JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:232:cf29:9aa2:d54b

2a04:4e40:e000:0:232:cf29:9aa2:d54b was found in our database!

This IP was reported 14 times. Confidence of Abuse is 30%: ?

30%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:232:cf29:9aa2:d54b

Whois 2a04:4e40:e000:0:232:cf29:9aa2:d54b

IP Abuse Reports for 2a04:4e40:e000:0:232:cf29:9aa2:d54b:

This IP address has been reported a total of 14 times from 4 distinct sources. 2a04:4e40:e000:0:232:cf29:9aa2:d54b was first reported on July 2nd 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-06 06:23:39 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 02:23:35.118288 2026] [security2:error] [pid 17992:tid 17992] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:44234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.97films.media"] [uri "/.git/config"] [unique_id "aktJ5zqW4CG7WmLjIF9ElgAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ecs.ge	2026-07-06 01:53:27 (14 hours ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-05 19:13:09 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 15:13:05.975276 2026] [security2:error] [pid 11617:tid 11617] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:39982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.tritec.com.gt"] [uri "/.git/HEAD"] [unique_id "akqswS0dkrqVhgRG2tHRcQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 nzhost.co.nz	2026-07-05 02:56:46 (1 day ago)	$f2bV_matches	Hacking Brute-Force
🇳🇱 homeshowdomain.nl	2026-07-04 22:00:38 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-04 08:03:48 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 04:03:44.911031 2026] [security2:error] [pid 4070:tid 4070] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:27290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nowell.net"] [uri "/.git/config"] [unique_id "aki-YOSDAVo1mQCNgr58XAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 04:02:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:02:52.812419 2026] [security2:error] [pid 21095:tid 21095] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:38982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kadinisi.org"] [uri "/.git/HEAD"] [unique_id "akiF7OqP_YuWUSQPMobi_gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:18:03 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:17:57.142639 2026] [security2:error] [pid 12698:tid 12698] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:48422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.f40ph.org"] [uri "/.git/HEAD"] [unique_id "akhRNd0Mwbx_ztaynPhSAQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 22:03:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 18:03:27.429777 2026] [security2:error] [pid 31988:tid 32005] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:9266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accreditedfinancialanalyst.org"] [uri "/.git/HEAD"] [unique_id "akgxr9vYIK3Q09Pr5PZbbQAAAUo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:28:11 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:28:05.245895 2026] [security2:error] [pid 7887:tid 7887] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:12070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.rademeyer.com"] [uri "/.git/HEAD"] [unique_id "akgbVb2nRURRD-a2fPV0cgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 03:13:46 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 23:13:42.561061 2026] [security2:error] [pid 9136:tid 9136] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:47088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ehrlichfamily.com.ehrlichmedia.com"] [uri "/.git/HEAD"] [unique_id "akco5l1aDCOskPK2zeg3YQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 23:52:57 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:52:49.724484 2026] [security2:error] [pid 5051:tid 5051] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:24982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.musicshowcase.us"] [uri "/.git/config"] [unique_id "akb50ZX8TYOLMPVt2YbgxQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 11:11:11 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 07:11:07.243701 2026] [security2:error] [pid 14889:tid 14889] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:28382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.flybits.co.uk"] [uri "/.git/config"] [unique_id "akZHS9L0mI0J2vhaT2WIQgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 07:51:58 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:232:cf29:9aa2:d54b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 03:51:53.912760 2026] [security2:error] [pid 25955:tid 25955] [client 2a04:4e40:e000:0:232:cf29:9aa2:d54b:2510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.stpetersplayers.co.uk"] [uri "/.git/config"] [unique_id "akYYmUWzgwYeVq8S5hXsSAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.132

🇵🇰 103.196.163.51

🇱🇹 77.90.185.20

🇺🇸 48.217.227.80

🇺🇸 23.94.155.78

🇺🇸 4.236.158.50

🇺🇸 216.25.89.134

🇨🇳 202.105.98.252

🇮🇳 128.185.33.241

🇫🇷 92.205.57.72

🇺🇸 91.230.168.34

🇨🇳 60.19.222.156

🇫🇷 37.59.204.131

🇺🇸 20.169.49.231

🇺🇸 159.183.174.110

🇳🇱 86.54.31.44

🇺🇸 192.81.211.118

🇨🇳 182.43.71.198

🇵🇱 176.53.159.197

🇸🇬 103.187.147.165