailors.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windowtailors.com"] [uri "/"] [unique_id "ainamiWJ7j6ZxChgUdRAGAAAARA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.227.203.59

🇵🇱 212.127.90.124

🇪🇨 181.188.237.213

🇺🇸 147.185.132.67

🇫🇷 144.91.72.102

🇮🇳 115.96.121.29

🇺🇸 66.132.195.37

🇺🇸 64.62.197.153

🇨🇳 223.221.38.226

🇨🇦 198.50.239.95

🇧🇴 190.129.122.185

🇳🇱 185.93.89.43

🇧🇷 177.128.224.122

🇺🇸 172.178.16.179

🇵🇪 161.132.88.202

🇻🇳 103.109.30.23

🇷🇴 92.118.39.77

🇺🇸 52.168.141.47

🇪🇸 200.234.227.140

🇨🇴 181.129.31.42