JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

Due to resource limits, we cannot accept bitmasks wider than ffff:ffff:ffff:ffff:: at this time. However, you can track the range using Range Alerts .

2a09:bac5:a53b:32d::51:52

Neutral Activity IPv6 SLAAC Note

Abuse confidence score ?

0% Low Risk

40 reports

12 reporters · latest 3 months ago

ISP	Cloudflare London, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a09:bac5:a53b:32d::51:52 has been reported 40 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 2a09:bac5:a53b:32d::51:52

Export CSV

This IP address has been reported a total of 40 times from 12 distinct sources. 2a09:bac5:a53b:32d::51:52 was first reported on June 4th 2026, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-01 04:34:10 (3 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 LotPhantom	2026-06-18 16:37:46 (3 months ago)	2a09:bac5:a53b:32d::51:52 - - [18/Jun/2026:16:36:46 +0000] "GET /styles-CJBDY7KH.css HTTP/1.1" 200 8 ... show more 2a09:bac5:a53b:32d::51:52 - - [18/Jun/2026:16:36:46 +0000] "GET /styles-CJBDY7KH.css HTTP/1.1" 200 84667 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" "0" ... show less	Web App Attack Bad Web Bot
🇫🇷 Baking333	2026-06-08 13:49:36 (4 months ago)	[redacted] 2a09:bac5:a53b:32d::51:52 - - [08/Jun/2026:14:03:00 +0100] "GET / HTTP/1.1" 200 8812 0/35 ... show more [redacted] 2a09:bac5:a53b:32d::51:52 - - [08/Jun/2026:14:03:00 +0100] "GET / HTTP/1.1" 200 8812 0/351269 "https://[redacted]/.git/config" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" [redacted] 2a09:bac5:a53b:32d::51:52 - - [08/Jun/2026:14:03:00 +0100] "GET / HTTP/1.1" 200 12545 0/237364 "https://[redacted]/.git/HEAD" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-08 13:03:02 (4 months ago)	[redacted] 2a09:bac5:a53b:32d::51:52 - - [08/Jun/2026:14:03:00 +0100] "GET /.git/HEAD HTTP/1.1" 302 ... show more [redacted] 2a09:bac5:a53b:32d::51:52 - - [08/Jun/2026:14:03:00 +0100] "GET /.git/HEAD HTTP/1.1" 302 5293 0/66668 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" [redacted] 2a09:bac5:a53b:32d::51:52 - - [08/Jun/2026:14:03:00 +0100] "GET /.git/config HTTP/1.1" 302 5293 0/65762 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 mashamal	2026-06-08 12:09:50 (4 months ago)	Vulnerability Probe ...	Web App Attack
🇫🇷 Baking333	2026-06-08 00:46:08 (4 months ago)	[redacted] 2a09:bac5:a53b:32d::51:52 - - [08/Jun/2026:01:46:06 +0100] "GET /.git/config HTTP/2.0" 30 ... show more [redacted] 2a09:bac5:a53b:32d::51:52 - - [08/Jun/2026:01:46:06 +0100] "GET /.git/config HTTP/2.0" 301 296 "https://[redacted]/.git/config" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" [redacted] 2a09:bac5:a53b:32d::51:52 - - [08/Jun/2026:01:46:07 +0100] "GET /.git/HEAD HTTP/2.0" 301 224 "https://[redacted]/.git/HEAD" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-07 21:12:28 (4 months ago)	[SunJun0723:12:21.6854622026][security2:error][pid793050:tid793480][client2a09:bac5:a53b:32d::51:52: ... show more [SunJun0723:12:21.6854622026][security2:error][pid793050:tid793480][client2a09:bac5:a53b:32d::51:52:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"aid-web.com\"][uri\"/.git/config\"][unique_id\"aiXetfkeoaXpGpst6_f04wAAAQs\"] show less	Hacking Web App Attack
🇺🇸 apislytics	2026-06-07 13:57:41 (4 months ago)	Automatic hard ban after repeated rate-limit abuse	Brute-Force
Anonymous	2026-06-07 10:10:28 (4 months ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇦🇺 2000cn.com.au	2026-06-07 08:02:41 (4 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-07 06:10:30 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:a53b:32d::51:52 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:a53b:32d::51:52 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 02:10:26.826296 2026] [security2:error] [pid 14927:tid 14927] [client 2a09:bac5:a53b:32d::51:52:22022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "advancedmachininginc.com"] [uri "/.git/config"] [unique_id "aiULUjUpNdmtbUC9LK-IKwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 betternews.app	2026-06-06 06:24:02 (4 months ago)	"a web request contained keyword ".git"; Suspicious URL: /.git/HEAD"	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 22:09:55 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:a53b:32d::51:52 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:a53b:32d::51:52 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 18:09:52.905588 2026] [security2:error] [pid 7823:tid 7823] [client 2a09:bac5:a53b:32d::51:52:60882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jhbookdesign.com"] [uri "/.git/config"] [unique_id "aiNJMJ3vEYgsBJfrq521-QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 19:34:37 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:a53b:32d::51:52 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:a53b:32d::51:52 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 15:34:28.733836 2026] [security2:error] [pid 21415:tid 21485] [client 2a09:bac5:a53b:32d::51:52:28868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeflis.com"] [uri "/.git/config"] [unique_id "aiMkxDAyzF8WBBgrPZrbnQAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 18:59:09 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a09:bac5:a53b:32d::51:52 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2a09:bac5:a53b:32d::51:52 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 14:59:03.569730 2026] [security2:error] [pid 10847:tid 10847] [client 2a09:bac5:a53b:32d::51:52:12912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeanniemorrislaw.com"] [uri "/.git/config"] [unique_id "aiMcd6qaC94SBLEmOUN9KQAAACs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 178.253.31.197

🇯🇵 35.187.210.109

🇺🇸 199.165.159.54

🇩🇪 193.233.75.108

🇪🇨 191.99.82.36

🇬🇧 141.101.99.93

🇧🇬 79.124.58.86

🇺🇸 76.158.43.35

🇸🇳 41.208.147.131

🇳🇱 37.60.141.105

🇳🇱 34.6.1.120

🇺🇸 20.172.68.88

🇺🇸 20.168.122.36

🇨🇳 220.167.233.249

🇬🇧 200.138.46.247

🇺🇸 199.102.44.194

🇦🇷 181.46.185.166

🇪🇨 177.234.233.17

🇺🇸 173.249.252.197

🇸🇬 173.44.34.181