JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a04:52c0:122:d2f9::1

Neutral Activity IPv6 SLAAC Note

Abuse Confidence Score

0% Low Risk

39 reports

13 reporters · latest 5 months ago

ISP: The Infrastructure Group B.V.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS60404
Domain Name: theinfrastructure.group
Country: 🇳🇱 Netherlands
City: Dronten, Flevoland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

2a04:52c0:122:d2f9::1 has been reported 39 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

39 from 13 distinct reporters

First reported

April 24th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 akac	2026-04-25 20:01:09 UTC · (6 months ago)	Web vulnerability scanning: HTTP/1.1 GET /.git/config	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-04-25 18:06:15 UTC · (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 60404 (The Infrastructure Group B.V.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-04-25T17:08:49Z Ray ID: 9f1ef3b2386195d9 UA: Mozilla/5.0 (Macintosh; Intel M ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 60404 (The Infrastructure Group B.V.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-04-25T17:08:49Z Ray ID: 9f1ef3b2386195d9 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/125.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 itsnixk	2026-04-25 15:41:55 UTC · (6 months ago)	lfd: (mod_security) mod_security (id:930130) triggered by 2a04:52c0:122:d2f9::1 (Unknown): 5 in the last 3600 secs - Sat Apr 25 11:41:55 2026	Web App Attack
🇺🇸 TPI-Abuse	2026-04-25 14:43:30 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:52c0:122:d2f9::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 10:43:26.295469 2026] [security2:error] [pid 5337:tid 5337] [client 2a04:52c0: ... show more (mod_security) mod_security (id:210492) triggered by 2a04:52c0:122:d2f9::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 10:43:26.295469 2026] [security2:error] [pid 5337:tid 5337] [client 2a04:52c0:122:d2f9::1:42630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.headcount.dev"] [uri "/.git/config"] [unique_id "aezTDjkoY9iIfDDy-BkfWwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-25 14:11:04 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:52c0:122:d2f9::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 10:10:57.004898 2026] [security2:error] [pid 14776:tid 14776] [client 2a04:52c ... show more (mod_security) mod_security (id:210492) triggered by 2a04:52c0:122:d2f9::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 10:10:57.004898 2026] [security2:error] [pid 14776:tid 14776] [client 2a04:52c0:122:d2f9::1:37724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bwill.dev"] [uri "/.env"] [unique_id "aezLcbBIW7HoEU2Wv_buhAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 COMPLEX	2026-04-25 13:23:07 UTC · (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/1.1 (GET method) Endpoint: / UA: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)	Bad Web Bot
🇬🇧 pinguin	2026-04-25 09:06:23 UTC · (6 months ago)	Triggered Cloudflare WAF (firewallManaged) from NL. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /.git/COMMIT_EDITMSG UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot) This report was generated by: https://g ... show more Triggered Cloudflare WAF (firewallManaged) from NL. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /.git/COMMIT_EDITMSG UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-24 08:06:07 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:52c0:122:d2f9::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 04:05:57.224474 2026] [security2:error] [pid 404516:tid 404516] [client 2a04:5 ... show more (mod_security) mod_security (id:210492) triggered by 2a04:52c0:122:d2f9::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 04:05:57.224474 2026] [security2:error] [pid 404516:tid 404516] [client 2a04:52c0:122:d2f9::1:35106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.matteozacchino.dev"] [uri "/.git/HEAD"] [unique_id "aeskZQnmZmmLU0kEoIX-MQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-24 05:24:24 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2a04:52c0:122:d2f9::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 01:24:14.533708 2026] [security2:error] [pid 14097:tid 14097] [client 2a04:52c ... show more (mod_security) mod_security (id:210492) triggered by 2a04:52c0:122:d2f9::1 (Unknown): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 01:24:14.533708 2026] [security2:error] [pid 14097:tid 14097] [client 2a04:52c0:122:d2f9::1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ccamp.dev"] [uri "/.git/config"] [unique_id "aer-fhEQyX4kXdDjuMZ4GQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 31 to 39 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 109.160.32.116

🇨🇳 27.216.166.104

🇵🇱 2400:cb00:923:1000:8fb8:339a:6232:bc7

🇮🇳 192.95.95.95

🇺🇸 172.234.222.225

🇵🇱 172.64.200.186

🇨🇦 167.114.139.91

🇮🇳 152.59.87.240

🇦🇺 120.155.137.119

🇰🇷 118.37.49.119

🇸🇬 97.74.87.152

🇺🇸 35.235.113.173

🇬🇧 35.203.211.243

🇬🇧 35.203.210.67

🇩🇪 18.159.215.33

🇷🇴 2.57.121.112

🇵🇱 2400:cb00:923:1000:602b:8ef6:8be7:de07

🇳🇱 195.178.110.104

🇭🇰 156.225.1.99

🇨🇳 121.40.217.100