JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:cbb:12fc:d409:f575

2a04:4e40:e000:0:cbb:12fc:d409:f575 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 51%: ?

51%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:cbb:12fc:d409:f575

Whois 2a04:4e40:e000:0:cbb:12fc:d409:f575

IP Abuse Reports for 2a04:4e40:e000:0:cbb:12fc:d409:f575:

This IP address has been reported a total of 24 times from 8 distinct sources. 2a04:4e40:e000:0:cbb:12fc:d409:f575 was first reported on February 19th 2026, and the most recent report was 49 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 03:10:10 (49 minutes ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 23:10:04.616233 2026] [security2:error] [pid 10392:tid 10392] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:54066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.netstatsolutions.com"] [uri "/.git/config"] [unique_id "ak2_jCfAU5iy7JO5rHt1aAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 21:01:26 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 17:01:20.934597 2026] [security2:error] [pid 3406:tid 3406] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:6618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.compupackinc.com"] [uri "/.git/HEAD"] [unique_id "ak1pIKAuGSHoy6AWrwcmhwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-07 04:13:13 (23 hours ago)	2a04:4e40:e000:0:cbb:12fc:d409:f575 - - [07/Jul/2026:12:13:12 +0800] "GET /.git/HEAD HTTP/1.1" 404 3 ... show more 2a04:4e40:e000:0:cbb:12fc:d409:f575 - - [07/Jul/2026:12:13:12 +0800] "GET /.git/HEAD HTTP/1.1" 404 300891 "-" "git/2.39.2" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 02:32:44 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 22:32:36.746182 2026] [security2:error] [pid 14173:tid 14173] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:14320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assets.kanata.ws"] [uri "/.git/config"] [unique_id "akxlRDSuQVYzOLS1yuDF6gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 04:23:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:23:32.178389 2026] [security2:error] [pid 11864:tid 11864] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:29940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.alknetso.name"] [uri "/.git/HEAD"] [unique_id "akstxFu3LadVKrpdPs_hXAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 01:33:46 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 21:33:41.759085 2026] [security2:error] [pid 17208:tid 17208] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:9038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "directnic-support.rocks"] [uri "/.git/HEAD"] [unique_id "aksF9XBWMkjQwFRT4_bdNAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-07-05 23:57:31 (2 days ago)	(y3) Failed access -byebye- from 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): (CF_ENABLE)	Hacking
🇺🇸 TPI-Abuse	2026-07-05 18:37:54 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 14:37:48.559467 2026] [security2:error] [pid 24659:tid 24659] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:15290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lightningbug.farm"] [uri "/.git/HEAD"] [unique_id "akqkfDpCGkWcwF6fvj3UcAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 smallhost_helsinki	2026-07-05 18:01:50 (2 days ago)	Tried to access non existent path: /.git	Web App Attack
🇧🇪 sid3windr	2026-07-05 10:28:05 (2 days ago)	GET /.git/config (Tarpitted for 4m18s, wasted 15.23kB)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 10:05:49 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 06:05:44.968507 2026] [security2:error] [pid 24187:tid 24187] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:7578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asli.cafe"] [uri "/.git/config"] [unique_id "akoseBwhuE9Oum-tmWMl5gAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 07:51:34 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 03:51:23.828026 2026] [security2:error] [pid 17442:tid 17442] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:23988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mpservice.com.sv"] [uri "/.git/HEAD"] [unique_id "akoM-y6g8QZSD1feJfEtewAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:05 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-04 07:08:19 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:08:16.530886 2026] [security2:error] [pid 31263:tid 31263] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:58078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.twilighthackers.com"] [uri "/.git/config"] [unique_id "akixYNfgueNhck8-55jxTwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 02:46:03 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 22:45:57.469442 2026] [security2:error] [pid 27208:tid 27208] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:53706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "riedmannfamily.com"] [uri "/.git/HEAD"] [unique_id "akhz5WZ4r8OSBcxsaDEG8gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.127.148.6

🇺🇸 195.184.76.183

🇳🇱 195.178.110.227

🇭🇰 165.154.41.232

🇺🇸 147.185.132.21

🇧🇷 131.221.133.6

🇮🇳 117.216.240.146

🇩🇪 69.5.169.196

🇺🇸 66.132.186.181

🇺🇸 20.168.127.122

🇨🇳 14.103.121.146

🇭🇰 220.246.42.222

🇧🇪 198.235.24.158

🇫🇷 188.92.249.11

🇰🇷 118.45.101.159

🇰🇷 112.162.111.205

🇹🇼 111.70.23.251

🇻🇳 103.156.58.239

🇺🇸 71.6.238.188

🇺🇸 67.207.88.89