JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:27f:72a0:4bf9:95e9

2a04:4e40:e000:0:27f:72a0:4bf9:95e9 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 34%: ?

34%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:27f:72a0:4bf9:95e9

Whois 2a04:4e40:e000:0:27f:72a0:4bf9:95e9

IP Abuse Reports for 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:

This IP address has been reported a total of 26 times from 5 distinct sources. 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 was first reported on February 19th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-07 22:43:12 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 18:43:05.584299 2026] [security2:error] [pid 17768:tid 17768] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:44640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.intermixx.com"] [uri "/.git/HEAD"] [unique_id "ak2A-XNd7k98MpGxLHnioQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 21:24:51 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 17:24:45.997406 2026] [security2:error] [pid 1836:tid 1836] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:21444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kennedysplace.com"] [uri "/.git/HEAD"] [unique_id "ak1unRuh3CVJthJHr1pOAgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 01:41:04 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 21:40:58.273105 2026] [security2:error] [pid 10946:tid 10946] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:47588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.totalstorage.solutions"] [uri "/.git/config"] [unique_id "akxZKpgVvX17tc0sGkdyEwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 07:58:00 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 03:57:52.940507 2026] [security2:error] [pid 10609:tid 10609] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:45950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thewanderingwoods.quest"] [uri "/.git/config"] [unique_id "aktgAKKqtg-yMKnZpxlS1gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 05:52:41 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 01:52:34.720529 2026] [security2:error] [pid 23478:tid 23478] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:23652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.evolutionmedical.help"] [uri "/.git/HEAD"] [unique_id "aktCouoG2QLDeqbs3g7ZPAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 01:15:51 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 21:15:46.497177 2026] [security2:error] [pid 15009:tid 15009] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:11602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cortesinsulation.com.worldchat.global"] [uri "/.git/config"] [unique_id "aksBws0NKivYNxZC-SF-oAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 sid3windr	2026-07-05 10:28:24 (2 days ago)	GET /.git/HEAD (Tarpitted for 4m20s, wasted 15.35kB)	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 22:00:39 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
Anonymous	2026-07-04 21:37:13 (3 days ago)	Honeypot triggered: attacker probed /.git/config (5 times)	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-04 07:13:08 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:13:00.700622 2026] [security2:error] [pid 1258:tid 1258] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:45334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ieas.org"] [uri "/.git/config"] [unique_id "akiyfP4_cDve7atRYDd7MAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 06:56:18 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 02:56:10.550715 2026] [security2:error] [pid 10581:tid 10581] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:15140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.evannine.com"] [uri "/.git/config"] [unique_id "akiuiohZEe5zmseukobvrQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 06:38:07 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 02:38:00.949255 2026] [security2:error] [pid 7281:tid 7304] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:14396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "culturallyyours.org"] [uri "/.git/HEAD"] [unique_id "akiqSFF19xDpOiOcIdsEqQAAAdU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 on-com	2026-07-04 05:44:23 (3 days ago)	URL scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 05:09:41 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:09:38.435622 2026] [security2:error] [pid 25246:tid 25246] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:2372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.circleway.org"] [uri "/.git/HEAD"] [unique_id "akiVkrRqL8X3nmPmlsxRAwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 04:45:17 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:27f:72a0:4bf9:95e9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:45:09.928228 2026] [security2:error] [pid 6190:tid 6190] [client 2a04:4e40:e000:0:27f:72a0:4bf9:95e9:47854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.splashstation.org"] [uri "/.git/HEAD"] [unique_id "akiP1ZCQ15HvbElCE0VWkQAAACg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.249

🇱🇰 173.239.196.184

🇺🇸 162.216.150.242

🇺🇸 162.216.150.74

🇨🇳 106.117.86.73

🇺🇿 84.54.115.46

🇮🇳 20.244.18.126

🇧🇷 205.210.31.199

🇪🇸 185.255.21.194

🇷🇴 141.98.83.48

🇧🇷 104.253.13.82

🇮🇩 103.105.53.15

🇷🇴 92.118.39.49

🇺🇸 64.62.197.182

🇺🇸 198.12.254.228

🇺🇸 193.3.53.6

🇬🇧 188.240.59.61

🇬🇧 188.240.59.56

🇭🇰 172.71.218.190

🇦🇷 131.161.184.46