JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a0f:df00:0:255::206

2a0f:df00:0:255::206 was found in our database!

This IP was reported 115 times. Confidence of Abuse is 20%: ?

20%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	KeFF Networks Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41281
Domain Name	keff.org
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a0f:df00:0:255::206

Whois 2a0f:df00:0:255::206

IP Abuse Reports for 2a0f:df00:0:255::206:

This IP address has been reported a total of 115 times from 17 distinct sources. 2a0f:df00:0:255::206 was first reported on October 20th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-01 15:31:54 (2 days ago)	Blocked by UFW (TCP on 8333) Source port: 12403 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 12403 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-17 12:49:27 (2 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 37443 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 37443 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-09 16:31:05 (3 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 42587 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 42587 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-29 14:06:26 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 10:06:19.825919 2026] [security2:error] [pid 32237:tid 32237] [client 2a0f:df00:0:255::206:8199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fernfield.com"] [uri "/wp-config.phpe"] [unique_id "afIQW4MBLrvZX_TO01vjZgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:05:28 (1 month ago)	2026-04-26 08:01:05,880 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::206 2026- ... show more 2026-04-26 08:01:05,880 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::206 2026-04-26 12:01:49,493 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::206 2026-04-26 18:01:47,049 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::206 2026-04-26 21:01:46,388 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::206 2026-04-27 00:05:27,554 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0f:df00:0:255::206 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-26 12:24:18 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 08:24:13.529720 2026] [security2:error] [pid 5824:tid 5840] [client 2a0f:df00:0:255::206:54509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iacsb.com"] [uri "/wp-config.php~"] [unique_id "ae4D7ZjKp4T9frP0H9RBZQAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-24 04:15:18 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 32443 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 32443 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 4server	2026-04-15 16:45:41 (1 month ago)	[WedApr1518:45:38.3738092026][security2:error][pid951919:tid951925][client2a0f:df00:0:255::206:0]Mod ... show more [WedApr1518:45:38.3738092026][security2:error][pid951919:tid951925][client2a0f:df00:0:255::206:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"359\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"www.benvenutialfood.ch\"][uri\"/wp-content/plugins/wp-fastest-cache-premium/readme.txt\"][unique_id\"ad_Aspu72g-7OpWnNzfXXwAAAIQ\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-09 04:01:08 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 00:01:01.228902 2026] [security2:error] [pid 3429183:tid 3429183] [client 2a0f:df00:0:255::206:60761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.billiardlifetapleague.com"] [uri "/.git/config"] [unique_id "adckffWLWbSoDkuAUIdCWgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-04 08:55:08 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 45097 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 45097 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-15 05:40:10 (2 months ago)	Blocked by UFW (TCP on 9999) Source port: 39685 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 9999) Source port: 39685 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Ping of Death
🇳🇱 i-turnradio.nl	2026-03-11 13:41:30 (2 months ago)	2026-03-11 14:41:30 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇺🇸 xmission.com	2026-03-09 08:32:24 (2 months ago)	Blocked by UFW (TCP on 9999) Source port: 11905 Packet length: 72 This report (for 2a0f:df00:0000:0 ... show more Blocked by UFW (TCP on 9999) Source port: 11905 Packet length: 72 This report (for 2a0f:df00:0000:0255:0000:0000:0000:0206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Ping of Death
🇺🇸 TPI-Abuse	2026-03-09 04:14:32 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 00:14:26.372734 2026] [security2:error] [pid 28856:tid 28856] [client 2a0f:df00:0:255::206:48153] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|geckoturner.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "geckoturner.com"] [uri "/dbrner.sql"] [unique_id "aa5JIkPlFTfCo5-sJ91bTgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-09 01:41:31 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::206 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 21:41:25.469252 2026] [security2:error] [pid 3687:tid 3687] [client 2a0f:df00:0:255::206:36589] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mobileonlinecasinos.co\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mobileonlinecasinos.co"] [uri "/dbmobileonlinecasinos.sql"] [unique_id "aa4lRat7s2wHTipM7HbIEAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 204.168.213.65

🇨🇳 120.48.124.176

🇮🇩 103.59.94.117

🇰🇿 91.229.149.158

🇹🇷 195.85.201.247

🇵🇷 154.64.212.138

🇺🇸 143.198.110.2

🇰🇷 115.68.208.117

🇺🇸 104.232.79.58

🇮🇳 103.251.31.26

🇷🇼 102.22.169.115

🇸🇬 94.231.206.10

🇰🇿 92.47.182.63

🇧🇪 74.125.47.24

🇮🇳 66.116.199.98

🇮🇳 64.227.161.198

🇮🇩 223.25.110.76

🇰🇬 212.241.29.24

🇧🇷 189.51.43.54

🇺🇿 185.213.230.24