JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:d09:97ab:43b1:a59a

2a04:4e40:e000:0:d09:97ab:43b1:a59a was found in our database!

This IP was reported 13 times. Confidence of Abuse is 16%: ?

16%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:d09:97ab:43b1:a59a

Whois 2a04:4e40:e000:0:d09:97ab:43b1:a59a

IP Abuse Reports for 2a04:4e40:e000:0:d09:97ab:43b1:a59a:

This IP address has been reported a total of 13 times from 2 distinct sources. 2a04:4e40:e000:0:d09:97ab:43b1:a59a was first reported on February 19th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 23:31:30 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 19:31:24.830976 2026] [security2:error] [pid 5288:tid 5288] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:9662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fireteam.faith"] [uri "/.git/config"] [unique_id "akmXzN5njLDCx7WsAM_Z-QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-04 21:59:10 (4 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-03. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-04 04:08:47 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:08:41.275394 2026] [security2:error] [pid 4718:tid 4771] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:42216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cityofmiddleton.org"] [uri "/.git/config"] [unique_id "akiHSSD9CF-1Z5bEzcYyQwAAAFg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 01:06:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 21:06:18.670840 2026] [security2:error] [pid 32006:tid 32006] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:44404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bairentang.org"] [uri "/.git/config"] [unique_id "akhcioJ2uAqB7Cs0el3kfQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:24:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:24:42.850668 2026] [security2:error] [pid 21608:tid 21608] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:40818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kentuckyminiaturehorsebreeders.org"] [uri "/.git/config"] [unique_id "akhSypjOPP6I-lGuM1w0XgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:21:50 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:21:47.125481 2026] [security2:error] [pid 19510:tid 19524] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:30710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.coloradomountaineer.com"] [uri "/.git/config"] [unique_id "akgZ2zlS9Uxua1nebvzHQgAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:44:50 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:949110) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:44:44.720198 2026] [security2:error] [pid 16068:tid 16068] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:49518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "donations.freedrm.org"] [uri "/.git/HEAD"] [unique_id "akgRLKyTRj8zGIC6mjjoVAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 17:17:35 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 13:17:29.420862 2026] [security2:error] [pid 11910:tid 11910] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:25290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.rohanbyles.com.au"] [uri "/.git/config"] [unique_id "akfuqXMvnMzyBeix6syQwQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 04:02:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:02:49.761333 2026] [security2:error] [pid 31685:tid 31685] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:21676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campnecon.com"] [uri "/.git/config"] [unique_id "akc0aTyALLL1pZXjR7tzewAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 03:31:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 23:31:22.944357 2026] [security2:error] [pid 30039:tid 30039] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:14642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pittyvaich.com"] [uri "/.git/HEAD"] [unique_id "akctClypxpEbeLiHDCoeCgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 23:56:32 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:56:24.972320 2026] [security2:error] [pid 8526:tid 8526] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:41806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jeffreysbaycabs.com"] [uri "/.git/config"] [unique_id "akb6qJP4VuY20xMlCxsq5wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-13 03:21:55 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:21:50.022514 2026] [security2:error] [pid 258532:tid 258532] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:24234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thelotsmokehouse.com"] [uri "/tests/default_settings/v10.0/.env"] [unique_id "adxhThzciKMFxqVf6sR5WQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 01:07:52 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:d09:97ab:43b1:a59a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:07:47.198494 2026] [security2:error] [pid 22994:tid 22994] [client 2a04:4e40:e000:0:d09:97ab:43b1:a59a:12422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thelotsmokehouse.com"] [uri "/tests/default_settings/v10.0/.env"] [unique_id "aZZiY0EtQTqRsHz1uIcvHwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.105.93.136

🇪🇸 196.196.150.99

🇺🇸 103.225.87.7

🇫🇷 51.68.247.211

🇩🇪 45.135.193.193

🇵🇰 202.70.139.163

🇮🇳 157.40.127.169

🇺🇸 147.185.132.226

🇸🇬 68.183.178.130

🇸🇬 47.84.191.52

🇸🇬 47.84.136.223

🇳🇱 45.66.35.32

🇷🇼 41.186.86.12

🇬🇲 197.231.129.6

🇺🇸 195.184.76.57

🇩🇪 165.232.76.203

🇺🇸 154.90.175.7

🇷🇴 143.20.185.242

🇻🇳 116.110.146.60

🇺🇸 104.168.120.14