JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

196.6.106.112

Recent Activity

Abuse confidence score ?

44% Elevated

14 reports

12 reporters · latest 10 hours ago

ISP	Oxygn ISP (PTY) LTD
Usage Type	Fixed Line ISP
ASN	AS327761
Domain Name	oxygn.co.za
Country	🇿🇦 South Africa
City	KwaDukuza, KwaZulu-Natal

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 196.6.106.112

Export CSV

This IP address has been reported a total of 14 times from 12 distinct sources. 196.6.106.112 was first reported on May 27th 2026, and the most recent report was 10 hours ago. In the last 60 days, the top reporter locations were: Germany with 5 reports; Netherlands with 2 reports; Australia with 1 report. The most common categories in these recent reports were: Bad Web Bot 11 times; Web App Attack 7 times; Hacking 2 times; Brute-Force 1 time; DDoS Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-13 06:08:51 (10 hours ago)	Abusive crawler \| ua: SA-ZA-Accessibility-Collector/1.0 (+research; polite crawl) \| path: /contact, ... show more Abusive crawler \| ua: SA-ZA-Accessibility-Collector/1.0 (+research; polite crawl) \| path: /contact, /contact/ \| 2026-10-13 06:08 UTC show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-10-11 04:20:19 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2026-10-11 04:15:28 (2 days ago)	2026/10/11 06:15:27 [error] 51381#932850: 68176 limiting requests, excess: 0.997 by zone "crawler", ... show more 2026/10/11 06:15:27 [error] 51381#932850: 68176 limiting requests, excess: 0.997 by zone "crawler", client: 196.6.106.112, server: ksol.io, request: "GET /.well-known/.go-away/assets/static/anubis/style.css?cacheBust=htCR-3iztXhHr7UQeIwSow HTTP/2.0", host: "ksol.io", referrer: "https://ksol.io/?__goaway_challenge=cookie&__goaway_id=56670a09a77b0f935011189627756edc" ... show less	Bad Web Bot
🇩🇪 LRob	2026-09-23 23:03:05 (2 weeks ago)	This address crawls our sites under a User-Agent that belongs to a known abusive scraper, or under a ... show more This address crawls our sites under a User-Agent that belongs to a known abusive scraper, or under a placeholder identity no legitimate software uses. Such crawlers load servers with automated requests nobody asked for and often harvest content or e-mail addresses; blocked. Please check what runs on this address. \| ua: SA-ZA-Accessibility-Collector/1.0 (+research; polite crawl) \| path: / \| 2026-09-23 23:03 UTC show less	Bad Web Bot
🇮🇩 securejdprop	2026-09-15 06:11:27 (4 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent.	Hacking Web App Attack Bad Web Bot
🇷🇺 ago.su	2026-09-15 06:07:47 (4 weeks ago)	F2B blocked nginx activity control ddos v1 [otd]	DDoS Attack
🇦🇺 2000cn.com.au	2026-09-14 01:50:47 (4 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-09-13 16:20:12 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
Anonymous	2026-09-12 05:03:29 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇨🇭 Origon	2026-09-09 06:25:57 (1 month ago)	http-bad-user-agent - IP: 196.6.106.112 - time="2026-09-09T08:25:57+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 196.6.106.112 - time="2026-09-09T08:25:57+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 196.6.106.112 (ZA/327761) : 4h ban on Ip 196.6.106.112" module=db show less	Bad Web Bot
🇪🇸 el-brujo	2026-09-08 23:24:37 (1 month ago)	196.6.106.112 - - [09/Sep/2026:01:24:36 +0200] "GET /contact HTTP/2.0" 404 15954 "-" "A11y-SA-Globil ... show more 196.6.106.112 - - [09/Sep/2026:01:24:36 +0200] "GET /contact HTTP/2.0" 404 15954 "-" "A11y-SA-Globility-Index/1.0 (location backfill; [email protected])" 196.6.106.112 - - [09/Sep/2026:01:24:37 +0200] "GET /about-us HTTP/2.0" 404 15954 "-" "A11y-SA-Globility-Index/1.0 (location backfill; [email protected])" 196.6.106.112 - - [09/Sep/2026:01:24:37 +0200] "GET /find-us HTTP/2.0" 404 15954 "-" "A11y-SA-Globility-Index/1.0 (location backfill; [email protected])" 196.6.106.112 - - [09/Sep/2026:01:24:37 +0200] "GET /contact-us HTTP/2.0" 404 15954 "-" "A11y-SA-Globility-Index/1.0 (location backfill; [email protected])" ... show less	Web App Attack Hacking
🇫🇷 LRob	2026-09-08 10:40:59 (1 month ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: SA-ZA-Acc ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: SA-ZA-Accessibility-Collector/1.0 (+research; polite crawl) \| path: / \| 2026-09-08 10:40 UTC show less	Bad Web Bot
🇩🇪 Philister11	2026-08-30 00:42:11 (1 month ago)	CrowdSec: crowdsecurity/http-bad-user-agent (ZA/AS327761)	Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 5b730afc-5cec-4742-843f-18085cc64e5c	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 103.244.173.17

🇧🇩 202.40.187.160

🇸🇬 172.71.124.89

🇨🇳 118.212.123.173

🇨🇳 117.33.238.13

🇰🇭 111.90.180.172

🇨🇳 110.248.184.210

🇺🇸 107.150.104.16

🇺🇸 104.23.190.104

🇨🇦 85.217.149.20

🇧🇪 35.187.18.132

🇩🇪 2400:cb00:933:1000:d48c:6e57:5bb7:31b7

🇬🇧 172.68.229.189

🇩🇪 162.158.111.130

🇺🇸 136.112.241.52

🇵🇭 119.94.14.21

🇹🇼 111.70.39.216

🇳🇱 45.148.10.152

🇳🇱 45.148.10.141

🇸🇬 34.124.182.217