JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:4bc:fb39:2406:15a2

2a04:4e40:e000:0:4bc:fb39:2406:15a2 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 24%: ?

24%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:4bc:fb39:2406:15a2

Whois 2a04:4e40:e000:0:4bc:fb39:2406:15a2

IP Abuse Reports for 2a04:4e40:e000:0:4bc:fb39:2406:15a2:

This IP address has been reported a total of 22 times from 3 distinct sources. 2a04:4e40:e000:0:4bc:fb39:2406:15a2 was first reported on March 23rd 2026, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-06 23:05:23 (13 minutes ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:05:15.820852 2026] [security2:error] [pid 6285:tid 6285] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:55314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kingfish.bet"] [uri "/.git/config"] [unique_id "akw0qx_PBQToAURQJwRDFwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 01:18:33 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 21:18:26.682533 2026] [security2:error] [pid 19397:tid 19397] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:3214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nealschon.global"] [uri "/.git/config"] [unique_id "aksCYur8zg8y-h9arhfXnAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 00:22:35 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 20:22:29.744434 2026] [security2:error] [pid 11192:tid 11192] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:33230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ds12bonn.de"] [uri "/.git/config"] [unique_id "akr1RZqVQGXOkopUxz0O4AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-07-06 00:02:58 (23 hours ago)	2a04:4e40:e000:0:4bc:fb39:2406:15a2 - - [06/Jul/2026:02:02:58 +0200] "GET /.git/config HTTP/1.1" 200 ... show more 2a04:4e40:e000:0:4bc:fb39:2406:15a2 - - [06/Jul/2026:02:02:58 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "git/2.39.2" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 18:57:01 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 14:56:55.655262 2026] [security2:error] [pid 28839:tid 28839] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:61464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thenolangroup.llc"] [uri "/.git/config"] [unique_id "akqo9_HA8OEaIYVlNnm91wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 09:10:28 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 05:10:24.388584 2026] [security2:error] [pid 29946:tid 29946] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:13238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tci.land"] [uri "/.git/config"] [unique_id "akofgLzWfbY7t4cSSlTb4wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 07:51:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 03:51:25.147570 2026] [security2:error] [pid 14894:tid 14894] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:44062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metaluz.com.sv.mpservice.com.sv"] [uri "/.git/HEAD"] [unique_id "akoM_cs_xHa0T7sG0FZDqwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 23:18:22 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 19:18:18.097015 2026] [security2:error] [pid 26250:tid 26250] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:40126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarrisbilliards.com"] [uri "/.git/config"] [unique_id "akmUurNZCKhtILNx_SqJ5QAAAFQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:26 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-04 06:44:55 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 02:44:49.303566 2026] [security2:error] [pid 9484:tid 9484] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:55420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kountz.org"] [uri "/.git/config"] [unique_id "akir4T61fgvGXtFT5Ccz1AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 06:25:50 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 02:25:44.043409 2026] [security2:error] [pid 12053:tid 12053] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:49112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jesusthechristministry.org"] [uri "/.git/HEAD"] [unique_id "akinaJ3YVtTB_OQ05INFyAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 02:51:53 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 22:51:49.661388 2026] [security2:error] [pid 29629:tid 29629] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:13702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "67ronin.com"] [uri "/.git/config"] [unique_id "akh1RXJwhHb4jisPYYLvggAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:46:53 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:46:47.766374 2026] [security2:error] [pid 31836:tid 31836] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:49692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.xirin.org"] [uri "/.git/config"] [unique_id "akhX95N93BxoC9Q7zrvHLQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:17:48 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:17:41.048039 2026] [security2:error] [pid 11867:tid 11876] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:6168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ethicmark.org"] [uri "/.git/HEAD"] [unique_id "akhRJV2a6NZPlBk1ke7pqQAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 22:57:19 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:4bc:fb39:2406:15a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 18:57:12.948280 2026] [security2:error] [pid 18714:tid 18714] [client 2a04:4e40:e000:0:4bc:fb39:2406:15a2:14686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anxo.org"] [uri "/.git/HEAD"] [unique_id "akg-SIa860KrqPtfGW7OzgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.113

🇷🇺 188.32.210.218

🇳🇱 178.62.249.181

🇧🇷 131.100.242.102

🇨🇳 117.146.60.5

🇫🇷 91.196.152.36

🇫🇷 85.217.140.45

🇭🇰 47.243.143.216

🇺🇸 43.166.136.202

🇵🇰 182.180.57.212

🇺🇸 2607:ff10:c8:594::4

🇭🇰 2602:80d:1003::3c

🇬🇧 195.96.139.60

🇺🇸 165.154.36.245

🇳🇱 103.214.5.133

🇫🇷 85.217.140.10

🇯🇵 43.130.249.176

🇺🇸 2607:f8b0:4004:c25::122

🇳🇱 195.178.110.227

🇮🇳 183.82.111.224