JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2a12:3200:1003:7::b4

Recent Activity IPv6 SLAAC Note

Abuse confidence score ?

31% Elevated

27 reports

4 reporters · latest 2 days ago

ISP	ZetServers RO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS25198
Domain Name	zetservers.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2a12:3200:1003:7::b4

Export CSV

This IP address has been reported a total of 27 times from 4 distinct sources. 2a12:3200:1003:7::b4 was first reported on October 13th 2026, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: United States of America with 24 reports; Austria with 1 report; Germany with 1 report. The most common categories in these recent reports were: Web App Attack 27 times; Bad Web Bot 25 times; Brute-Force 24 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-16 09:55:04 (2 days ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a12:3200:1003:7::b4 - - [16/Oct/2026:11:54:51 +0200] "GET /.git/info/refs?service=git-upload-pack HTTP/2.0" 301 554 "-" "git/2.53.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 08:42:31 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 04:42:25.090368 2026] [security2:error] [pid 4599:tid 4599] [client 2a12:3200:1003:7::b4:41070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newmooncafe.com"] [uri "/.git/info/refs"] [unique_id "atHjccUXsNLDYvw3JGd2VgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 06:57:55 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 02:57:49.582149 2026] [security2:error] [pid 19703:tid 19703] [client 2a12:3200:1003:7::b4:37688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.joharchi.com"] [uri "/.git/info/refs"] [unique_id "atHK7cgxIeMr3WlctRsSbwAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 06:26:27 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 02:26:22.969306 2026] [security2:error] [pid 21106:tid 21106] [client 2a12:3200:1003:7::b4:41036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hppagewideflorida.com"] [uri "/.git/info/refs"] [unique_id "atHDjianqNZrbQWIQbWj4gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 05:58:17 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:58:10.022214 2026] [security2:error] [pid 19243:tid 19243] [client 2a12:3200:1003:7::b4:39812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gpahomeinspections.com"] [uri "/.git/info/refs"] [unique_id "atG88krw_4hjdj_BB2dTYwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-10-16 02:45:14 (3 days ago)	Try to access /arrangementen/.git/info/refs?service=git-upload-pack	Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 00:43:04 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:42:56.948883 2026] [security2:error] [pid 5584:tid 5584] [client 2a12:3200:1003:7::b4:55084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.title48.com"] [uri "/.git/info/refs"] [unique_id "atFzEB2sbnqr2kz951cJTAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 René Hickersberger	2026-10-15 22:56:42 (3 days ago)	malicious bot detected: violations="hit-honeypot"; user_agent="git/2.53.0"	Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 21:11:50 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 17:11:43.613893 2026] [security2:error] [pid 11315:tid 11315] [client 2a12:3200:1003:7::b4:45770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mmailbox.com"] [uri "/.git/info/refs"] [unique_id "atFBjzCax5lo-XdxWbTvnQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 16:23:16 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:23:09.256653 2026] [security2:error] [pid 31853:tid 31865] [client 2a12:3200:1003:7::b4:35546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.certifiedecommerceconsultant.com"] [uri "/.git/info/refs"] [unique_id "atD97UhaDxXK_25ILJpKwQAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 15:06:49 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:06:43.849768 2026] [security2:error] [pid 26353:tid 26353] [client 2a12:3200:1003:7::b4:38972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anthonyanimalclinic.net"] [uri "/.git/info/refs"] [unique_id "atDsA_dqINtfwEiD3IN5DwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 08:15:32 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:15:27.201461 2026] [security2:error] [pid 26020:tid 26020] [client 2a12:3200:1003:7::b4:38820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "margroberts.com"] [uri "/.git/info/refs"] [unique_id "atCLn22svnx9u4J2DK2fjgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 13:24:52 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 09:24:47.926193 2026] [security2:error] [pid 9182:tid 9182] [client 2a12:3200:1003:7::b4:57714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildlifetaxidermy.com"] [uri "/.git/info/refs"] [unique_id "as-Cn-Kiz8tt2d21GK0yfwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 12:36:57 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:36:52.663033 2026] [security2:error] [pid 3015:tid 3015] [client 2a12:3200:1003:7::b4:49606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "levijoneslegal.com"] [uri "/.git/info/refs"] [unique_id "as93ZDhF2NPRkh6dfmLwkAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 10:37:06 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 2a12:3200:1003:7::b4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:36:59.299176 2026] [security2:error] [pid 7490:tid 7490] [client 2a12:3200:1003:7::b4:53680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.woahmanatee.com"] [uri "/.git/info/refs"] [unique_id "as9bSwL0gytseUI55SCwOAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇹 85.240.193.104

🇴🇲 37.40.91.112

🇳🇱 35.204.197.107

🇺🇸 35.194.25.170

🇺🇸 206.232.3.123

🇺🇸 204.48.30.138

🇧🇪 198.235.24.206

🇹🇼 198.235.24.39

🇨🇳 183.230.9.103

🇺🇸 132.196.86.92

🇳🇬 105.112.213.208

🇧🇬 78.128.112.30

🇬🇧 45.82.76.130

🇫🇷 15.237.101.66

🇷🇴 2.57.121.112

🇺🇸 206.232.1.149

🇺🇸 172.169.249.200

🇺🇸 155.94.129.198

🇫🇷 146.70.194.254

🇧🇷 118.26.105.52