IP Report
2a09:bac1:27c0:cc0::31:156
Cloudflare, Inc. · AS13335 · Vannes, France
Score 0 of 100, in the minimal risk band. Bands run 0 to 19 minimal, 20 to 49 low, 50 to 79 medium, 80 to 100 high.
Its risk score of 0/100 is low — nothing in our data suggests this address needs special handling.
Detection signals
Not detected: Tor, VPN, Proxy, Crawler
Summary
2a09:bac1:27c0:cc0::31:156 is a server address in commercial hosting space, not a home or mobile connection. Traffic from it is almost always software rather than a person browsing.
The address is announced by Cloudflare, Inc. (AS13335) and geolocates to Vannes, Brittany, France.
Why this address scores 0
It sits in datacenter address space, where automated traffic vastly outnumbers human visitors.
The datacenter classification adds nothing to the score in this case because the operator is recognised infrastructure — Predax deliberately exempts major CDN and platform networks such as Cloudflare, Google, Akamai and Fastly from the datacenter risk weight. Scoring their addresses as threats would push site owners into blocking the very networks that deliver their own content.
None of that is evidence of wrongdoing on its own, which is why the score stays at 0/100 — these are descriptions of where the address lives, not accusations about what it has done.
Observation history
This address has been looked up through Predax 12 times between May 11, 2026 and September 1, 2026.
Each lookup re-evaluates the address against current feeds, so the classification above reflects its most recent check, not a stale record.
Network & location
- ASN
- AS13335
- Country
- France (FR)
- Provider
- Cloudflare, Inc.
- Region
- Brittany
- CIDR
- 2a09:bac1::/29
- City
- Vannes
- Network type
- hosting
- First seen
- 5/11/2026, 10:50:09 PM
- Last seen
- 9/1/2026, 7:45:27 PM
- Times seen
- 12
Network context
We have observed 4,523 addresses on Cloudflare, Inc. (AS13335); 100% of them carried a threat flag or a notable risk score when last checked.
Almost all of those flags are infrastructure facts rather than threats: every address on a CDN or platform network sits in datacenter space by definition. That is why Predax exempts networks like this one from the datacenter risk weight — a high share here describes what the network is, not a reason for caution.
What to do with this
If you run a site and this address showed up
Traffic from server space is rarely a person on a browser. If this address hit your site, it was most likely a bot, a monitor, or a scripted client.
Unblocking it is only worth doing if you can tie it to a service you actually use — an uptime monitor, a payment webhook, an integration. Otherwise a block costs you nothing.
If you found this address in your logs
In your logs this address is almost certainly automation. Check the user agent and the request pattern before attributing its traffic to a human.
If you operate this address yourself and it is being blocked elsewhere, this datacenter classification is why — hosting IPs start from a lower trust position everywhere.
Loading map...
Detection sources
No risk signals triggered
This IP didn't match any of our VPN, proxy, Tor, datacenter, or crawler detectors.