JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2605:6400:30:f57d:916e:73f8:d5e7:675b

2605:6400:30:f57d:916e:73f8:d5e7:675b was found in our database!

This IP was reported 104 times. Confidence of Abuse is 12%: ?

12%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	FranTech Solutions
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Domain Name	frantech.ca
Country	🇨🇭 Switzerland
City	Bern, Bern

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2605:6400:30:f57d:916e:73f8:d5e7:675b

Whois 2605:6400:30:f57d:916e:73f8:d5e7:675b

IP Abuse Reports for 2605:6400:30:f57d:916e:73f8:d5e7:675b:

This IP address has been reported a total of 104 times from 16 distinct sources. 2605:6400:30:f57d:916e:73f8:d5e7:675b was first reported on March 21st 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-27 05:50:36 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (Luxembou ... show more (mod_security) mod_security (id:225170) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (LuxembourgTorNew22.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 01:50:31.374495 2026] [security2:error] [pid 14663:tid 14663] [client 2605:6400:30:f57d:916e:73f8:d5e7:675b:51318] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|crep-psych.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crep-psych.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ariup9Agf4jOMJAMLqjSKQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 nyuuzyou	2026-09-13 17:26:34 (1 month ago)	Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ... show more Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-13T17:26:34Z. show less	Bad Web Bot
🇺🇸 xmission.com	2026-09-04 17:53:47 (1 month ago)	Blocked by UFW (TCP on 51854) Source port: 9000 Packet length: 1500 This report (for 2605:6400:0030 ... show more Blocked by UFW (TCP on 51854) Source port: 9000 Packet length: 1500 This report (for 2605:6400:0030:f57d:916e:73f8:d5e7:675b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-29 11:13:03 (1 month ago)	Blocked by UFW (TCP on 9999) Source port: 42178 Packet length: 80 This report (for 2605:6400:0030:f ... show more Blocked by UFW (TCP on 9999) Source port: 42178 Packet length: 80 This report (for 2605:6400:0030:f57d:916e:73f8:d5e7:675b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Ping of Death
Anonymous	2026-04-26 21:02:31 (6 months ago)	2026-04-26 08:00:33,625 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:30:f57d:916e:73f ... show more 2026-04-26 08:00:33,625 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:30:f57d:916e:73f8:d5e7:675b 2026-04-26 12:01:29,324 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:30:f57d:916e:73f8:d5e7:675b 2026-04-26 18:01:27,122 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:30:f57d:916e:73f8:d5e7:675b 2026-04-26 21:01:24,525 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:30:f57d:916e:73f8:d5e7:675b 2026-04-27 00:02:30,626 fail2ban.actions [7718]: NOTICE [tor] Ban 2605:6400:30:f57d:916e:73f8:d5e7:675b show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-26 12:48:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (Luxembou ... show more (mod_security) mod_security (id:210492) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (LuxembourgTorNew22.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 08:48:18.749501 2026] [security2:error] [pid 6464:tid 6464] [client 2605:6400:30:f57d:916e:73f8:d5e7:675b:34656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kavahawaii.com"] [uri "/wp-config.php.backup"] [unique_id "ae4JkqgnVXZrgh6gmikcTwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-04-16 22:28:14 (6 months ago)	[FriApr1700:28:10.9680612026][security2:error][pid3088299:tid3088302][client2605:6400:30:f57d:916e:7 ... show more [FriApr1700:28:10.9680612026][security2:error][pid3088299:tid3088302][client2605:6400:30:f57d:916e:73f8:d5e7:675b:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"benvenutialfood.ch\"][uri\"/wp-content/plugins/revslider/readme.txt\"][unique_id\"aeFieonZZ_fwEYaYo9P9RQAAAAE\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 22:37:34 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (Luxembou ... show more (mod_security) mod_security (id:210350) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (LuxembourgTorNew22.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 18:37:26.743229 2026] [security2:error] [pid 15125:tid 15147] [client 2605:6400:30:f57d:916e:73f8:d5e7:675b:49068] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.condominium-property-management.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.condominium-property-management.com"] [uri "/"] [unique_id "adGSpgvlC_F_4mCuV-LIjAAAAFQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 05:13:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (Luxembou ... show more (mod_security) mod_security (id:210492) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (LuxembourgTorNew22.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 01:13:17.790292 2026] [security2:error] [pid 24669:tid 24669] [client 2605:6400:30:f57d:916e:73f8:d5e7:675b:59910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.darkcodedesign.com"] [uri "/.git/config"] [unique_id "ac9Mbei7eJLwObHN9bwzugAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-03-26 20:34:00 (7 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-11 01:14:15 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (Luxembou ... show more (mod_security) mod_security (id:210492) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (LuxembourgTorNew22.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 21:14:09.259825 2026] [security2:error] [pid 3780:tid 3780] [client 2605:6400:30:f57d:916e:73f8:d5e7:675b:19092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.ridefilmsinc.com"] [uri "/.git/config"] [unique_id "abDB4Y2dQZpUzY0QT4-mcgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-07 16:09:43 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (Luxembou ... show more (mod_security) mod_security (id:210730) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (LuxembourgTorNew22.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 11:09:38.310974 2026] [security2:error] [pid 23689:tid 23689] [client 2605:6400:30:f57d:916e:73f8:d5e7:675b:60870] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lifestylemedica.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lifestylemedica.com"] [uri "/ifestylemedica_db.sql"] [unique_id "aaxNwndbawQb_FiwdRpAPQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 gnom4ik	2026-02-24 09:06:21 (8 months ago)	ban-reviewer auto report; ip=2605:6400:30:f57d:916e:73f8:d5e7:675b; scenario=http:scan; verdict=vali ... show more ban-reviewer auto report; ip=2605:6400:30:f57d:916e:73f8:d5e7:675b; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇺🇸 xmission.com	2026-02-13 15:33:11 (8 months ago)	Blocked by UFW (TCP on 9999) Source port: 35926 Packet length: 80 This report (for 2605:6400:0030:f ... show more Blocked by UFW (TCP on 9999) Source port: 35926 Packet length: 80 This report (for 2605:6400:0030:f57d:916e:73f8:d5e7:675b) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Ping of Death Port Scan
🇺🇸 TPI-Abuse	2026-02-07 14:54:04 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (Luxembou ... show more (mod_security) mod_security (id:210492) triggered by 2605:6400:30:f57d:916e:73f8:d5e7:675b (LuxembourgTorNew22.Quetzalcoatl-relays.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 09:54:01.191477 2026] [security2:error] [pid 22915:tid 22915] [client 2605:6400:30:f57d:916e:73f8:d5e7:675b:41254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.nautanet.info"] [uri "/.git/config"] [unique_id "aYdSCRxkojTh24NDWA7YyQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.247

🇨🇳 42.203.168.5

🇲🇾 202.165.25.206

🇬🇧 193.163.125.83

🇭🇰 165.154.63.157

🇫🇮 147.185.133.209

🇩🇪 128.1.42.111

🇹🇼 111.70.33.194

🇵🇱 94.26.88.90

🇺🇸 66.132.224.40

🇳🇱 45.148.10.240

🇳🇱 45.148.10.157

🇧🇪 35.233.37.218

🇹🇷 194.146.36.192

🇺🇸 193.203.8.70

🇳🇱 193.176.31.199

🇷🇺 188.17.25.194

🇺🇸 129.121.103.53

🇨🇳 119.98.15.227

🇨🇳 115.190.229.67