JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a03:94e0:ffff:185:243:218:0:233

2a03:94e0:ffff:185:243:218:0:233 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 23%: ?

23%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Gigahost AS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56655
Domain Name	gigahost.no
Country	🇳🇴 Norway
City	Sandefjord, Vestfold

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a03:94e0:ffff:185:243:218:0:233

Whois 2a03:94e0:ffff:185:243:218:0:233

IP Abuse Reports for 2a03:94e0:ffff:185:243:218:0:233:

This IP address has been reported a total of 37 times from 7 distinct sources. 2a03:94e0:ffff:185:243:218:0:233 was first reported on December 28th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-01 13:23:30 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 09:23:25.237531 2026] [security2:error] [pid 25427:tid 25427] [client 2a03:94e0:ffff:185:243:218:0:233:55376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bairentang.org"] [uri "/.git/config"] [unique_id "ah2Hzc1Ed8rLwhxuz8XHXAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-01 04:07:51 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 00:07:45.214351 2026] [security2:error] [pid 4920:tid 4920] [client 2a03:94e0:ffff:185:243:218:0:233:46284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.blessedhavenfarm.com"] [uri "/.git/config"] [unique_id "ah0FkclMGy2hW__4RKh2BQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-19 14:53:02 (2 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 37416 Packet length: 80 This report (for 2a03:94e0:ffff:0 ... show more Blocked by UFW (TCP on 8333) Source port: 37416 Packet length: 80 This report (for 2a03:94e0:ffff:0185:0243:0218:0000:0233) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 gnom4ik	2026-05-11 19:25:07 (3 weeks ago)	ban-reviewer auto report; ip=2a03:94e0:ffff:185:243:218:0:233; scenario=http:bruteforce; verdict=val ... show more ban-reviewer auto report; ip=2a03:94e0:ffff:185:243:218:0:233; scenario=http:bruteforce; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-08 10:00:28 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 i ... show more (mod_security) mod_security (id:210730) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 06:00:19.221853 2026] [security2:error] [pid 8335:tid 8335] [client 2a03:94e0:ffff:185:243:218:0:233:37480] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcoincasting.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoincasting.com"] [uri "/.sql"] [unique_id "af20M80jOPRk8wV4zz0IOwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-26 21:59:01 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 i ... show more (mod_security) mod_security (id:210730) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 17:58:55.541480 2026] [security2:error] [pid 22954:tid 22954] [client 2a03:94e0:ffff:185:243:218:0:233:55842] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|theseventhcongregationofladderdayvixens.org\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "theseventhcongregationofladderdayvixens.org"] [uri "/wp-config.backup"] [unique_id "ae6Kn6lj6UgHOuxfJ7dyOQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:03:49 (1 month ago)	2026-04-26 08:00:46,179 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:94e0:ffff:185:243:218 ... show more 2026-04-26 08:00:46,179 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:94e0:ffff:185:243:218:0:233 2026-04-26 12:01:37,151 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:94e0:ffff:185:243:218:0:233 2026-04-26 18:01:34,821 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:94e0:ffff:185:243:218:0:233 2026-04-26 21:01:32,286 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:94e0:ffff:185:243:218:0:233 2026-04-27 00:03:48,317 fail2ban.actions [7718]: NOTICE [tor] Ban 2a03:94e0:ffff:185:243:218:0:233 show less	Brute-Force
🇺🇸 xmission.com	2026-04-26 06:47:06 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 42770 Packet length: 80 This report (for 2a03:94e0:ffff:0 ... show more Blocked by UFW (TCP on 8333) Source port: 42770 Packet length: 80 This report (for 2a03:94e0:ffff:0185:0243:0218:0000:0233) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-18 17:00:58 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 13:00:54.212828 2026] [security2:error] [pid 1948302:tid 1948302] [client 2a03:94e0:ffff:185:243:218:0:233:33578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ambarsolar.com"] [uri "/.git/config"] [unique_id "aeO4xvhCLKBaxF8VyGqcAgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 12:35:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 08:35:37.457833 2026] [security2:error] [pid 14065:tid 14065] [client 2a03:94e0:ffff:185:243:218:0:233:48994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.register-yacht-cayman.com"] [uri "/.git/config"] [unique_id "adOomYC4omLu1jZ9VnaCvgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-06 05:20:59 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 38894 Packet length: 80 This report (for 2a03:94e0:ffff:0 ... show more Blocked by UFW (TCP on 8333) Source port: 38894 Packet length: 80 This report (for 2a03:94e0:ffff:0185:0243:0218:0000:0233) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇹 VHosting	2026-03-27 01:06:53 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-26 05:33:32 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 i ... show more (mod_security) mod_security (id:210730) triggered by 2a03:94e0:ffff:185:243:218:0:233 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 01:32:45.291868 2026] [security2:error] [pid 25456:tid 25456] [client 2a03:94e0:ffff:185:243:218:0:233:41894] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcoinsubscribers.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinsubscribers.com"] [uri "/bitcoinsubs.sql"] [unique_id "acTE_TT6Ne8nYYINL1mrwwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-03-15 22:36:00 (2 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-11 14:23:20 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 38010 Packet length: 80 This report (for 2a03:94e0:ffff:0 ... show more Blocked by UFW (TCP on 8333) Source port: 38010 Packet length: 80 This report (for 2a03:94e0:ffff:0185:0243:0218:0000:0233) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 43.245.249.251

🇦🇹 213.225.38.154

🇩🇪 172.70.243.198

🇩🇪 172.70.243.197

🇨🇳 111.35.229.229

🇮🇹 93.92.76.134

🇨🇳 36.32.70.86

🇫🇮 147.185.133.114

🇮🇳 103.211.38.46

🇭🇰 103.210.237.224

🇱🇹 45.227.254.170

🇻🇳 36.50.177.171

🇰🇷 221.162.175.253

🇯🇵 203.25.124.22

🇹🇷 78.135.105.72

🇺🇸 50.217.255.171

🇺🇸 50.87.144.31

🇺🇸 17.246.15.179

🇹🇼 198.235.24.98

🇹🇳 197.5.145.102