JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:5df:b64d:487d:75ac

2a04:4e40:e000:0:5df:b64d:487d:75ac was found in our database!

This IP was reported 23 times. Confidence of Abuse is 38%: ?

38%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:5df:b64d:487d:75ac

Whois 2a04:4e40:e000:0:5df:b64d:487d:75ac

IP Abuse Reports for 2a04:4e40:e000:0:5df:b64d:487d:75ac:

This IP address has been reported a total of 23 times from 5 distinct sources. 2a04:4e40:e000:0:5df:b64d:487d:75ac was first reported on February 19th 2026, and the most recent report was 30 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-07 01:17:50 (30 minutes ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 21:17:46.310895 2026] [security2:error] [pid 23188:tid 23188] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:49938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cityoffoley.gov"] [uri "/.git/config"] [unique_id "akxTuurHkCBvPXxqlXPLIAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 21:56:13 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:56:08.932946 2026] [security2:error] [pid 3848:tid 3865] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:63830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aclarityforensics.com"] [uri "/.git/config"] [unique_id "akwkePRqylta2n4_sTgRLwAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 12:30:06 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 08:29:58.840102 2026] [security2:error] [pid 11437:tid 11437] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:23522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abilityimprinting.com"] [uri "/.git/HEAD"] [unique_id "akufxjVOlpEdnEqpaZ9cGgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 01:39:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 21:39:37.283072 2026] [security2:error] [pid 22123:tid 22123] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:17392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.deals.directnic-support.rocks"] [uri "/.git/config"] [unique_id "aksHWaBlUAUHX9gar4QiZwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-06 01:26:02 (1 day ago)	[MonJul0603:25:56.6142852026][security2:error][pid3562372:tid3562476][client2a04:4e40:e000:0:5df:b64 ... show more [MonJul0603:25:56.6142852026][security2:error][pid3562372:tid3562476][client2a04:4e40:e000:0:5df:b64d:487d:75ac:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.hercules.li\"][uri\"/.git/config\"][unique_id\"aksEJAm3482hnhpmOfPLiAAAAM8\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Marc	2026-07-06 01:23:21 (1 day ago)	2a04:4e40:e000:0:5df:b64d:487d:75ac - - [06/Jul/2026:03:23:20 +0200] "GET /.git/config HTTP/1.1" 404 ... show more 2a04:4e40:e000:0:5df:b64d:487d:75ac - - [06/Jul/2026:03:23:20 +0200] "GET /.git/config HTTP/1.1" 404 3226 "-" "git/2.39.2" 2a04:4e40:e000:0:5df:b64d:487d:75ac - - [06/Jul/2026:03:23:20 +0200] "GET /.git/HEAD HTTP/1.1" 404 3226 "-" "git/2.39.2" 2a04:4e40:e000:0:5df:b64d:487d:75ac - - [06/Jul/2026:03:23:20 +0200] "GET /.git/HEAD HTTP/1.1" 404 3228 "-" "git/2.39.2" show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-06 01:19:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 21:19:26.093482 2026] [security2:error] [pid 15009:tid 15009] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:16926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertocameron.worldchat.global"] [uri "/.git/config"] [unique_id "aksCns0NKivYNxZC-SF-rgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 20:46:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:46:37.277922 2026] [security2:error] [pid 21662:tid 21662] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:16760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.globalsolutions.technology"] [uri "/.git/HEAD"] [unique_id "akrCrXPrbwywycp0mzujiwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-04 23:01:25 (2 days ago)	[redacted] 2a04:4e40:e000:0:5df:b64d:487d:75ac - - [04/Jul/2026:22:30:40 +0100] "GET /.git/config HT ... show more [redacted] 2a04:4e40:e000:0:5df:b64d:487d:75ac - - [04/Jul/2026:22:30:40 +0100] "GET /.git/config HTTP/1.1" 302 6788 0/73208 "-" "git/2.39.2" [redacted] 2a04:4e40:e000:0:5df:b64d:487d:75ac - - [04/Jul/2026:22:30:40 +0100] "GET /.git/HEAD HTTP/1.1" 302 6788 0/68609 "-" "git/2.39.2" show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:13 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇫🇷 Baking333	2026-07-04 21:30:41 (2 days ago)	[redacted] 2a04:4e40:e000:0:5df:b64d:487d:75ac - - [04/Jul/2026:22:30:40 +0100] "GET /.git/config HT ... show more [redacted] 2a04:4e40:e000:0:5df:b64d:487d:75ac - - [04/Jul/2026:22:30:40 +0100] "GET /.git/config HTTP/1.1" 302 6768 0/55407 "-" "git/2.39.2" [redacted] 2a04:4e40:e000:0:5df:b64d:487d:75ac - - [04/Jul/2026:22:30:40 +0100] "GET /.git/HEAD HTTP/1.1" 302 6768 0/54446 "-" "git/2.39.2" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 07:44:51 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:44:46.932176 2026] [security2:error] [pid 28286:tid 28286] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:41016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.copierscharlotte.com"] [uri "/.git/config"] [unique_id "aki57kFNBHNfQb0kyj829gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 07:14:08 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:14:04.817803 2026] [security2:error] [pid 12372:tid 12378] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:57056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.achillconsulting.com"] [uri "/.git/HEAD"] [unique_id "akiyvERpmfKuywJ-AGxaNwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 02:11:11 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 22:11:03.753305 2026] [security2:error] [pid 706:tid 706] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:44332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.accinternational.net"] [uri "/.git/config"] [unique_id "akhrt-dgBQfvr5cY05LoqgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:33:49 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:5df:b64d:487d:75ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:33:47.027143 2026] [security2:error] [pid 28105:tid 28105] [client 2a04:4e40:e000:0:5df:b64d:487d:75ac:39928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.photo-craft.org"] [uri "/.git/config"] [unique_id "akhU6602AiXQJba3enR-5QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.85

🇧🇪 198.235.24.173

🇩🇪 185.248.141.81

🇨🇬 102.141.44.234

🇷🇴 92.118.39.59

🇩🇪 69.5.169.49

🇹🇷 62.60.233.236

🇳🇱 195.178.110.137

🇳🇱 185.80.222.87

🇭🇰 152.32.170.55

🇹🇭 150.95.24.146

🇺🇸 147.185.132.145

🇮🇩 147.139.136.75

🇨🇳 106.37.191.2

🇰🇪 102.210.149.105

🇨🇳 101.26.28.165

🇧🇪 74.125.47.150

🇰🇷 61.37.150.6

🇲🇾 60.52.237.155

🇳🇱 45.148.10.152