JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:4400:0:bb1:c4ed:f249:957f

2a04:4e40:4400:0:bb1:c4ed:f249:957f was found in our database!

This IP was reported 9 times. Confidence of Abuse is 23%: ?

23%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:4400:0:bb1:c4ed:f249:957f

Whois 2a04:4e40:4400:0:bb1:c4ed:f249:957f

IP Abuse Reports for 2a04:4e40:4400:0:bb1:c4ed:f249:957f:

This IP address has been reported a total of 9 times from 3 distinct sources. 2a04:4e40:4400:0:bb1:c4ed:f249:957f was first reported on July 2nd 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:54 (19 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-03 05:04:36 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 01:04:30.700919 2026] [security2:error] [pid 23250:tid 23250] [client 2a04:4e40:4400:0:bb1:c4ed:f249:957f:10894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.conservadordehualpen.cl"] [uri "/.git/HEAD"] [unique_id "akdC3ncKCT8iCBAEM2gz1wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 20:43:02 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:42:53.411734 2026] [security2:error] [pid 17543:tid 17543] [client 2a04:4e40:4400:0:bb1:c4ed:f249:957f:28054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackstarmgmt.com.mydobdate.net"] [uri "/.git/config"] [unique_id "akbNTf5g0kEahVRcluOM9wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 18:43:24 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 14:43:16.961699 2026] [security2:error] [pid 20873:tid 20873] [client 2a04:4e40:4400:0:bb1:c4ed:f249:957f:31340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.seiganji.ichi51e.net"] [uri "/.git/config"] [unique_id "akaxRGf_I918jkzU_8LwuQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 boxed-it	2026-07-02 09:31:29 (3 days ago)	GET /.git/config (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 06:05:58 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 02:05:52.202156 2026] [security2:error] [pid 12032:tid 12032] [client 2a04:4e40:4400:0:bb1:c4ed:f249:957f:7546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.californiaappraisers.net"] [uri "/.git/config"] [unique_id "akX_wNJV7hZsKCP7JXOJeQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 04:52:30 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:52:24.213127 2026] [security2:error] [pid 3752:tid 3752] [client 2a04:4e40:4400:0:bb1:c4ed:f249:957f:4788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.centuryabsinthe.com"] [uri "/.git/config"] [unique_id "akXuiIIBe0Kzr9spcIaC2gAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 04:02:09 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:02:02.693867 2026] [security2:error] [pid 6879:tid 6879] [client 2a04:4e40:4400:0:bb1:c4ed:f249:957f:31168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.1derfulwaysrv.com"] [uri "/.git/config"] [unique_id "akXiuuTwDplNX4qirW-ySwAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:40:19 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:4400:0:bb1:c4ed:f249:957f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:40:14.018870 2026] [security2:error] [pid 22727:tid 22727] [client 2a04:4e40:4400:0:bb1:c4ed:f249:957f:6584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.dwightbrown.com"] [uri "/.git/HEAD"] [unique_id "akXdnnwwzMpw29wk5ShAMQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.131.167.8

🇩🇪 194.187.176.235

🇳🇱 91.92.40.6

🇨🇳 157.0.147.130

🇹🇭 150.95.82.21

🇨🇳 47.113.100.24

🇸🇬 43.134.230.165

🇻🇳 27.79.1.64

🇰🇭 202.62.47.113

🇭🇰 199.45.154.179

🇧🇷 187.7.165.25

🇳🇱 176.65.148.6

🇨🇳 157.0.147.164

🇲🇾 115.135.151.109

🇯🇵 103.170.232.201

🇺🇸 64.77.244.139

🇲🇾 60.53.155.135

🇰🇷 211.106.133.202

🇲🇽 187.190.35.163

🇩🇪 185.242.3.195