JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:4400:0:b8d:a54b:488f:75ed

2a04:4e40:4400:0:b8d:a54b:488f:75ed was found in our database!

This IP was reported 18 times. Confidence of Abuse is 44%: ?

44%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:4400:0:b8d:a54b:488f:75ed

Whois 2a04:4e40:4400:0:b8d:a54b:488f:75ed

IP Abuse Reports for 2a04:4e40:4400:0:b8d:a54b:488f:75ed:

This IP address has been reported a total of 18 times from 7 distinct sources. 2a04:4e40:4400:0:b8d:a54b:488f:75ed was first reported on July 2nd 2026, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-07 03:47:52 (9 minutes ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 23:47:47.694659 2026] [security2:error] [pid 672:tid 672] [client 2a04:4e40:4400:0:b8d:a54b:488f:75ed:57086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bacona.net"] [uri "/.git/config"] [unique_id "akx2403Y1AG98ZTnfN4tBwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 01:41:07 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 21:41:03.606340 2026] [security2:error] [pid 24456:tid 24456] [client 2a04:4e40:4400:0:b8d:a54b:488f:75ed:8822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackhillsinfosec.org.mphq.net"] [uri "/.git/config"] [unique_id "akxZL01hBIr3q5l_d1rlbQAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 00:49:41 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 20:49:36.453582 2026] [security2:error] [pid 30755:tid 30755] [client 2a04:4e40:4400:0:b8d:a54b:488f:75ed:40876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pappakotis.net"] [uri "/.git/config"] [unique_id "akxNILh_zxVMkHY3-WjTTAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 23:08:27 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:08:20.209974 2026] [security2:error] [pid 18264:tid 18268] [client 2a04:4e40:4400:0:b8d:a54b:488f:75ed:7110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.deeplykneaded.net"] [uri "/.git/HEAD"] [unique_id "akw1ZFOyT6EOnTqHmiPQbgAAAMA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 22:51:33 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 18:51:28.994200 2026] [security2:error] [pid 14558:tid 14558] [client 2a04:4e40:4400:0:b8d:a54b:488f:75ed:34728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dadhania.net"] [uri "/.git/HEAD"] [unique_id "akwxcDzxJsl174fF7tLFsgAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 22:20:12 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 18:20:05.977294 2026] [security2:error] [pid 10640:tid 10640] [client 2a04:4e40:4400:0:b8d:a54b:488f:75ed:15410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kelting.net"] [uri "/.git/HEAD"] [unique_id "akwqFWl1KJA5aDymi0NG2gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-06 03:55:09 (1 day ago)	2a04:4e40:4400:0:b8d:a54b:488f:75ed - - [06/Jul/2026:11:55:09 +0800] "GET /.git/config HTTP/1.1" 404 ... show more 2a04:4e40:4400:0:b8d:a54b:488f:75ed - - [06/Jul/2026:11:55:09 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "git/2.39.2" ... show less	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-04 22:32:06 (2 days ago)		Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:34 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 Mundo Bueno	2026-07-04 01:56:12 (3 days ago)	[ISILIA Protection v2.1] Tentative d'accès: /.git/head \| Pays: SE \| UA: git/2.39.2	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-03 22:30:57 (3 days ago)		Brute-Force Web App Attack
🇵🇱 miriks	2026-07-03 06:59:23 (3 days ago)	Automated scan detected: GET /.git/config — UA: git/2.39.2	Port Scan Web App Attack
🇩🇪 macrob	2026-07-03 01:32:44 (4 days ago)	2026/07/03 01:32:43 [error] 1102791#1102791: 346799389 access forbidden by rule, client: 2a04:4e40: ... show more 2026/07/03 01:32:43 [error] 1102791#1102791: 346799389 access forbidden by rule, client: 2a04:4e40:4400:0:b8d:a54b:488f:75ed, server: finami.mx, request: "GET /.git/HEAD HTTP/2.0", host: "finami.mx" 2026/07/03 01:32:43 [error] 1102794#1102794: 346803747 access forbidden by rule, client: 2a04:4e40:4400:0:b8d:a54b:488f:75ed, server: finami.mx, request: "GET /.git/config HTTP/2.0", host: "finami.mx" 2026/07/03 01:32:43 [error] 1102794#1102794: 346803750 access forbidden by rule, client: 2a04:4e40:4400:0:b8d:a54b:488f:75ed, server: finami.mx, request: "GET /.git/config HTTP/2.0", host: "www.finami.mx" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 20:46:06 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:46:00.295417 2026] [security2:error] [pid 19196:tid 19196] [client 2a04:4e40:4400:0:b8d:a54b:488f:75ed:27710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.blastjet.net"] [uri "/.git/HEAD"] [unique_id "akbOCGlsmYOjE1bn3KlbCgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 18:23:50 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:b8d:a54b:488f:75ed (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 14:23:44.819726 2026] [security2:error] [pid 2342:tid 2342] [client 2a04:4e40:4400:0:b8d:a54b:488f:75ed:8484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cyberrob.net"] [uri "/.git/HEAD"] [unique_id "akassO7CrVcCMGa67hFrNAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.198.224.15

🇦🇴 193.163.125.59

🇮🇩 180.242.68.167

🇵🇱 176.53.159.197

🇹🇳 154.110.53.36

🇨🇴 152.204.156.19

🇺🇸 152.32.205.193

🇺🇸 147.185.132.44

🇵🇰 139.135.59.206

🇵🇪 132.157.128.201

🇨🇳 113.250.177.24

🇳🇬 105.113.63.162

🇫🇷 92.205.213.181

🇺🇸 74.94.234.151

🇺🇸 20.115.90.159

🇺🇸 209.141.46.157

🇳🇱 160.119.69.16

🇩🇰 158.173.74.16

🇷🇴 151.242.30.224

🇻🇳 116.110.150.155