JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a09:bac5:636b:1173::1bd:114

2a09:bac5:636b:1173::1bd:114 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 64%: ?

64%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Cloudflare London, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a09:bac5:636b:1173::1bd:114

Whois 2a09:bac5:636b:1173::1bd:114

IP Abuse Reports for 2a09:bac5:636b:1173::1bd:114:

This IP address has been reported a total of 60 times from 19 distinct sources. 2a09:bac5:636b:1173::1bd:114 was first reported on June 14th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-06-22 05:13:55 (2 weeks ago)	2 attacks on VC URLs: GET /.git/HEAD HTTP/1.1	Hacking
🇩🇪 4server	2026-06-21 02:09:17 (2 weeks ago)	[SunJun2104:09:11.1438932026][security2:error][pid3743230:tid3743256][client2a09:bac5:636b:1173::1bd ... show more [SunJun2104:09:11.1438932026][security2:error][pid3743230:tid3743256][client2a09:bac5:636b:1173::1bd:114:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.scrspace.com\"][uri\"/.git/HEAD\"][unique_id\"ajdHx9gLbX_PKmzQP6jA9gAAAJc\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-06-21 00:20:11 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-18 23:02:05 (2 weeks ago)	[redacted] 2a09:bac5:636b:1173::1bd:114 - - [19/Jun/2026:00:02:04 +0100] "GET /.git/config HTTP/1.1" ... show more [redacted] 2a09:bac5:636b:1173::1bd:114 - - [19/Jun/2026:00:02:04 +0100] "GET /.git/config HTTP/1.1" 302 5313 0/91549 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" [redacted] 2a09:bac5:636b:1173::1bd:114 - - [19/Jun/2026:00:02:04 +0100] "GET /.git/HEAD HTTP/1.1" 302 5313 0/57477 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-06-18 22:59:22 (2 weeks ago)	Probing for non-installed web apps or current vulnerabilities.	Hacking Web App Attack
🇺🇸 mashamal	2026-06-18 22:28:55 (2 weeks ago)	Vulnerability Probe ...	Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 18:02:27 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:636b:1173::1bd:114 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:636b:1173::1bd:114 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 14:02:22.777167 2026] [security2:error] [pid 24133:tid 24133] [client 2a09:bac5:636b:1173::1bd:114:17224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.akmanoto.com"] [uri "/.git/config"] [unique_id "ajQyrjyh8JaKsDxHVt0GfAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 13:26:50 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:636b:1173::1bd:114 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:636b:1173::1bd:114 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 09:26:46.360385 2026] [security2:error] [pid 20186:tid 20186] [client 2a09:bac5:636b:1173::1bd:114:32272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aim-controls.com"] [uri "/.git/HEAD"] [unique_id "ajPyFvrYKYsp2le8vGU86gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 12:38:53 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:636b:1173::1bd:114 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:636b:1173::1bd:114 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 08:38:50.008063 2026] [security2:error] [pid 644:tid 644] [client 2a09:bac5:636b:1173::1bd:114:16238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aifactoid.com"] [uri "/.git/HEAD"] [unique_id "ajPm2ub1KknCpXle5N0DfgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-06-18 04:12:21 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 big-cloud.nl	2026-06-18 03:45:25 (2 weeks ago)	Try to access /.git/config	Web App Attack
Anonymous	2026-06-18 00:50:59 (2 weeks ago)	2a09:bac5:636b:1173::1bd:114 - - [18/Jun/2026:00:50:58 +0000] "GET /.git/config HTTP/1.1" 404 2754 " ... show more 2a09:bac5:636b:1173::1bd:114 - - [18/Jun/2026:00:50:58 +0000] "GET /.git/config HTTP/1.1" 404 2754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 wordpresshosting.solutions	2026-06-17 23:09:05 (2 weeks ago)	Web app vulnerability scanning detected. Evidence: 2a09:bac5:636b:1173::1bd:114 - - [17/Jun/2026:23: ... show more Web app vulnerability scanning detected. Evidence: 2a09:bac5:636b:1173::1bd:114 - - [17/Jun/2026:23:08:48 +0000] "GET /.git/config HTTP/1.1" 404 47355 "https://[DOMAIN]/.git/config" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 2a09:bac5:636b:1173::1bd:114 - - [17/Jun/2026:23:09:04 +0000] "GET /.git/config HTTP/1.1" 404 47355 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 17:31:36 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:636b:1173::1bd:114 (Unknown): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:636b:1173::1bd:114 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 13:31:30.283214 2026] [security2:error] [pid 23144:tid 23144] [client 2a09:bac5:636b:1173::1bd:114:23652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accomplishedmagazine.com.gemexpressions.com"] [uri "/.git/config"] [unique_id "ajLZ8g-ND8qWrD9rZdjS6QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Kreapptivo	2026-06-17 15:16:45 (3 weeks ago)	[17/Jun/2026:17:16:29 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Macintosh; I ... show more [17/Jun/2026:17:16:29 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇦🇷 186.148.224.83

🇧🇷 177.38.40.201

🇳🇱 160.119.76.106

🇨🇴 138.0.116.142

🇮🇳 122.173.31.98

🇭🇰 103.146.158.173

🇪🇸 91.116.113.24

🇳🇱 91.92.40.237

🇮🇹 84.37.158.190

🇳🇱 91.92.40.176

🇳🇱 91.92.40.12

🇺🇸 73.116.50.53

🇮🇳 60.254.0.157

🇯🇵 20.78.169.169

🇻🇳 14.237.8.129

🇳🇱 4.210.177.128

🇳🇱 195.178.110.228

🇨🇳 183.167.234.212

🇧🇴 181.115.171.179