JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:685:38dd:e17d:251a

2a04:4e40:e000:0:685:38dd:e17d:251a was found in our database!

This IP was reported 12 times. Confidence of Abuse is 31%: ?

31%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:685:38dd:e17d:251a

Whois 2a04:4e40:e000:0:685:38dd:e17d:251a

IP Abuse Reports for 2a04:4e40:e000:0:685:38dd:e17d:251a:

This IP address has been reported a total of 12 times from 4 distinct sources. 2a04:4e40:e000:0:685:38dd:e17d:251a was first reported on February 19th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-05 04:33:17 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 00:33:14.051376 2026] [security2:error] [pid 12243:tid 12243] [client 2a04:4e40:e000:0:685:38dd:e17d:251a:64814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hal.dance"] [uri "/.git/config"] [unique_id "akneigQoLy3whufXFXsdEwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:10 (18 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-04 05:55:44 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:55:40.178994 2026] [security2:error] [pid 10546:tid 10546] [client 2a04:4e40:e000:0:685:38dd:e17d:251a:58088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tiln.org"] [uri "/.git/HEAD"] [unique_id "akigXIkX1nporDrk1DOOMgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 04:16:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:16:17.511668 2026] [security2:error] [pid 24986:tid 24986] [client 2a04:4e40:e000:0:685:38dd:e17d:251a:21008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rohanbyles.com.au"] [uri "/.git/HEAD"] [unique_id "akiJETpMndSf5WaCbLD6MgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-07-04 01:35:26 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-04 00:49:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:49:34.797181 2026] [security2:error] [pid 9193:tid 9193] [client 2a04:4e40:e000:0:685:38dd:e17d:251a:61552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avantgarde-hk.org"] [uri "/.git/HEAD"] [unique_id "akhYnmWrdHffJn8An-GtBgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:25:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:25:05.739305 2026] [security2:error] [pid 8648:tid 8648] [client 2a04:4e40:e000:0:685:38dd:e17d:251a:65420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.koshland.org"] [uri "/.git/HEAD"] [unique_id "akhS4dt4C6ajZ4IDNfBKIQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-07-03 21:34:16 (1 day ago)	2a04:4e40:e000:0:685:38dd:e17d:251a - - [03/Jul/2026:23:34:15 +0200] "GET /.git/config HTTP/1.1" 401 ... show more 2a04:4e40:e000:0:685:38dd:e17d:251a - - [03/Jul/2026:23:34:15 +0200] "GET /.git/config HTTP/1.1" 401 179 "-" "git/2.39.2" "349g58n8.pingusmc.org" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:38:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:38:24.345425 2026] [security2:error] [pid 12514:tid 12514] [client 2a04:4e40:e000:0:685:38dd:e17d:251a:5462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staben.vccemail.net"] [uri "/.git/config"] [unique_id "akgPsF4j4ypzAjW5gLNIKAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 02:45:40 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:45:35.832636 2026] [security2:error] [pid 17683:tid 17687] [client 2a04:4e40:e000:0:685:38dd:e17d:251a:57978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.whitecrosslibrary.com"] [uri "/.git/HEAD"] [unique_id "akciTxe0_RoQXZVd5XPDFQAAAQI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-13 03:01:40 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:01:33.095333 2026] [security2:error] [pid 234390:tid 234390] [client 2a04:4e40:e000:0:685:38dd:e17d:251a:42998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thelotsmokehouse.com"] [uri "/new/.env"] [unique_id "adxcjejbb4-V30RmQJRyqgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 00:47:08 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:685:38dd:e17d:251a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:47:02.638881 2026] [security2:error] [pid 24284:tid 24284] [client 2a04:4e40:e000:0:685:38dd:e17d:251a:48006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thelotsmokehouse.com"] [uri "/laravel/core/.env.production"] [unique_id "aZZdhhs0Ny1d7kiOPOnWbAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400c:c18::123

🇸🇬 206.189.149.160

🇰🇷 175.200.217.128

🇨🇳 118.196.129.25

🇵🇰 103.173.7.164

🇮🇹 185.111.157.196

🇳🇬 165.154.11.64

🇨🇦 159.203.2.220

🇫🇷 157.173.104.13

🇫🇷 151.80.141.196

🇨🇳 117.177.102.79

🇫🇷 91.196.152.239

🇳🇱 52.174.67.71

🇸🇬 43.128.88.177

🇺🇸 2607:f8b0:400c:c18::12e

🇰🇷 220.77.214.59

🇳🇱 188.166.68.252

🇺🇸 172.203.245.49

🇦🇪 165.154.12.108

🇬🇧 91.196.221.139