JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:89f:eda3:7d36:d57d

2a04:4e40:e000:0:89f:eda3:7d36:d57d was found in our database!

This IP was reported 22 times. Confidence of Abuse is 29%: ?

29%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:89f:eda3:7d36:d57d

Whois 2a04:4e40:e000:0:89f:eda3:7d36:d57d

IP Abuse Reports for 2a04:4e40:e000:0:89f:eda3:7d36:d57d:

This IP address has been reported a total of 22 times from 4 distinct sources. 2a04:4e40:e000:0:89f:eda3:7d36:d57d was first reported on February 19th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 02:42:23 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 22:42:20.312095 2026] [security2:error] [pid 23283:tid 23283] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:4874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.krankybitchguitars.com"] [uri "/.git/packed-refs"] [unique_id "ak25DHRoPKgkj5LxEMiW8AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 21:11:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 17:11:39.759907 2026] [security2:error] [pid 5991:tid 5991] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:58174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.completemodular.com"] [uri "/.git/HEAD"] [unique_id "ak1rixQCoWWKnXxKRjVF5QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 06:38:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 02:38:41.991519 2026] [security2:error] [pid 10655:tid 10655] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:6686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventiststoday.satanisdead.com"] [uri "/.git/config"] [unique_id "akye8WX6gBER48dO1rvcogAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 01:39:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 21:39:37.472301 2026] [security2:error] [pid 6451:tid 6451] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:24886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mispar.solutions"] [uri "/.git/HEAD"] [unique_id "akxY2cp-NKPgQdN_s0pfAQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 09:34:57 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:949110) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 05:34:54.611150 2026] [security2:error] [pid 15906:tid 15906] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:9488] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "789-bid.com"] [uri "/.git/HEAD"] [unique_id "akt2vhqqniTxJNAgIh462AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 04:23:22 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:23:17.095836 2026] [security2:error] [pid 21277:tid 21316] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:15488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mailme.name"] [uri "/.git/HEAD"] [unique_id "aksttXmAF4AOYSAnpLjtTwAAAQA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 22:15:08 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:15:04.717783 2026] [security2:error] [pid 22661:tid 22661] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:7876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thn.bz"] [uri "/.git/config"] [unique_id "akrXaAcxk5o-s6qeSaew2gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 06:08:36 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 02:08:27.937814 2026] [security2:error] [pid 14129:tid 14249] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:18020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.luxury.management"] [uri "/.git/HEAD"] [unique_id "akn022hbLhQetQ-JmSa8JgAAAcs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 foxxelabs	2026-07-05 04:13:36 (3 days ago)	Automated report from FoxxeLabs Sentinel. Path probed: /.git/config \| Project: anseo \| Reason(s): Kn ... show more Automated report from FoxxeLabs Sentinel. Path probed: /.git/config \| Project: anseo \| Reason(s): Known exploit path: /.git/config \| User-Agent: git/2.39.2 show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:06 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇦🇺 2000cn.com.au	2026-07-04 05:10:56 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-04 02:51:33 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 22:51:26.513414 2026] [security2:error] [pid 21582:tid 21582] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:23906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "67ronin.com"] [uri "/.git/config"] [unique_id "akh1LmDfSriku0GQLRE_1gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 02:07:27 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 22:07:20.154747 2026] [security2:error] [pid 10847:tid 10847] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:21376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.newenglandchristmascards.com"] [uri "/.git/config"] [unique_id "akhq2JSCiCAGTEp0HgIS4AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 01:47:49 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 21:47:43.453094 2026] [security2:error] [pid 19110:tid 19119] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:57254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.managementconsultant.us"] [uri "/.git/config"] [unique_id "akhmP-PmW4QJUGRTQX_tPgAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 01:31:03 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:89f:eda3:7d36:d57d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 21:30:58.047634 2026] [security2:error] [pid 12675:tid 12675] [client 2a04:4e40:e000:0:89f:eda3:7d36:d57d:10012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kingstoneproperties.com"] [uri "/.git/HEAD"] [unique_id "akhiUlMK3TbM0UL5uFsAlQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 185.213.229.133

🇺🇸 174.177.88.20

🇨🇦 85.217.149.40

🇺🇸 69.74.29.21

🇰🇿 45.139.179.205

🇧🇷 20.206.84.143

🇨🇳 218.8.224.88

🇺🇦 213.59.165.74

🇷🇺 194.154.92.163

🇷🇺 193.194.97.187

🇻🇪 186.165.205.82

🇧🇴 181.115.172.93

🇰🇿 173.244.157.62

🇺🇸 172.86.114.38

🇧🇯 137.255.20.68

🇲🇲 136.228.161.66

🇻🇳 103.140.249.210

🇺🇿 84.54.72.228

🇩🇪 82.23.138.208

🇷🇺 80.244.43.23