JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a09:bac5:3989:16dc::247:6a

2a09:bac5:3989:16dc::247:6a was found in our database!

This IP was reported 10 times. Confidence of Abuse is 17%: ?

17%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Cloudflare London, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a09:bac5:3989:16dc::247:6a

Whois 2a09:bac5:3989:16dc::247:6a

IP Abuse Reports for 2a09:bac5:3989:16dc::247:6a:

This IP address has been reported a total of 10 times from 3 distinct sources. 2a09:bac5:3989:16dc::247:6a was first reported on June 3rd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-06-03 20:24:49 (2 weeks ago)	CMS/framework probe: 2a09:bac5:3989:16dc::247:6a - - [03/Jun/2026:22:24:48 +0200] "GET /.vscode/sftp ... show more CMS/framework probe: 2a09:bac5:3989:16dc::247:6a - - [03/Jun/2026:22:24:48 +0200] "GET /.vscode/sftp.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" asn=13335 org="Cloudflare, Inc." country=HK ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 20:14:29 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 16:14:25.585753 2026] [security2:error] [pid 20607:tid 20607] [client 2a09:bac5:3989:16dc::247:6a:65310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adamscott.us"] [uri "/sftp-config.json"] [unique_id "aiCLIRj-X2reO_TUCuxcCgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 18:01:50 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:01:46.547489 2026] [security2:error] [pid 9941:tid 9941] [client 2a09:bac5:3989:16dc::247:6a:33338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yacht-register-san-marino.com"] [uri "/sftp-config.json"] [unique_id "aiBsCpv22O93IHNS4FGIlQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 15:03:35 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 11:03:28.435395 2026] [security2:error] [pid 31241:tid 31241] [client 2a09:bac5:3989:16dc::247:6a:58588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ageiron.org"] [uri "/sftp-config.json"] [unique_id "aiBCQF9XSye3MbnmrwDGPgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 11:52:19 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:52:12.541162 2026] [security2:error] [pid 15355:tid 15515] [client 2a09:bac5:3989:16dc::247:6a:35414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ayubhamdardfoundation.org"] [uri "/sftp-config.json"] [unique_id "aiAVbGhXiueB7FeUcENh7gAAANQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-03 11:30:04 (3 weeks ago)	Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 11:16:38 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:16:34.690459 2026] [security2:error] [pid 15953:tid 15953] [client 2a09:bac5:3989:16dc::247:6a:60388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xtrl.com"] [uri "/sftp-config.json"] [unique_id "aiANEm9fii4KEyi051X4egAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 05:49:45 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:49:41.756918 2026] [security2:error] [pid 28298:tid 28298] [client 2a09:bac5:3989:16dc::247:6a:27396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arapi.org"] [uri "/sftp-config.json"] [unique_id "ah_AdWskoitxQC-1JBu1BAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 02:44:40 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:44:34.911538 2026] [security2:error] [pid 5798:tid 5798] [client 2a09:bac5:3989:16dc::247:6a:31876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkan.us"] [uri "/sftp-config.json"] [unique_id "ah-VEvJL_bcdNp3nFo9UOwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 02:11:52 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:3989:16dc::247:6a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:11:49.321166 2026] [security2:error] [pid 12372:tid 12372] [client 2a09:bac5:3989:16dc::247:6a:18626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkdull.org"] [uri "/sftp-config.json"] [unique_id "ah-NZaqbq1rKEzXiso-mqQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.211.142

🇵🇰 223.123.38.32

🇲🇳 203.23.199.88

🇫🇷 85.217.140.35

🇩🇪 85.215.249.162

🇨🇦 82.24.182.100

🇺🇸 66.132.186.160

🇨🇦 20.63.8.12

🇸🇬 114.119.157.84

🇺🇸 103.120.205.119

🇩🇪 64.89.163.82

🇲🇾 47.254.192.137

🇳🇱 45.148.10.141

🇺🇸 20.118.209.70

🇯🇵 20.78.176.209

🇬🇧 193.163.125.150

🇳🇱 176.65.149.201

🇺🇸 151.241.122.108

🇯🇵 147.45.220.143

🇺🇸 109.105.211.5