JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a09:bac1:76c0:460::5e:52

2a09:bac1:76c0:460::5e:52 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 65%: ?

65%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Cloudflare London, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a09:bac1:76c0:460::5e:52

Whois 2a09:bac1:76c0:460::5e:52

IP Abuse Reports for 2a09:bac1:76c0:460::5e:52:

This IP address has been reported a total of 18 times from 11 distinct sources. 2a09:bac1:76c0:460::5e:52 was first reported on July 13th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-20 06:50:07 (7 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-20 06:41:03 (7 hours ago)	(mod_security) mod_security (id:949110) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:949110) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 02:40:57.761541 2026] [security2:error] [pid 2672600:tid 2672600] [client 2a09:bac1:76c0:460::5e:52:20806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "tribalgamingtech.com"] [uri "/rclone.conf"] [unique_id "al3C-UWjPtKSLnDEq4z6mQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-19 08:58:17 (1 day ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 08:43:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 04:43:37.885345 2026] [security2:error] [pid 5685:tid 5737] [client 2a09:bac1:76c0:460::5e:52:27556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ccgparquitectos.com"] [uri "/.env"] [unique_id "alyOOREQa4JOjTpA73LSmgAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack
🇰🇷 doll.gl	2026-07-19 08:18:27 (1 day ago)	CrowdSec: Ip 2a09:bac1:76c0:460::5e:52 performed 'crowdsecurity/http-sensitive-files' (5 events over ... show more CrowdSec: Ip 2a09:bac1:76c0:460::5e:52 performed 'crowdsecurity/http-sensitive-files' (5 events over 493.659447ms) at 2026-07-19 08:18:26.584647945 +0000 UTC (scenario: crowdsecurity/http-sensitive-files) show less	Port Scan Web App Attack
🇳🇱 Mangelot Hosting	2026-07-19 08:09:53 (1 day ago)	(modsecurity) srv101 ModSecurity 2a09:bac1:76c0:460::5e:52 (US/United States/-): 10 in the last 3600 ... show more (modsecurity) srv101 ModSecurity 2a09:bac1:76c0:460::5e:52 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-07-15 08:16:36 (5 days ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇳🇱 Site.eu	2026-07-15 08:12:34 (5 days ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 entangled_mongoose	2026-07-15 08:12:12 (5 days ago)	Probed /wp-json.	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-14 21:59:28 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-13. show less	Web App Attack SSH Hacking
🇩🇪 Viveronese	2026-07-14 15:59:34 (5 days ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 15:15:46 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 11:15:39.806169 2026] [security2:error] [pid 15013:tid 15013] [client 2a09:bac1:76c0:460::5e:52:56236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eurobrake.com"] [uri "/.git/config"] [unique_id "alZSm8eLLiohObDKScfY4AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-07-14 13:25:36 (6 days ago)	(mod_security) mod_security (id:949110) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): N in the l ... show more (mod_security) mod_security (id:949110) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 13:24:42 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 09:24:36.658065 2026] [security2:error] [pid 17055:tid 17055] [client 2a09:bac1:76c0:460::5e:52:34796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.13waggoners.com"] [uri "/.env"] [unique_id "alY4lH-ivDLjZHLv7MtDPAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 09:55:07 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:460::5e:52 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 05:55:00.456268 2026] [security2:error] [pid 11088:tid 11090] [client 2a09:bac1:76c0:460::5e:52:16610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.seasonsgreeters.lightsondisplay.com"] [uri "/.env"] [unique_id "alYHdMAaM9c0HLIe-HoedwAAAMA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.255.134.225

🇺🇸 184.105.139.111

🇲🇽 148.230.4.187

🇨🇳 116.181.10.110

🇨🇳 115.203.189.219

🇺🇸 109.105.209.4

🇺🇸 109.105.209.3

🇺🇸 91.230.168.253

🇳🇱 91.92.42.87

🇫🇷 51.159.110.167

🇳🇱 45.148.10.157

🇮🇳 20.193.141.133

🇺🇸 2a09:bac5:9442:3af::5e:7a

🇺🇸 195.184.76.57

🇺🇸 165.22.9.106

🇬🇧 157.245.34.56

🇺🇸 109.105.209.5

🇺🇸 109.105.209.2

🇿🇦 105.28.108.165

🇺🇸 104.153.209.58