JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:122:a800:9cca:754b

2a04:4e40:e000:0:122:a800:9cca:754b was found in our database!

This IP was reported 64 times. Confidence of Abuse is 25%: ?

25%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:122:a800:9cca:754b

Whois 2a04:4e40:e000:0:122:a800:9cca:754b

IP Abuse Reports for 2a04:4e40:e000:0:122:a800:9cca:754b:

This IP address has been reported a total of 64 times from 10 distinct sources. 2a04:4e40:e000:0:122:a800:9cca:754b was first reported on February 19th 2026, and the most recent report was 50 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 BiancaNL	2026-09-01 06:14:15 (50 minutes ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-08-29 16:23:03 (2 days ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-08-27 06:01:44 (5 days ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-08-11 06:53:19 (3 weeks ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-07-31 06:24:18 (1 month ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-07-28 06:14:16 (1 month ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:28:38 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:28:34.381422 2026] [security2:error] [pid 964805:tid 964805] [client 2a04:4e40:e000:0:122:a800:9cca:754b:12180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.laura-stone.com"] [uri "/.git/HEAD"] [unique_id "amdA4vWnY61lCvgPeDUpSgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 15:03:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 11:03:43.995956 2026] [security2:error] [pid 2769271:tid 2769271] [client 2a04:4e40:e000:0:122:a800:9cca:754b:30046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iacarbonell.com"] [uri "/.git/HEAD"] [unique_id "amYhz-8bktrZlGPBtIA_VQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 13:48:46 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 09:48:42.252146 2026] [security2:error] [pid 2064604:tid 2064604] [client 2a04:4e40:e000:0:122:a800:9cca:754b:2606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.dance4ovations.com"] [uri "/.git/HEAD"] [unique_id "amYQOgPQF4ovAQ6HmWzg1gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 11:12:17 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 07:12:13.097467 2026] [security2:error] [pid 21994:tid 21994] [client 2a04:4e40:e000:0:122:a800:9cca:754b:53190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.teenybikinigirls.com"] [uri "/.git/HEAD"] [unique_id "amXrjeSVsmDLd7HD28QjjAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 13:11:34 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 09:11:30.969245 2026] [security2:error] [pid 2379330:tid 2379330] [client 2a04:4e40:e000:0:122:a800:9cca:754b:40054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tnthandy.com"] [uri "/.git/HEAD"] [unique_id "amS2AoCeQM4abbuOBXPfZgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 00:28:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 20:28:00.917825 2026] [security2:error] [pid 2020670:tid 2020670] [client 2a04:4e40:e000:0:122:a800:9cca:754b:50706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.baker15.com"] [uri "/.git/HEAD"] [unique_id "amQDEET3UQHqzeguob3sZAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 00:03:27 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 20:03:21.182607 2026] [security2:error] [pid 4165955:tid 4165955] [client 2a04:4e40:e000:0:122:a800:9cca:754b:61592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.achari.com"] [uri "/.git/HEAD"] [unique_id "amP9SZKloCMMa-U6FLBGrAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 23:37:14 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 19:37:09.288989 2026] [security2:error] [pid 3088254:tid 3088254] [client 2a04:4e40:e000:0:122:a800:9cca:754b:29426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bernabeu.org"] [uri "/.git/HEAD"] [unique_id "amKlpVR4f6qPng75eyrDSQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 20:42:53 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:122:a800:9cca:754b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 16:42:46.503925 2026] [security2:error] [pid 3529625:tid 3529625] [client 2a04:4e40:e000:0:122:a800:9cca:754b:26232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grimone.com"] [uri "/.git/HEAD"] [unique_id "amJ8xgH8MkLWrbAHtxdu9wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.63.52.54

🇿🇦 164.151.136.50

🇺🇸 164.90.146.113

🇫🇷 161.97.109.57

🇫🇷 161.97.72.101

🇨🇳 120.77.9.212

🇻🇳 116.110.150.8

🇺🇸 103.215.74.26

🇺🇸 91.230.168.144

🇩🇪 69.5.169.172

🇮🇶 65.20.149.26

🇺🇸 64.62.197.177

🇵🇱 51.68.151.167

🇱🇺 46.151.182.67

🇳🇬 41.73.0.47

🇬🇧 35.203.211.141

🇺🇸 35.196.216.225

🇺🇸 205.210.31.101

🇹🇼 198.235.24.69

🇧🇷 177.69.130.249