JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:958:d67d:f372:4592

2a04:4e40:e000:0:958:d67d:f372:4592 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 27%: ?

27%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:958:d67d:f372:4592

Whois 2a04:4e40:e000:0:958:d67d:f372:4592

IP Abuse Reports for 2a04:4e40:e000:0:958:d67d:f372:4592:

This IP address has been reported a total of 66 times from 11 distinct sources. 2a04:4e40:e000:0:958:d67d:f372:4592 was first reported on February 19th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 BiancaNL	2026-09-02 06:48:18 (1 day ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-09-01 06:14:16 (2 days ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-08-29 16:23:04 (4 days ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-08-27 06:01:45 (1 week ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-08-11 06:53:21 (3 weeks ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-07-31 06:24:19 (1 month ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇩🇪 BiancaNL	2026-07-28 06:14:17 (1 month ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:29:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:29:46.302630 2026] [security2:error] [pid 1891201:tid 1891209] [client 2a04:4e40:e000:0:958:d67d:f372:4592:38148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.peapage.pwrcoupling.com"] [uri "/.git/HEAD"] [unique_id "amdBKtjaO9OCNab2YGvw6QAAAQY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-07-27 10:43:02 (1 month ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-07-26 14:18:02 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 11:28:58 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 07:28:53.735709 2026] [security2:error] [pid 2252867:tid 2252867] [client 2a04:4e40:e000:0:958:d67d:f372:4592:14528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jesusthechristministry.org"] [uri "/.git/HEAD"] [unique_id "amSd9c7MwLl1HuY8dI_E4wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 21:06:50 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 17:06:43.478774 2026] [security2:error] [pid 1226617:tid 1226617] [client 2a04:4e40:e000:0:958:d67d:f372:4592:44302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.estatemartinc.com"] [uri "/.git/HEAD"] [unique_id "amPT4yeeKCZLDbmaVJAFFgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BiancaNL	2026-07-22 06:44:51 (1 month ago)	Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 08:18:17 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 04:18:10.533579 2026] [security2:error] [pid 26747:tid 26747] [client 2a04:4e40:e000:0:958:d67d:f372:4592:50114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.goldeys.com"] [uri "/.git/config"] [unique_id "al3Zwv6HqF6V7IJfwsUvugAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 03:33:11 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:958:d67d:f372:4592 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 23:33:06.212356 2026] [security2:error] [pid 8358:tid 8358] [client 2a04:4e40:e000:0:958:d67d:f372:4592:40310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "axiomemail.net"] [uri "/.git/HEAD"] [unique_id "al2W8p3qguJo4EhRimLWDgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 101.89.141.184

🇺🇸 184.105.247.216

🇳🇱 104.28.217.139

🇬🇷 5.203.184.191

🇭🇰 199.45.154.188

🇮🇳 177.177.116.102

🇻🇳 171.231.185.235

🇩🇪 165.232.117.238

🇨🇳 121.29.84.218

🇨🇳 113.81.122.106

🇷🇺 92.101.154.135

🇩🇪 69.5.169.4

🇮🇩 34.101.105.66

🇺🇸 4.150.200.157

🇭🇰 220.246.47.169

🇺🇦 185.205.145.226

🇰🇷 183.104.220.195

🇺🇸 162.216.149.175

🇺🇸 156.232.10.218

🇨🇳 118.212.120.46