JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a06:1700:0:12::4

2a06:1700:0:12::4

Recent Activity IPv6 SLAAC Note

136 reports found in our database

12% ▲ ▲ ▲ Caution

Abuse confidence score ?

ISP

FlokiNET ehf

Usage Type

Data Center/Web Hosting/Transit

ASN

AS200651

Hostname(s)

bucarest01.tor-exit.artikel10.org

Domain Name

flokinet.is

Country

🇷🇴 Romania

City

Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a06:1700:0:12::4:

This IP address has been reported a total of 136 times from 19 distinct sources. 2a06:1700:0:12::4 was first reported on October 30th 2022, and the most recent report was 1 day ago. In the last 60 days, the only reporter location was: United States of America with 9 reports. The most common categories in these recent reports were: Port Scan 8 times; Bad Web Bot 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-02-07 11:28:48 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 07 06:28:41.329618 2025] [security2:error] [pid 25227:tid 25227] [client 2a06:1700:0:12::4:33212] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|genevainvestors.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "genevainvestors.com"] [uri "/estors_2023.sql"] [unique_id "Z6XuaYviT38xw-UFcL4X1wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-02-01 05:15:00 (1 year ago)	Triggered Cloudflare WAF (securitylevel) from T1. Action taken: MANAGED_CHALLENGE ASN: 200651 (FLOKI ... show more Triggered Cloudflare WAF (securitylevel) from T1. Action taken: MANAGED_CHALLENGE ASN: 200651 (FLOKINET) Protocol: HTTP/2 (GET method) Endpoint: /fonts/CascadiaCode-2111.01/woff2/CascadiaMono.woff2 Timestamp: 2025-02-01T03:56:29Z Ray ID: 90af030c5fb2624d UA: Mozilla/5.0 (Android 10; Mobile; rv:128.0) Gecko/128.0 Firefox/128.0 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Mehmet_The_Script_Kiddie	2025-01-17 03:13:57 (1 year ago)	CloudFlare WAF REPORT: /unzipper.php	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-23 16:10:16 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 23 11:10:11.492701 2024] [security2:error] [pid 21594:tid 21594] [client 2a06:1700:0:12::4:53854] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.eliteelectricalservices.us\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.eliteelectricalservices.us"] [uri "/elit.sql"] [unique_id "Z0H-Y5JEGtSV2L9XUUFB8AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-20 02:29:43 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 21:29:38.132648 2024] [security2:error] [pid 19414:tid 19542] [client 2a06:1700:0:12::4:29264] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.pennassociatenotary.com"] [uri "/.git/config"] [unique_id "Zz1Jkt_tLHzjWUvVzJ2QCAAAAhE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-11 23:21:51 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 18:21:44.868184 2024] [security2:error] [pid 24903:tid 24903] [client 2a06:1700:0:12::4:24664] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.backyardtossers.com"] [uri "/.git/config"] [unique_id "ZzKRiIwv5i_-fvQwV7D0BgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2024-09-07 01:06:07 (2 years ago)		Web App Attack
🇺🇸 TPI-Abuse	2024-09-05 11:34:02 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 05 07:33:54.761811 2024] [security2:error] [pid 2164640:tid 2164743] [client 2a06:1700:0:12::4:11184] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ward-bergerhouse.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ward-bergerhouse.org"] [uri "/erhouse.sql"] [unique_id "ZtmXIjcVx5khIpSJStq9QgAAARE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-29 02:50:30 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 28 22:50:21.849110 2024] [security2:error] [pid 31366:tid 31387] [client 2a06:1700:0:12::4:10968] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.michaelrandon.com"] [uri "/.git/config"] [unique_id "Zs_h7Xks2CutsEZ4xyojDQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-18 04:17:43 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 18 00:17:36.541264 2024] [security2:error] [pid 16271:tid 16271] [client 2a06:1700:0:12::4:47806] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.wendeenicole.com"] [uri "/.git/config"] [unique_id "ZsF14IkQlrxzCgO51Yo5PQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-14 23:00:27 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210730) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 14 19:00:20.110265 2024] [security2:error] [pid 3498857:tid 3498908] [client 2a06:1700:0:12::4:42062] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|boraozbek.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "boraozbek.com"] [uri "/mailto:[email protected]"] [unique_id "Zr03BMrrf_Gk3UadalBv7wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-11 04:35:59 (2 years ago)	(mod_security) mod_security (id:234930) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:234930) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 11 00:35:54.070935 2024] [security2:error] [pid 14251:tid 14251] [client 2a06:1700:0:12::4:27764] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.mavikalem.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.mavikalem.org"] [uri "/en/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Zrg_qnjL_u2gVDTAs5STUwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-05 23:54:06 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 19:53:59.809186 2024] [security2:error] [pid 10488:tid 10488] [client 2a06:1700:0:12::4:15202] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.rejuvenationsystems.com"] [uri "/.git/config"] [unique_id "ZrFmF5ubL0i7u8KdYoDxmwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-30 10:33:56 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 30 06:33:47.378156 2024] [security2:error] [pid 1887:tid 1887] [client 2a06:1700:0:12::4:46722] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.hamiltoncountyuca.org"] [uri "/.git/config"] [unique_id "ZqjBi_Ad6Pm7-aTfU_9izQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-30 07:37:01 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel1 ... show more (mod_security) mod_security (id:210492) triggered by 2a06:1700:0:12::4 (bucarest01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 30 03:36:55.310015 2024] [security2:error] [pid 4154:tid 4154] [client 2a06:1700:0:12::4:7446] [client 2a06:1700:0:12::4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.atomicmc.com"] [uri "/.git/config"] [unique_id "ZqiYF9bQFRyZLjWq0Otl9QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 91 to 105 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.57.196.249

🇹🇭 165.154.120.253

🇭🇰 119.12.166.227

🇻🇳 115.76.123.134

🇺🇸 103.196.9.78

🇺🇸 91.230.168.148

🇳🇱 89.21.67.163

🇩🇪 69.5.169.16

🇺🇸 64.62.197.42

🇺🇸 64.62.156.21

🇨🇳 58.19.142.250

🇻🇳 42.112.202.234

🇩🇪 23.88.47.15

🇺🇸 4.249.16.164

🇨🇳 220.202.112.232

🇨🇳 220.197.85.184

🇺🇸 199.7.163.33

🇹🇳 196.237.241.201

🇺🇸 142.93.2.85

🇨🇳 125.94.109.237