JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:4400:0:827:d376:9f52:e5be

2a04:4e40:4400:0:827:d376:9f52:e5be was found in our database!

This IP was reported 20 times. Confidence of Abuse is 39%: ?

39%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:4400:0:827:d376:9f52:e5be

Whois 2a04:4e40:4400:0:827:d376:9f52:e5be

IP Abuse Reports for 2a04:4e40:4400:0:827:d376:9f52:e5be:

This IP address has been reported a total of 20 times from 6 distinct sources. 2a04:4e40:4400:0:827:d376:9f52:e5be was first reported on July 2nd 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 07:20:39 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 03:20:34.834245 2026] [security2:error] [pid 21954:tid 21954] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:25674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.infinitynull.net"] [uri "/.git/HEAD"] [unique_id "ak36QgxPTh-YhLdmDYgfsQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 04:56:18 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 00:56:12.588430 2026] [security2:error] [pid 30869:tid 30869] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:8206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.scottwithers.net"] [uri "/.git/config"] [unique_id "ak3YbL1dXLnpaJ7Y8fCPZgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 03:51:03 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 23:50:55.899429 2026] [security2:error] [pid 5800:tid 5800] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:36354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bizzmail.net"] [uri "/.git/config"] [unique_id "ak3JH2zCyHne3Lj9ugQc3wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 11:16:46 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 07:16:41.927706 2026] [security2:error] [pid 10085:tid 10108] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:20372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andestravel.net"] [uri "/.git/config"] [unique_id "akzgGUKjby1x8L7etkk7dgAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 07:17:04 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 03:16:59.382323 2026] [security2:error] [pid 5784:tid 5784] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:33920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.xn--lyngr-yua.net"] [uri "/.git/HEAD"] [unique_id "akyn62sue3TbUCa0dx-7jwAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 22:14:36 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 18:14:32.674531 2026] [security2:error] [pid 7176:tid 7176] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:35966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.techsunlimited.net"] [uri "/.git/HEAD"] [unique_id "akwoyFydzV0xCUYvLH9t2QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 21:40:46 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:40:39.612382 2026] [security2:error] [pid 30118:tid 30118] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:16802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thommesen.net"] [uri "/.git/HEAD"] [unique_id "akwg177CvLaryCV61ZmlawAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:41 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇫🇷 pm33	2026-07-04 19:03:30 (3 days ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇵🇱 miriks	2026-07-03 06:58:47 (5 days ago)	Automated scan detected: GET /.git/config — UA: git/2.39.2	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 05:04:21 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 01:04:17.925274 2026] [security2:error] [pid 29990:tid 29990] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:33218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cbrhualpen.cl"] [uri "/.git/config"] [unique_id "akdC0brEpX7En705L_spkQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-07-02 23:11:38 (5 days ago)	(y3) Failed access -byebye- from 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): (CF_ENABLE)	Hacking
🇧🇪 boxed-it	2026-07-02 09:33:15 (6 days ago)	GET /.git/HEAD (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 08:10:39 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 04:10:32.885019 2026] [security2:error] [pid 12683:tid 12683] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:19866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whiterhinomusic.net"] [uri "/.git/HEAD"] [unique_id "akYc-GljkZk8ASs7j3fR_QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 06:32:44 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:827:d376:9f52:e5be (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 02:32:39.188517 2026] [security2:error] [pid 23501:tid 23501] [client 2a04:4e40:4400:0:827:d376:9f52:e5be:9634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prcomputersolutions.com.anthonyanimalclinic.net"] [uri "/.git/config"] [unique_id "akYGB_VHHrgvzMmU5AlWbAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400e:c17::124

🇯🇵 172.237.27.147

🇻🇳 171.231.197.235

🇸🇬 101.47.25.24

🇨🇳 27.39.128.169

🇰🇷 20.200.213.229

🇯🇵 20.78.169.169

🇪🇹 196.191.142.67

🇳🇱 195.178.110.228

🇵🇱 195.78.67.36

🇮🇩 163.7.6.41

🇷🇺 83.246.133.16

🇺🇸 82.22.211.226

🇺🇸 66.132.172.194

🇺🇸 65.49.20.112

🇹🇼 59.126.16.66

🇨🇳 58.18.80.18

🇰🇪 41.60.235.26

🇸🇬 20.212.16.67

🇧🇷 20.206.88.199