JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:4bc:fb39:2406:15a2

2a04:4e40:e000:0:4bc:fb39:2406:15a2 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 35%: ?

35%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:4bc:fb39:2406:15a2

Whois 2a04:4e40:e000:0:4bc:fb39:2406:15a2

IP Abuse Reports for 2a04:4e40:e000:0:4bc:fb39:2406:15a2:

This IP address has been reported a total of 62 times from 13 distinct sources. 2a04:4e40:e000:0:4bc:fb39:2406:15a2 was first reported on March 23rd 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 filstal.org	2026-07-27 15:39:26 (4 weeks ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇳🇱 thedreamer.nl	2026-07-27 11:19:48 (4 weeks ago)	2a04:4e40:e000:0:4bc:fb39:2406:15a2 - - [27/Jul/2026:13:19:04 +0200] "GET /.git/HEAD HTTP/1.1" 499 0 ... show more 2a04:4e40:e000:0:4bc:fb39:2406:15a2 - - [27/Jul/2026:13:19:04 +0200] "GET /.git/HEAD HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" "DE" "Frankfurt am Main" "50.11690" "8.68370" 2a04:4e40:e000:0:4bc:fb39:2406:15a2 - - [27/Jul/2026:13:19:05 +0200] "GET /.git/HEAD HTTP/1.1" 499 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" "DE" "Frankfurt am Main" "50.11690" "8.68370" 2a04:4e40:e000:0:4bc:fb39:2406:15a2 - - [27/Jul/2026:13:19:05 +0200] "GET /.git/HEAD HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "DE" "Frankfurt am Main" "50.11690" "8.68370" 2a04:4e40:e000:0:4bc:fb39:2406:15a2 - - [27/Jul/2026:13:19:06 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "DE" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 13:54:26 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 09:54:20.420268 2026] [security2:error] [pid 28378:tid 28378] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:9544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bristar-usa.com"] [uri "/.git/HEAD"] [unique_id "amYRjNwT29z3QUgcE2LHOgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 11:14:31 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 07:14:25.367261 2026] [security2:error] [pid 1506252:tid 1506252] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:33794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.rntoday.com"] [uri "/.git/HEAD"] [unique_id "amXsEdNinLQ48t6oJsX3JgAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 11:33:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 07:33:43.112112 2026] [security2:error] [pid 4168072:tid 4168072] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:5972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.isjustanasshole.com"] [uri "/.git/HEAD"] [unique_id "amSfF9dBU4lk6trFCJa6rAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 20:53:37 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 16:53:30.452681 2026] [security2:error] [pid 1828582:tid 1828594] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:48276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.fiefblondel.com"] [uri "/.git/HEAD"] [unique_id "amPQyiA1KiC3nBVQJEjyvQAAAIg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 12:19:12 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 08:19:09.129944 2026] [security2:error] [pid 2727630:tid 2727630] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:57994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.villachaya.coconut-homes.com"] [uri "/.git/HEAD"] [unique_id "amIGveiZ2N8ytOShUXkXBgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-07-21 23:20:01 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-07-21 23:11:41 (1 month ago)	2a04:4e40:e000:0:4bc:fb39:2406:15a2 - - [22/Jul/2026:07:11:40 +0800] "GET /.git/HEAD HTTP/1.1" 301 2 ... show more 2a04:4e40:e000:0:4bc:fb39:2406:15a2 - - [22/Jul/2026:07:11:40 +0800] "GET /.git/HEAD HTTP/1.1" 301 246 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-21 16:31:50 (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇧🇪 sid3windr	2026-07-20 19:41:19 (1 month ago)	GET /.git/HEAD (Tarpitted for 4m20s, wasted 15.35kB)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 16:11:23 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 12:11:16.366281 2026] [security2:error] [pid 9339:tid 9339] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:21762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.piratecostumesonline.com"] [uri "/.git/config"] [unique_id "al5IpOuEbhe75WNvITaLCgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 12:36:12 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 08:36:09.132893 2026] [security2:error] [pid 13992:tid 13992] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:48006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dogdom.gulftelecom.com"] [uri "/.git/config"] [unique_id "alzEuV5q441ylUi14ryLrAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 09:48:58 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 05:48:51.005772 2026] [security2:error] [pid 1449106:tid 1449106] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:59064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kalosgroups.com"] [uri "/.git/config"] [unique_id "alydg2E97YZihqjMMwnC5AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 22:31:54 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 18:31:47.400146 2026] [security2:error] [pid 4672:tid 4672] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:56154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "w360.mx"] [uri "/.git/config"] [unique_id "alv-01rC5TI1dKngyLCnDwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇵🇱 176.53.159.198

🇹🇳 165.50.113.132

🇱🇦 115.84.82.131

🇪🇸 82.165.142.236

🇹🇼 198.235.24.71

🇸🇪 171.25.158.74

🇭🇰 152.32.191.226

🇨🇳 116.177.172.94

🇺🇸 20.80.88.160

🇺🇸 2a06:98c0:3600::103

🇨🇳 223.166.206.136

🇬🇧 185.247.137.36

🇧🇷 177.144.152.16

🇳🇱 86.54.31.32

🇺🇸 44.220.188.66

🇨🇦 20.104.18.15

🇮🇳 2401:4900:5600:6ad3:c4b5:6dfb:15f2:32e9

🇱🇹 213.176.26.58

🇳🇱 172.71.102.108