JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:4400:0:860:cc7c:92cd:c59c

2a04:4e40:4400:0:860:cc7c:92cd:c59c was found in our database!

This IP was reported 15 times. Confidence of Abuse is 39%: ?

39%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:4400:0:860:cc7c:92cd:c59c

Whois 2a04:4e40:4400:0:860:cc7c:92cd:c59c

IP Abuse Reports for 2a04:4e40:4400:0:860:cc7c:92cd:c59c:

This IP address has been reported a total of 15 times from 6 distinct sources. 2a04:4e40:4400:0:860:cc7c:92cd:c59c was first reported on July 2nd 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-06 22:15:28 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 18:15:23.358138 2026] [security2:error] [pid 4080:tid 4080] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:29512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.churchlets.net"] [uri "/.git/config"] [unique_id "akwo-x808zPUMUL7LBXSBQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 21:50:00 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:49:55.894410 2026] [security2:error] [pid 6467:tid 6467] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:2564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fingercult.kmp.net"] [uri "/.git/config"] [unique_id "akwjAyyeq-HiD1JW3sARXQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-06 03:55:10 (20 hours ago)	2a04:4e40:4400:0:860:cc7c:92cd:c59c - - [06/Jul/2026:11:55:09 +0800] "GET /.git/HEAD HTTP/1.1" 404 1 ... show more 2a04:4e40:4400:0:860:cc7c:92cd:c59c - - [06/Jul/2026:11:55:09 +0800] "GET /.git/HEAD HTTP/1.1" 404 196 "-" "git/2.39.2" ... show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:38 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-03 20:39:13 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:39:09.450502 2026] [security2:error] [pid 9356:tid 9356] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:27606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.noviasaltovacio.com.mx"] [uri "/.git/HEAD"] [unique_id "akgd7ZsX47pmoszihjK0OAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 14:15:21 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 10:15:17.338868 2026] [security2:error] [pid 20774:tid 20774] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:15956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alkymera.es"] [uri "/.git/config"] [unique_id "akfD9XfwFUv6obaIPAVJoQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-07-03 07:03:43 (3 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇵🇱 miriks	2026-07-03 06:59:07 (3 days ago)	Automated scan detected: GET /.git/config — UA: git/2.39.2	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 05:38:21 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 01:38:15.548291 2026] [security2:error] [pid 14553:tid 14553] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:17056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "obramaq.cl"] [uri "/.git/HEAD"] [unique_id "akdKx6xKgdFGClNJnlSKlQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 02:28:04 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:27:56.895817 2026] [security2:error] [pid 9024:tid 9024] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:54768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "speedgo.mx.imerka.com.mx"] [uri "/.git/HEAD"] [unique_id "akceLOsLwvuRczzbhd4h1QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 20:37:58 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:37:51.745658 2026] [security2:error] [pid 19591:tid 19591] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:38286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bpcompany.net"] [uri "/.git/config"] [unique_id "akbMH_1-6Qo6yOXvFnDWWQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 boxed-it	2026-07-02 09:32:29 (4 days ago)	GET /.git/HEAD (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 05:01:25 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:01:21.390355 2026] [security2:error] [pid 5897:tid 5897] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:50696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ahsigns.com"] [uri "/.git/HEAD"] [unique_id "akXwoV7mGndC7PGxh32cAQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:54:02 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:53:58.759563 2026] [security2:error] [pid 2330:tid 2330] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:19578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.marcelacalvet.com"] [uri "/.git/config"] [unique_id "akXg1thP9VtJrCqJVZYzewAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:38:54 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:860:cc7c:92cd:c59c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:38:51.732632 2026] [security2:error] [pid 25051:tid 25051] [client 2a04:4e40:4400:0:860:cc7c:92cd:c59c:36244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ironheadsofseo.com"] [uri "/.git/HEAD"] [unique_id "akXdS28RNpskzNS5Rph1lwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.28.73.21

🇺🇸 107.180.88.176

🇺🇸 66.132.186.209

🇳🇱 64.89.162.37

🇺🇸 62.132.18.53

🇳🇱 45.148.10.147

🇧🇷 205.210.31.255

🇧🇷 205.210.31.235

🇩🇪 167.233.195.96

🇮🇩 103.191.14.243

🇳🇬 102.219.153.206

🇳🇬 102.88.137.80

🇩🇪 69.5.169.63

🇮🇩 36.64.131.68

🇨🇳 14.103.48.24

🇫🇷 4.211.84.189

🇹🇭 202.29.223.30

🇺🇸 192.178.115.93

🇮🇳 159.65.148.158

🇺🇸 154.83.197.127