JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:4a3:ecb:95ab:b57d

2a04:4e40:e000:0:4a3:ecb:95ab:b57d was found in our database!

This IP was reported 22 times. Confidence of Abuse is 45%: ?

45%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:4a3:ecb:95ab:b57d

Whois 2a04:4e40:e000:0:4a3:ecb:95ab:b57d

IP Abuse Reports for 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:

This IP address has been reported a total of 22 times from 7 distinct sources. 2a04:4e40:e000:0:4a3:ecb:95ab:b57d was first reported on February 19th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 skoczo	2026-07-06 21:54:31 (3 hours ago)	Honeytoken tripped (detected by https://github.com/skoczo/repgate): /.git/HEAD	Web App Attack
Anonymous	2026-07-06 21:27:52 (4 hours ago)	2a04:4e40:e000:0:4a3:ecb:95ab:b57d - - [06/Jul/2026:23:27:51 +0200] "GET /.git/HEAD HTTP/1.1" 402 34 ... show more 2a04:4e40:e000:0:4a3:ecb:95ab:b57d - - [06/Jul/2026:23:27:51 +0200] "GET /.git/HEAD HTTP/1.1" 402 3400 "-" "git/2.39.2" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 21:22:47 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:22:40.115924 2026] [security2:error] [pid 32234:tid 32234] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:12176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "advancedmotorsports.com"] [uri "/.git/HEAD"] [unique_id "akwcoFyTe5wmuaHhnrkybAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 04:26:03 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:25:53.206030 2026] [security2:error] [pid 13190:tid 13190] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:57372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.meghanmack.name"] [uri "/.git/config"] [unique_id "aksuUVQB0M692oE4-hg6uAAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 22:00:46 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-04 07:54:13 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:54:09.485979 2026] [security2:error] [pid 25557:tid 25557] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:30886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.aquatreat.net"] [uri "/.git/HEAD"] [unique_id "aki8IRQ6z9COwdrVDEDZxwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 07:02:23 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:02:18.160905 2026] [security2:error] [pid 27053:tid 27053] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:53836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ultratecnologiamx.activethinkers.net"] [uri "/.git/HEAD"] [unique_id "akiv-t63yLEB-Vi551kmzAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 05:56:31 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:56:28.067979 2026] [security2:error] [pid 10857:tid 10857] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:15010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oxysulfur.com.mroxygen.org"] [uri "/.git/config"] [unique_id "akigjNilApbmmDjhBOV44wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 05:27:44 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:27:37.817499 2026] [security2:error] [pid 11723:tid 11723] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:59942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ozarkmountainwinetrail.org"] [uri "/.git/HEAD"] [unique_id "akiZyWWH9EexFyszrpF5JgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 04:48:00 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:47:56.104343 2026] [security2:error] [pid 22475:tid 22475] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:25778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fivecentmiracle.com.mundanestudies.org"] [uri "/.git/config"] [unique_id "akiQfOdlozi_-ltVpj6dxQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:46:27 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:46:19.732809 2026] [security2:error] [pid 11373:tid 11373] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wiszen.org"] [uri "/.git/config"] [unique_id "akhX29O1acZy9rNWmKTSqwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:25:52 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:25:49.206164 2026] [security2:error] [pid 20358:tid 20358] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:35014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.lcoor.org"] [uri "/.git/config"] [unique_id "akhTDVx7ZjMrxHX89Q2yIwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 23:59:01 (3 days ago)	(mod_security) mod_security (id:949110) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:949110) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 19:58:57.872457 2026] [security2:error] [pid 17908:tid 17908] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:28368] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "auranet.cescfoundation.org"] [uri "/.git/config"] [unique_id "akhMwf9IuM6Vc4UXmM-zyQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:07:15 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:07:09.258041 2026] [security2:error] [pid 16553:tid 16553] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:52138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bvnboysbasketball.com"] [uri "/.git/config"] [unique_id "akgWbWx9ZgY1XtArvRPLsgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:28:40 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4a3:ecb:95ab:b57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:28:33.060027 2026] [security2:error] [pid 11170:tid 11444] [client 2a04:4e40:e000:0:4a3:ecb:95ab:b57d:42608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "malvadocuaderno.com"] [uri "/.git/config"] [unique_id "akgNYXC3ZKyBUDnuQVj5sAAAAYw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.62.156.45

🇳🇱 45.148.10.141

🇬🇧 35.203.211.218

🇺🇸 2607:f8b0:4001:c0b::128

🇨🇳 223.107.242.213

🇭🇰 199.45.154.184

🇹🇼 198.235.24.107

🇲🇾 183.171.53.82

🇳🇱 169.150.196.136

🇯🇵 160.248.75.84

🇫🇷 158.220.99.210

🇭🇰 150.5.141.198

🇨🇳 117.158.138.160

🇱🇾 102.203.197.6

🇺🇸 23.94.200.194

🇺🇸 20.65.193.226

🇩🇪 216.26.244.132

🇷🇺 194.28.72.246

🇺🇸 179.61.192.160

🇳🇱 138.226.239.22