JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:37a:7085:2b65:f5c6

2a04:4e40:e000:0:37a:7085:2b65:f5c6 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 43%: ?

43%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:37a:7085:2b65:f5c6

Whois 2a04:4e40:e000:0:37a:7085:2b65:f5c6

IP Abuse Reports for 2a04:4e40:e000:0:37a:7085:2b65:f5c6:

This IP address has been reported a total of 15 times from 6 distinct sources. 2a04:4e40:e000:0:37a:7085:2b65:f5c6 was first reported on February 19th 2026, and the most recent report was 31 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 05:43:24 (31 minutes ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:43:19.079178 2026] [security2:error] [pid 6814:tid 6814] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:56962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.frightlibrary.org"] [uri "/.git/config"] [unique_id "akidd0y5SadX8gJ8f5Do5wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 05:13:41 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:13:34.561627 2026] [security2:error] [pid 1596:tid 1596] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:52074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cornerstonecharitablescholarshiptrust.org"] [uri "/.git/HEAD"] [unique_id "akiWfqAyWfsPjY4tzKI2DAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 04:42:56 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:42:49.014425 2026] [security2:error] [pid 8806:tid 8806] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:25688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.desertalfas.org"] [uri "/.git/HEAD"] [unique_id "akiPScZubhqmuPdEImmBkwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-07-04 03:58:10 (2 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-04 00:47:01 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:46:57.618627 2026] [security2:error] [pid 9532:tid 9532] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:30634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.yeswedeliver.org"] [uri "/.git/HEAD"] [unique_id "akhYAQSznTkbhdoombP_-gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:01:13 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:01:05.332968 2026] [security2:error] [pid 10471:tid 10471] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:18704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ashtangayogamelbourne.com.au"] [uri "/.git/config"] [unique_id "akgG8WHT2JXujtTh_OMC8wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-07-03 05:15:15 (1 day ago)	4 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇺🇸 TPI-Abuse	2026-07-03 03:58:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 23:58:21.935496 2026] [security2:error] [pid 23379:tid 23379] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:50618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campnecon.com"] [uri "/.git/config"] [unique_id "akczXThYJF-TFV71TS5PVAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 03:08:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 23:08:49.750279 2026] [security2:error] [pid 16811:tid 16811] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:53492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.theinjuredparties.com"] [uri "/.git/config"] [unique_id "akcnwRThHieiuzbS8UNzEwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rip	2026-07-03 02:05:42 (1 day ago)	Restricted File Access Attempts	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 23:51:26 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:51:18.513190 2026] [security2:error] [pid 22868:tid 22868] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:39726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.drgas.xyz"] [uri "/.git/HEAD"] [unique_id "akb5duWuro28Ah1RWvAe1wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-07-02 12:57:50 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: git/2.39.2 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Aetherweb Ark	2026-07-02 09:01:00 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:949110) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-13 03:18:52 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:18:47.720691 2026] [security2:error] [pid 255592:tid 255592] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:9264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thelotsmokehouse.com"] [uri "/src/client/mobile/.env"] [unique_id "adxglyrQTtrMgIDGNauyGQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 01:04:56 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:37a:7085:2b65:f5c6 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:04:49.999991 2026] [security2:error] [pid 18601:tid 18601] [client 2a04:4e40:e000:0:37a:7085:2b65:f5c6:46872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thelotsmokehouse.com"] [uri "/src/client/mobile/.env"] [unique_id "aZZhsT58aiXHuNy1_XVPUgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 161.248.189.72

🇮🇳 150.129.132.131

🇻🇪 82.86.122.98

🇧🇪 34.156.243.248

🇹🇼 198.235.24.68

🇺🇸 160.3.210.204

🇭🇰 150.5.169.138

🇰🇷 112.171.133.147

🇧🇩 103.132.89.22

🇬🇧 101.36.97.80

🇶🇦 98.98.252.102

🇨🇿 92.112.238.156

🇱🇧 78.40.177.123

🇺🇸 65.49.1.229

🇳🇱 64.225.74.178

🇺🇸 52.177.169.196

🇧🇷 20.195.177.9

🇺🇸 216.180.246.121

🇰🇷 211.223.107.86

🇲🇦 196.74.174.117