JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2a12:a800:2:1:45:138:16:231

2a12:a800:2:1:45:138:16:231 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 0%: ?

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	as210558.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2a12:a800:2:1:45:138:16:231

Whois 2a12:a800:2:1:45:138:16:231

IP Abuse Reports for 2a12:a800:2:1:45:138:16:231:

This IP address has been reported a total of 137 times from 21 distinct sources. 2a12:a800:2:1:45:138:16:231 was first reported on January 16th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-08 09:01:44 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:01:36.948252 2026] [security2:error] [pid 15628:tid 15628] [client 2a12:a800:2:1:45:138:16:231:26528] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|customhumanrobots.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "customhumanrobots.com"] [uri "/customhuman.sql"] [unique_id "af2mcKVnCgHIs58wthz_LQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 07:53:18 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 03:53:14.485256 2026] [security2:error] [pid 7468:tid 7468] [client 2a12:a800:2:1:45:138:16:231:30298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-boat-germany.com.boatregistrationdelaware.com"] [uri "/.git/config"] [unique_id "afBnaonZ5UZ3aN2fXXIvSQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 21:05:37 (2 months ago)	2026-04-26 08:01:08,272 fail2ban.actions [7718]: NOTICE [tor] Ban 2a12:a800:2:1:45:138:16:23 ... show more 2026-04-26 08:01:08,272 fail2ban.actions [7718]: NOTICE [tor] Ban 2a12:a800:2:1:45:138:16:231 2026-04-26 12:01:50,867 fail2ban.actions [7718]: NOTICE [tor] Ban 2a12:a800:2:1:45:138:16:231 2026-04-26 18:01:48,387 fail2ban.actions [7718]: NOTICE [tor] Ban 2a12:a800:2:1:45:138:16:231 2026-04-26 21:01:47,757 fail2ban.actions [7718]: NOTICE [tor] Ban 2a12:a800:2:1:45:138:16:231 2026-04-27 00:05:36,523 fail2ban.actions [7718]: NOTICE [tor] Ban 2a12:a800:2:1:45:138:16:231 show less	Brute-Force
🇺🇸 xmission.com	2026-04-22 09:59:12 (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 45630 Packet length: 80 This report (for 2a12:a800:0002:0 ... show more Blocked by UFW (TCP on 8333) Source port: 45630 Packet length: 80 This report (for 2a12:a800:0002:0001:0045:0138:0016:0231) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-14 01:55:36 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 21:55:31.312116 2026] [security2:error] [pid 453314:tid 453332] [client 2a12:a800:2:1:45:138:16:231:24554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.deathconfusion.com"] [uri "/.git/config"] [unique_id "ad2ek2wjDskRTJHNDIDNnwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-02 17:57:20 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 13:57:13.753467 2026] [security2:error] [pid 27997:tid 27997] [client 2a12:a800:2:1:45:138:16:231:53012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.gallodestinationservices.com"] [uri "/.git/config"] [unique_id "ac6t-Zl4nRCI-ZXCbGnlBwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 04:49:03 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 00:48:55.266513 2026] [security2:error] [pid 19394:tid 19394] [client 2a12:a800:2:1:45:138:16:231:18454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lamineparke.chevronparkett.com"] [uri "/.env"] [unique_id "actSN4xqrS_tXIw6SosmCgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-03-27 01:06:53 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇫🇮 wpwoodo	2026-03-21 22:30:35 (3 months ago)	Webpage crawler	Bad Web Bot
🇺🇸 ipblock.com	2026-03-14 22:59:00 (3 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-05 13:28:10 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 2a12:a800:2:1:45:138:16:231 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 08:28:06.081350 2026] [security2:error] [pid 22283:tid 22283] [client 2a12:a800:2:1:45:138:16:231:28628] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aboutagingparents.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aboutagingparents.com"] [uri "/rents_wp1.sql"] [unique_id "aamE5sXcO7Q9dgZNHpFUQQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 wsyq	2026-02-26 01:27:32 (4 months ago)	Fail2Ban - \[POSTFIX\]Dropped in one of \{SASL AUTH\},\{RBL\},\{DDOS\(PREGREET\)\},\{TWO MANY ERRORS ... show more Fail2Ban - \[POSTFIX\]Dropped in one of \{SASL AUTH\},\{RBL\},\{DDOS\(PREGREET\)\},\{TWO MANY ERRORS\},\{ADDRESS REJECTED\} ... show less	Hacking Spoofing
🇺🇸 xmission.com	2026-02-21 21:50:36 (4 months ago)	Blocked by UFW (TCP on 8333) Source port: 50566 Packet length: 80 This report (for 2a12:a800:0002:0 ... show more Blocked by UFW (TCP on 8333) Source port: 50566 Packet length: 80 This report (for 2a12:a800:0002:0001:0045:0138:0016:0231) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Hobby Bob	2026-02-19 19:08:57 (4 months ago)	Feb 19 19:08:56 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 0 s ... show more Feb 19 19:08:56 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=2a12:a800:2:1:45:138:16:231, lip=X.X.X.X session= show less	Port Scan Hacking
🇺🇸 xmission.com	2026-02-14 01:51:01 (4 months ago)	Blocked by UFW (TCP on 9999) Source port: 48168 Packet length: 80 This report (for 2a12:a800:0002:0 ... show more Blocked by UFW (TCP on 9999) Source port: 48168 Packet length: 80 This report (for 2a12:a800:0002:0001:0045:0138:0016:0231) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Ping of Death Port Scan

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 158.178.228.74

🇳🇱 89.21.67.148

🇺🇸 35.253.196.217

🇺🇸 34.135.200.178

🇺🇸 216.73.160.29

🇺🇸 207.210.135.162

🇨🇴 190.250.230.235

🇧🇩 103.183.16.78

🇳🇱 81.19.216.121

🇺🇸 69.49.112.74

🇩🇪 69.5.169.19

🇰🇷 59.12.245.176

🇬🇧 35.203.210.248

🇺🇸 2600:3c01::2000:e7ff:fe43:358f

🇬🇧 195.96.139.149

🇬🇧 188.240.59.7

🇺🇸 173.255.223.103

🇺🇸 136.66.199.194

🇵🇱 109.205.211.91

🇸🇬 47.84.106.14