JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2001:67c:289c:2::234

Recent Activity IPv6 SLAAC Note

Abuse Confidence Score

3% Caution

102 reports

17 reporters · latest 2 days ago

ISP: Foreningen for digitala fri- och rattigheter
Usage Type: Fixed Line ISP
ASN: AS198093
Domain Name: dfri.net
Country: 🇸🇪 Sweden
City: Stockholm, Stockholm

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

102 from 17 distinct reporters

First reported

December 28th 2022

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 1

Most common categories Web App Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 expandmade.com	2026-11-06 18:03:44 UTC · (2 days ago)	unauthorized rest api call [06/Nov/2026:18:03:44 "GET /wp-json"]	Web App Attack
🇺🇸 ipblock.com	2026-09-09 09:04:00 UTC · (1 month ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-16 17:03:25 UTC · (2 months ago)	Blocked by UFW (TCP on 58360) Source port: 443 Packet length: 96 This report (for 2001:067c:289c:0002:0000:0000:0000:0234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇨🇭 Peter-Johann Sarbach	2026-08-02 04:26:14 UTC · (3 months ago)	Aug 01 06:47:46 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher (no auth attempts in 0 secs): user=<>, rip=2001:67c:289c:2::234, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: ... show more Aug 01 06:47:46 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher (no auth attempts in 0 secs): user=<>, rip=2001:67c:289c:2::234, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher Aug 01 06:50:20 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher (no auth attempts in 1 secs): user=<>, rip=2001:67c:289c:2::234, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher show less	Hacking
🇺🇸 xmission.com	2026-07-21 17:15:02 UTC · (3 months ago)	Blocked by UFW (TCP on 38674) Source port: 443 Packet length: 2289 This report (for 2001:067c:289c:0002:0000:0000:0000:0234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 TPI-Abuse	2026-06-15 22:12:23 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:2::234 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 18:12:12.140665 2026] [security2:error] [pid 27702:tid 27702] ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:2::234 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 18:12:12.140665 2026] [security2:error] [pid 27702:tid 27702] [client 2001:67c:289c:2::234:38516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.soundtrax.net"] [uri "/.git/config"] [unique_id "ajB4vFYbSfUDq0mwRvbUjQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-14 05:16:25 UTC · (4 months ago)	Blocked by UFW (TCP on 8333) Source port: 56406 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-05-28 08:09:42 UTC · (5 months ago)	Blocked by UFW (TCP on 9999) Source port: 34274 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Ping of Death
🇺🇸 xmission.com	2026-05-15 21:26:48 UTC · (5 months ago)	Blocked by UFW (TCP on 8333) Source port: 11482 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-05-07 04:46:50 UTC · (6 months ago)	Blocked by UFW (TCP on 8333) Source port: 8572 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2026-04-26 21:01:29 UTC · (6 months ago)	2026-04-26 08:00:23,668 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:2::234 2026-04-26 12:01:23,370 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:2::234 2026-04-26 18:01:21,113 fail2ban.actions [7718]: NOTI ... show more 2026-04-26 08:00:23,668 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:2::234 2026-04-26 12:01:23,370 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:2::234 2026-04-26 18:01:21,113 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:2::234 2026-04-26 21:01:18,143 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:2::234 2026-04-27 00:01:28,347 fail2ban.actions [7718]: NOTICE [tor] Ban 2001:67c:289c:2::234 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-25 04:51:38 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:2::234 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 00:51:35.339523 2026] [security2:error] [pid 20415:tid 20415] ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:2::234 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 00:51:35.339523 2026] [security2:error] [pid 20415:tid 20415] [client 2001:67c:289c:2::234:39348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soonerstone.com"] [uri "/wp-config.phpo"] [unique_id "aexIVywmo8v9OiYa0zXs6wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-04-24 07:54:38 UTC · (6 months ago)	Blocked by UFW (TCP on 8333) Source port: 37262 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-04-09 12:08:30 UTC · (6 months ago)	Blocked by UFW (TCP on 8333) Source port: 54834 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇮🇹 VHosting	2026-03-26 20:41:30 UTC · (7 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 180.101.184.47

🇩🇪 165.245.253.132

🇵🇱 162.158.102.192

🇨🇳 106.52.249.253

🇫🇷 78.232.61.226

🇫🇷 78.232.35.162

🇺🇸 69.242.18.66

🇺🇸 217.217.47.170

🇧🇪 207.175.218.17

🇳🇱 200.138.46.120

🇳🇱 185.223.235.47

🇫🇷 185.194.178.19

🇫🇮 172.83.252.148

🇺🇸 149.40.50.115

🇨🇳 121.40.217.100

🇲🇾 120.141.29.206

🇲🇾 103.75.191.77

🇺🇸 97.166.124.6

🇬🇧 87.236.176.75

🇫🇷 85.204.70.96