JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:92e:55b4:f024:25d8

2a04:4e40:e000:0:92e:55b4:f024:25d8 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 32%: ?

32%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:92e:55b4:f024:25d8

Whois 2a04:4e40:e000:0:92e:55b4:f024:25d8

IP Abuse Reports for 2a04:4e40:e000:0:92e:55b4:f024:25d8:

This IP address has been reported a total of 57 times from 13 distinct sources. 2a04:4e40:e000:0:92e:55b4:f024:25d8 was first reported on March 23rd 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-08-05 19:54:12 (3 weeks ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇧🇷 Peregrine	2026-07-28 03:10:25 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.71.144.153 - - [2 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.71.144.153 - - [24/Jul/2026:20:39:21 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.68.195.132 - - [24/Jul/2026:20:39:22 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.70.242.50 - - [24/Jul/2026:20:39:23 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 show less	Bad Web Bot
🇫🇷 Catalin Negru	2026-07-27 19:03:08 (1 month ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇺🇸 TPI-Abuse	2026-07-26 11:28:53 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 07:28:46.954854 2026] [security2:error] [pid 3793860:tid 3793860] [client 2a04:4e40:e000:0:92e:55b4:f024:25d8:41818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.dannyvanryswyk.com"] [uri "/.git/HEAD"] [unique_id "amXvbgfmtmU4-x6AaVqRFQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-07-26 03:10:46 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.71.144.153 - - [2 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.71.144.153 - - [24/Jul/2026:20:39:21 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.68.195.132 - - [24/Jul/2026:20:39:22 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.70.242.50 - - [24/Jul/2026:20:39:23 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-25 13:49:24 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 09:49:19.237199 2026] [security2:error] [pid 1729420:tid 1729420] [client 2a04:4e40:e000:0:92e:55b4:f024:25d8:16814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.diuana.com"] [uri "/.git/HEAD"] [unique_id "amS-36NYh-OYtLzuwASXgAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 00:47:03 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 20:46:57.654345 2026] [security2:error] [pid 12194:tid 12194] [client 2a04:4e40:e000:0:92e:55b4:f024:25d8:44856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.puckerbottombikini.com"] [uri "/.git/HEAD"] [unique_id "amQHgW2fFp0Yf8lNkEkIUgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-07-24 23:39:25 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.71.144.153 - - [2 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.71.144.153 - - [24/Jul/2026:20:39:21 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.68.195.132 - - [24/Jul/2026:20:39:22 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 2a04:4e40:e000:0:92e:55b4:f024:25d8 172.70.242.50 - - [24/Jul/2026:20:39:23 -0300] "GET /.git/HEAD HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-23 23:10:07 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 19:10:02.161886 2026] [security2:error] [pid 27403:tid 27403] [client 2a04:4e40:e000:0:92e:55b4:f024:25d8:48348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10mostwantedfugitives.com"] [uri "/.git/HEAD"] [unique_id "amKfSrCKkcrLM6J2p7i3OwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Catalin Negru	2026-07-22 20:23:08 (1 month ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇵🇱 sefinek.net	2026-07-19 05:46:46 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/config \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-19 02:10:39 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 22:10:36.572117 2026] [security2:error] [pid 26514:tid 26514] [client 2a04:4e40:e000:0:92e:55b4:f024:25d8:32334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.markaandrews.com"] [uri "/.git/config"] [unique_id "alwyHO1H6zV5UHFwCjF85QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 21:48:08 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 17:48:03.710115 2026] [security2:error] [pid 2753893:tid 2753893] [client 2a04:4e40:e000:0:92e:55b4:f024:25d8:54538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.the-it-man.com"] [uri "/.git/HEAD"] [unique_id "alv0k3jtPDDwoiBRLoln5gAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 10:48:14 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 06:48:07.007776 2026] [security2:error] [pid 6929:tid 6929] [client 2a04:4e40:e000:0:92e:55b4:f024:25d8:45570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jaojoco.net"] [uri "/.git/HEAD"] [unique_id "altZ51vLiMzSiF8D7_RFPQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 05:09:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:92e:55b4:f024:25d8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:09:01.149249 2026] [security2:error] [pid 18548:tid 18548] [client 2a04:4e40:e000:0:92e:55b4:f024:25d8:64426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pamolson.org"] [uri "/.git/HEAD"] [unique_id "alhnbTVKR3PouY5hnNmNBgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 149.56.131.12

🇦🇺 134.199.159.137

🇹🇭 118.194.250.60

🇰🇷 112.151.168.124

🇯🇵 110.54.8.128

🇮🇷 94.182.168.149

🇹🇷 85.99.93.200

🇸🇪 51.20.79.25

🇺🇸 12.156.67.18

🇨🇳 221.213.129.46

🇳🇱 195.178.110.228

🇳🇱 193.47.62.69

🇺🇸 192.0.113.52

🇺🇸 184.105.247.254

🇰🇷 121.135.47.141

🇮🇳 103.38.219.22

🇫🇷 91.231.89.210

🇩🇪 85.190.97.117

🇺🇸 68.183.168.78

🇱🇹 62.60.130.242