JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:b18:33cb:b1bc:5a2

2a04:4e40:e000:0:b18:33cb:b1bc:5a2 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 31%: ?

31%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:b18:33cb:b1bc:5a2

Whois 2a04:4e40:e000:0:b18:33cb:b1bc:5a2

IP Abuse Reports for 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:

This IP address has been reported a total of 19 times from 4 distinct sources. 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 was first reported on March 23rd 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-06 21:43:02 (6 hours ago)	2a04:4e40:e000:0:b18:33cb:b1bc:5a2 - - [06/Jul/2026:23:43:01 +0200] "GET /.git/config HTTP/1.1" 402 ... show more 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 - - [06/Jul/2026:23:43:01 +0200] "GET /.git/config HTTP/1.1" 402 3405 "-" "git/2.39.2" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 14:33:31 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 10:33:28.282999 2026] [security2:error] [pid 4268:tid 4268] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:59574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agchurchkuwait.com"] [uri "/.git/HEAD"] [unique_id "aku8uJhYg70fUHZJguKrsQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 04:35:57 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:35:52.737269 2026] [security2:error] [pid 28963:tid 28963] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:21310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.snw.wies.name.wies.name"] [uri "/.git/config"] [unique_id "akswqApIDIqEeghBYPNbdgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 21:11:04 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 17:11:00.708640 2026] [security2:error] [pid 21594:tid 21594] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:26130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.queenspridegrapes.nyc"] [uri "/.git/HEAD"] [unique_id "akrIZPp-lNRR_C3jYpdMAwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 20:47:20 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:47:15.521970 2026] [security2:error] [pid 22601:tid 22601] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:2368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globalsolutions.technology"] [uri "/.git/HEAD"] [unique_id "akrC0xFXjUnZKVrUA56D7wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 03:25:47 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 23:25:41.087974 2026] [security2:error] [pid 10005:tid 10005] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:46808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ameliaschaaf.lawyer"] [uri "/.git/HEAD"] [unique_id "aknOtSsUB0MbNnBwlDJFUwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 23:18:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 19:18:33.372768 2026] [security2:error] [pid 26256:tid 26256] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:10206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarrisbilliards.com"] [uri "/.git/HEAD"] [unique_id "akmUyblRxjF_cazzZHX1QAAAAFo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:26 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-04 04:03:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:03:55.809729 2026] [security2:error] [pid 29365:tid 29365] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:50044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fgrotary.org"] [uri "/.git/config"] [unique_id "akiGK5xTDQrxEoDbH6PxNQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 01:50:22 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 21:50:17.180716 2026] [security2:error] [pid 5200:tid 5200] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:22888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.knowledge.parkhan.com"] [uri "/.git/HEAD"] [unique_id "akhm2T6lRSl7-6JUhu4KAQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:05:41 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:05:35.788764 2026] [security2:error] [pid 29695:tid 29695] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:11978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lightupaustralia.com.au"] [uri "/.git/HEAD"] [unique_id "akhOT_5ibnz5Pkb-UG7aRgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 23:38:02 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 19:37:55.144725 2026] [security2:error] [pid 22744:tid 22744] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:43548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arborterra.org"] [uri "/.git/HEAD"] [unique_id "akhH08Bz_ZkfTSOq3GypOQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:48:48 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:48:42.437803 2026] [security2:error] [pid 14238:tid 14254] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:10282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accuball.maxelon.com"] [uri "/.git/HEAD"] [unique_id "akggKsqxViKRajb_58kHawAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:07:42 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:b18:33cb:b1bc:5a2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:07:34.488068 2026] [security2:error] [pid 2657:tid 2657] [client 2a04:4e40:e000:0:b18:33cb:b1bc:5a2:25076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rentaroller.com.au"] [uri "/.git/config"] [unique_id "akgWhnCltum86O1ZocbaDAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-07-03 05:15:39 (3 days ago)	12 attacks on VC URLs: GET /.git/HEAD HTTP/1.1	Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.243

🇧🇷 187.87.112.120

🇮🇳 125.20.210.182

🇨🇳 123.149.180.81

🇨🇳 123.54.215.74

🇱🇹 45.227.254.170

🇺🇸 45.79.207.181

🇺🇸 45.61.121.25

🇯🇵 43.165.170.19

🇬🇧 35.203.211.35

🇬🇧 2.57.17.76

🇨🇳 223.73.27.95

🇬🇧 217.146.80.99

🇮🇱 203.159.81.66

🇧🇷 201.87.121.28

🇶🇦 176.202.107.225

🇺🇸 172.105.147.216

🇺🇸 165.154.182.207

🇺🇸 147.185.132.52

🇺🇸 104.234.208.155