JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a04:4e40:e000:0:db1:acf9:4fe0:6528

2a04:4e40:e000:0:db1:acf9:4fe0:6528 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 31%: ?

31%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a04:4e40:e000:0:db1:acf9:4fe0:6528

Whois 2a04:4e40:e000:0:db1:acf9:4fe0:6528

IP Abuse Reports for 2a04:4e40:e000:0:db1:acf9:4fe0:6528:

This IP address has been reported a total of 19 times from 4 distinct sources. 2a04:4e40:e000:0:db1:acf9:4fe0:6528 was first reported on February 19th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-05 21:59:17 (6 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-04. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-05 02:04:57 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 22:04:53.371047 2026] [security2:error] [pid 6341:tid 6354] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:20284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "permisos.pr"] [uri "/.git/HEAD"] [unique_id "akm7xfUhE0cy2n2LtOOhbgAAAQs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 08:05:57 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 04:05:53.418825 2026] [security2:error] [pid 393:tid 393] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:22090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usaenquirer.com"] [uri "/.git/config"] [unique_id "aki-4Q0SUEZCLM73TSDKigAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 07:22:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:22:38.519679 2026] [security2:error] [pid 2979:tid 2979] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:17424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.globalvillagecambodia.org"] [uri "/.git/config"] [unique_id "aki0vv5nVElItqBQkgCBBwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 06:55:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 02:55:04.929969 2026] [security2:error] [pid 20141:tid 20141] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:51654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brandfacets.com"] [uri "/.git/config"] [unique_id "akiuSHKEH4iefdtn6xClCQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 06:39:00 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 02:38:54.306669 2026] [security2:error] [pid 5064:tid 5064] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:21320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kountz.org"] [uri "/.git/HEAD"] [unique_id "akiqfnciVRFVv4A5-P3VygAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-04 02:39:38 (2 days ago)	2a04:4e40:e000:0:db1:acf9:4fe0:6528 - - [04/Jul/2026:02:39:37 +0000] "GET /.git/config HTTP/1.1" 404 ... show more 2a04:4e40:e000:0:db1:acf9:4fe0:6528 - - [04/Jul/2026:02:39:37 +0000] "GET /.git/config HTTP/1.1" 404 44530 "-" "git/2.39.2" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 01:43:15 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 21:43:11.004397 2026] [security2:error] [pid 25948:tid 25948] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:40300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.groomattheinn.com"] [uri "/.git/config"] [unique_id "akhlL6tUwySKu-kCdkG5FAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:53:34 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:53:29.488281 2026] [security2:error] [pid 25220:tid 25220] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:11028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azfilmguild.org"] [uri "/.git/HEAD"] [unique_id "akhZiWGcZTwNLq_u0yI33wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:08:57 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:08:52.464827 2026] [security2:error] [pid 620:tid 620] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:34028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lightupaustralia.com.au"] [uri "/.git/HEAD"] [unique_id "akhPFN0cB8z54_2F6f-MOQAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:51:05 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:51:00.820257 2026] [security2:error] [pid 30647:tid 30647] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:7438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepinman.org"] [uri "/.git/HEAD"] [unique_id "akggtAOzHctI6f0D5buJ7gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:10:06 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:10:00.640263 2026] [security2:error] [pid 5039:tid 5039] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:7502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.klam.nyc"] [uri "/.git/config"] [unique_id "akgXGO5ZxROTk_VV3l3s4QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 00:17:20 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 20:17:13.122534 2026] [security2:error] [pid 29061:tid 29061] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:45308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.schmerzfrei-und-bewegt.vjrott.com"] [uri "/.git/config"] [unique_id "akb_iT8arC1jf2fANNlZBwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 23:20:29 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:20:22.956483 2026] [security2:error] [pid 8803:tid 8803] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:37862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.40svocaltrio.com"] [uri "/.git/HEAD"] [unique_id "akbyNsCDhJDnn__JuHllsAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 20:52:21 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:db1:acf9:4fe0:6528 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:52:16.398040 2026] [security2:error] [pid 8583:tid 8583] [client 2a04:4e40:e000:0:db1:acf9:4fe0:6528:6706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.wwts.io"] [uri "/.git/config"] [unique_id "akbPgGfxaXn9-IbCoztA4AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.227

🇷🇺 212.164.30.190

🇬🇧 193.163.125.25

🇺🇸 164.92.90.2

🇲🇽 148.216.28.11

🇺🇸 135.119.96.21

🇧🇩 103.164.255.234

🇮🇳 103.38.182.49

🇺🇸 44.48.228.128

🇩🇪 43.228.157.8

🇬🇧 35.203.211.143

🇺🇸 20.65.194.80

🇺🇸 20.65.193.105

🇮🇳 1.187.169.56

🇳🇱 176.65.148.2

🇻🇳 171.244.197.110

🇺🇸 129.153.145.135

🇨🇳 119.45.234.190

🇨🇳 112.86.225.162

🇫🇷 51.68.111.215