JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a06:1700:0:12::1

2a06:1700:0:12::1 was found in our database!

This IP was reported 158 times. Confidence of Abuse is 3%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	FlokiNET ehf
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200651
Hostname(s)	bucarest01.tor-exit.artikel10.org
Domain Name	flokinet.is
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a06:1700:0:12::1

Whois 2a06:1700:0:12::1

IP Abuse Reports for 2a06:1700:0:12::1:

This IP address has been reported a total of 158 times from 19 distinct sources. 2a06:1700:0:12::1 was first reported on December 7th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-20 10:53:25 (1 week ago)	Blocked by UFW (TCP on 8333) Source port: 13756 Packet length: 80 This report (for 2a06:1700:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 13756 Packet length: 80 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-09 16:06:53 (3 weeks ago)	Blocked by UFW (TCP on 60134) Source port: 9006 Packet length: 608 This report (for 2a06:1700:0000: ... show more Blocked by UFW (TCP on 60134) Source port: 9006 Packet length: 608 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-09 03:21:43 (3 weeks ago)	Blocked by UFW (TCP on 38562) Source port: 9001 Packet length: 608 This report (for 2a06:1700:0000: ... show more Blocked by UFW (TCP on 38562) Source port: 9001 Packet length: 608 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-08 12:29:14 (3 weeks ago)	Blocked by UFW (TCP on 39344) Source port: 9005 Packet length: 608 This report (for 2a06:1700:0000: ... show more Blocked by UFW (TCP on 39344) Source port: 9005 Packet length: 608 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-08 00:02:10 (3 weeks ago)	Blocked by UFW (TCP on 40654) Source port: 9002 Packet length: 608 This report (for 2a06:1700:0000: ... show more Blocked by UFW (TCP on 40654) Source port: 9002 Packet length: 608 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-07 06:08:09 (3 weeks ago)	Blocked by UFW (TCP on 50302) Source port: 9003 Packet length: 608 This report (for 2a06:1700:0000: ... show more Blocked by UFW (TCP on 50302) Source port: 9003 Packet length: 608 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-06 15:56:53 (3 weeks ago)	Blocked by UFW (TCP on 37958) Source port: 9005 Packet length: 608 This report (for 2a06:1700:0000: ... show more Blocked by UFW (TCP on 37958) Source port: 9005 Packet length: 608 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-06 03:30:51 (3 weeks ago)	Blocked by UFW (TCP on 60118) Source port: 9003 Packet length: 608 This report (for 2a06:1700:0000: ... show more Blocked by UFW (TCP on 60118) Source port: 9003 Packet length: 608 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-10 02:06:53 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 10070 Packet length: 80 This report (for 2a06:1700:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 10070 Packet length: 80 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-02 19:28:50 (1 month ago)	Blocked by UFW (TCP on 8333) Source port: 25942 Packet length: 80 This report (for 2a06:1700:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 25942 Packet length: 80 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-26 13:49:55 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::1 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::1 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 09:49:44.536002 2026] [security2:error] [pid 6803:tid 6803] [client 2a06:1700:0:12::1:57040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.efsews.com"] [uri "/.git/config"] [unique_id "ahWk-K-2PYzjR1PGNtBQVgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-16 12:38:48 (3 months ago)	Blocked by UFW (TCP on 8333) Source port: 47616 Packet length: 80 This report (for 2a06:1700:0000:0 ... show more Blocked by UFW (TCP on 8333) Source port: 47616 Packet length: 80 This report (for 2a06:1700:0000:0012:0000:0000:0000:0001) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-09 14:11:22 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::1 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::1 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 10:11:13.216283 2026] [security2:error] [pid 442:tid 442] [client 2a06:1700:0:12::1:51180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|capitalswisscorp.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/p_com.sql"] [unique_id "af9Agd9VfUK88Lxch7fbfwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-09 01:40:40 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::1 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::1 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 21:40:32.451140 2026] [security2:error] [pid 18554:tid 18554] [client 2a06:1700:0:12::1:32638] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mobileonlinecasinos.co\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mobileonlinecasinos.co"] [uri "/db_nlinecasinos.sql"] [unique_id "aa4lEG3NFgcm-ztW8_FQ2QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-08 04:17:09 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::1 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::1 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 23:17:03.387155 2026] [security2:error] [pid 25937:tid 25937] [client 2a06:1700:0:12::1:36714] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|climasyequipos.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "climasyequipos.com"] [uri "/syequipos_com.sql"] [unique_id "aaz4Pzu9mbgyfFVmL0H31wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 158 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 152.32.236.116

🇺🇸 85.209.207.78

🇺🇸 66.132.172.227

🇺🇸 35.227.64.102

🇨🇳 220.181.108.105

🇩🇪 194.88.98.106

🇨🇱 190.107.177.233

🇨🇳 183.50.39.195

🇺🇸 165.22.2.226

🇸🇬 143.198.91.40

🇺🇸 47.88.48.113

🇬🇧 35.203.210.77

🇯🇵 8.209.237.111

🇺🇸 172.203.211.238

🇭🇰 123.58.213.118

🇹🇭 45.194.70.251

🇺🇦 2.57.207.245

🇰🇷 211.223.41.90

🇨🇳 119.98.248.85

🇨🇳 117.135.84.41