JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:67f:22f:87c0:3547

2a04:4e40:e000:0:67f:22f:87c0:3547 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 29%: ?

29%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:67f:22f:87c0:3547

Whois 2a04:4e40:e000:0:67f:22f:87c0:3547

IP Abuse Reports for 2a04:4e40:e000:0:67f:22f:87c0:3547:

This IP address has been reported a total of 21 times from 4 distinct sources. 2a04:4e40:e000:0:67f:22f:87c0:3547 was first reported on March 23rd 2026, and the most recent report was 23 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 03:09:25 (23 minutes ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 23:09:21.650647 2026] [security2:error] [pid 19027:tid 19027] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:46140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.purebinary.com"] [uri "/.git/HEAD"] [unique_id "ak2_YVS9HkDBMKEieCcYdgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 13:47:06 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 09:46:59.696749 2026] [security2:error] [pid 12762:tid 12762] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:10324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3fabgals.com"] [uri "/.git/config"] [unique_id "ak0DUwcidkAxVs0Iff7IPAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 11:16:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 07:16:38.297390 2026] [security2:error] [pid 12403:tid 12408] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:2486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrigrailtechnologies.com.pwrcoupling.com"] [uri "/.git/config"] [unique_id "akuOljMwwCaJw0JlnTDCJQAAAEM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 07:31:28 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 03:31:20.110087 2026] [security2:error] [pid 28610:tid 28610] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:53928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.starstrategy.ltd"] [uri "/.git/config"] [unique_id "aktZyA9dMkuA0Kqs6vtKUgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 0tsystems	2026-07-06 01:41:01 (2 days ago)	Automated scan detected on 0t.systems: /.git	Web App Attack
🇩🇪 4server	2026-07-06 01:30:33 (2 days ago)	[MonJul0603:30:27.5622282026][security2:error][pid3562367:tid3562411][client2a04:4e40:e000:0:67f:22f ... show more [MonJul0603:30:27.5622282026][security2:error][pid3562367:tid3562411][client2a04:4e40:e000:0:67f:22f:87c0:3547:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.hercules.li\"][uri\"/.git/HEAD\"][unique_id\"aksFMzI2uUXv3f95JQTRJgAAAEc\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 01:21:33 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 21:21:27.011435 2026] [security2:error] [pid 27674:tid 27674] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:42594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ic1.global"] [uri "/.git/HEAD"] [unique_id "aksDF8RvvB0GHvTW-C3VawAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 01:03:08 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 21:03:03.169030 2026] [security2:error] [pid 21276:tid 21284] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:50492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.dba.center"] [uri "/.git/config"] [unique_id "akr-x7y-DiPxRD3OqFyjEAAAAII"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 07:52:32 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 03:52:24.679891 2026] [security2:error] [pid 23683:tid 23683] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:58518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pcga.golf"] [uri "/.git/config"] [unique_id "akoNOHWiI8wQaQ-p-Z4P3wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 04:33:29 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 00:33:20.216688 2026] [security2:error] [pid 21279:tid 21279] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:7528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "halblog.hal.dance"] [uri "/.git/HEAD"] [unique_id "aknekP_9YWj36P2DtecNeQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:24 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-04 08:18:25 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 04:18:19.328500 2026] [security2:error] [pid 23201:tid 23201] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:7074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ecrecorp.com"] [uri "/.git/HEAD"] [unique_id "akjByy_ExW0DdQUUBe9WFwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 07:32:32 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:32:26.771998 2026] [security2:error] [pid 24937:tid 24937] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:25944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.turtletaekwondo.com.swindon-itf.com"] [uri "/.git/config"] [unique_id "aki3CkjdRmcLIhf3Ma1XAwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 05:51:34 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:51:28.904995 2026] [security2:error] [pid 3652:tid 3652] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:65164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alafiariverrendezvous.org"] [uri "/.git/HEAD"] [unique_id "akifYB4wE8sTsni9idcM9AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 05:14:00 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:67f:22f:87c0:3547 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:13:57.793709 2026] [security2:error] [pid 4098:tid 4203] [client 2a04:4e40:e000:0:67f:22f:87c0:3547:65362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gsji.org"] [uri "/.git/config"] [unique_id "akiWlWhVcHGlHq11BeXSiAAAAQ8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.99.52.202

🇳🇱 193.176.31.225

🇫🇷 91.231.89.215

🇧🇪 198.235.24.168

🇺🇸 192.178.113.27

🇵🇭 180.191.136.77

🇺🇸 172.203.216.28

🇺🇸 135.119.112.180

🇳🇱 81.19.216.94

🇩🇪 69.5.169.229

🇺🇸 13.86.117.6

🇨🇳 183.36.126.68

🇮🇳 182.66.193.212

🇸🇦 176.45.47.91

🇺🇸 165.154.182.12

🇺🇸 162.216.150.3

🇪🇨 157.100.135.160

🇪🇸 149.86.233.213

🇺🇸 136.36.189.65

🇺🇸 91.246.51.250