JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0f:df00:0:255::194

2a0f:df00:0:255::194 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 20%: ?

20%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	KeFF Networks Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41281
Domain Name	keff.org
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0f:df00:0:255::194

Whois 2a0f:df00:0:255::194

IP Abuse Reports for 2a0f:df00:0:255::194:

This IP address has been reported a total of 147 times from 19 distinct sources. 2a0f:df00:0:255::194 was first reported on December 8th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-15 09:27:02 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:26:54.619605 2026] [security2:error] [pid 2525:tid 2525] [client 2a0f:df00:0:255::194:1201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.bandpd.com"] [uri "/.git/config"] [unique_id "ai_FXgegQ64TxWaKNZZ1qgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-14 05:46:05 (2 days ago)	Blocked by UFW (TCP on 8333) Source port: 34791 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 34791 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-05 17:40:08 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 13:39:58.655141 2026] [security2:error] [pid 28873:tid 28873] [client 2a0f:df00:0:255::194:5005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.43cambridge.com"] [uri "/.git/config"] [unique_id "aiMJ7myjXe_bhMfmrDnFhgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 13:55:23 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 09:55:12.151797 2026] [security2:error] [pid 25498:tid 25498] [client 2a0f:df00:0:255::194:44915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.noscentpro.com"] [uri "/.git/config"] [unique_id "aiLVQPq9AQ8KISmsFrbNzgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 11:05:11 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:04:59.068552 2026] [security2:error] [pid 14281:tid 14349] [client 2a0f:df00:0:255::194:37105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.kd2lst.us"] [uri "/.git/config"] [unique_id "aiKtW-DuRMd-f9do3ou3NQAAAIk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 06:21:38 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 02:21:28.328287 2026] [security2:error] [pid 3797:tid 3797] [client 2a0f:df00:0:255::194:44765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.pattenden.com"] [uri "/.git/config"] [unique_id "ahU76KfI1q7uH88_pd8YvgAAADE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-20 11:18:29 (3 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 57805 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 57805 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-11 15:11:49 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 55723 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 55723 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-26 21:05:25 (1 month ago)	2026-04-26 08:01:05,082 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::194 2026- ... show more 2026-04-26 08:01:05,082 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::194 2026-04-26 12:01:49,035 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::194 2026-04-26 18:01:46,582 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::194 2026-04-26 21:01:45,909 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::194 2026-04-27 00:05:23,962 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::194 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-25 20:34:59 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 16:34:53.719203 2026] [security2:error] [pid 9771:tid 9771] [client 2a0f:df00:0:255::194:43029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayareamustangs.com"] [uri "/wp-config.php.backup.txt"] [unique_id "ae0lbe7HjHjC4bgRKhO_ygAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-23 13:58:36 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 09:58:28.670541 2026] [security2:error] [pid 18705:tid 18705] [client 2a0f:df00:0:255::194:30295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.adultshop61.net"] [uri "/.git/config"] [unique_id "acFHBOQNCq4YZ8swLCxLngAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-22 04:49:03 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::194 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 00:48:51.850213 2026] [security2:error] [pid 27367:tid 27367] [client 2a0f:df00:0:255::194:61119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.mchen-arch.com"] [uri "/.git/config"] [unique_id "ab90s2RI6jFcpxczcrxDoQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-03-17 06:54:00 (2 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-08 17:17:17 (3 months ago)	Blocked by UFW (TCP on 8333) Source port: 37703 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 37703 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-06 19:46:20 (3 months ago)	Blocked by UFW (TCP on 8333) Source port: 41937 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 41937 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 197.60.3.241

🇲🇲 136.228.161.66

🇺🇸 13.219.1.233

🇺🇸 2607:f8b0:4004:1000::122

🇫🇮 2001:708:1f:903:9999::119

🇺🇸 2001:470:1:c84::18

🇺🇸 205.233.42.156

🇬🇧 198.244.226.104

🇲🇦 196.127.188.190

🇺🇸 193.202.81.204

🇩🇪 193.124.20.233

🇺🇸 191.102.163.147

🇵🇱 185.241.208.74

🇳🇱 185.223.235.43

🇨🇳 182.127.46.167

🇮🇳 157.41.240.200

🇺🇸 151.240.67.114

🇺🇸 65.49.1.151

🇺🇦 62.182.85.212

🇨🇳 58.221.60.25