JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2001:67c:289c:2::40

Activity Trending Down IPv6 SLAAC Note

Abuse Confidence Score

11% Caution

97 reports

14 reporters · latest 1 week ago

ISP: Foreningen for digitala fri- och rattigheter
Usage Type: Fixed Line ISP
ASN: AS198093
Domain Name: dfri.net
Country: 🇸🇪 Sweden
City: Stockholm, Stockholm

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

97 from 14 distinct reporters

First reported

July 29th 2025

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 1 🇹🇷 Turkey 1

Most common categories Web App Attack 2 Hacking 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-30 13:24:29 UTC · (1 week ago)	WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0 \| 2026-10-30 13:24 UTC	Web App Attack Hacking
🇹🇷 neron	2026-10-22 18:34:59 UTC · (3 weeks ago)	CrowdSec blocked: http:scan detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 xmission.com	2026-08-25 10:46:40 UTC · (2 months ago)	Blocked by UFW (TCP on 8333) Source port: 42568 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-08-18 19:03:17 UTC · (2 months ago)	Blocked by UFW (TCP on 45072) Source port: 444 Packet length: 2307 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-08-17 04:09:09 UTC · (2 months ago)	Blocked by UFW (TCP on 54264) Source port: 81 Packet length: 1500 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-08-15 04:09:29 UTC · (2 months ago)	Blocked by UFW (TCP on 36510) Source port: 80 Packet length: 1500 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-08-08 06:15:29 UTC · (3 months ago)	Blocked by UFW (TCP on 57746) Source port: 443 Packet length: 1500 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-08-03 06:17:49 UTC · (3 months ago)	Blocked by UFW (TCP on 8333) Source port: 40960 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-07-28 20:10:06 UTC · (3 months ago)	Blocked by UFW (TCP on 40386) Source port: 81 Packet length: 2295 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-07-11 23:59:09 UTC · (4 months ago)	Blocked by UFW (TCP on 9001) Source port: 34774 Packet length: 60 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 ipblock.com	2026-06-25 19:01:00 UTC · (4 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 23:45:19 UTC · (4 months ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 19:45:05.629685 2026] [security2:error] [pid 11598:tid 11598] [ ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 19:45:05.629685 2026] [security2:error] [pid 11598:tid 11598] [client 2001:67c:289c:2::40:46486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.sanjuangrange.org"] [uri "/.git/config"] [unique_id "ajsagdNpfEaAKprFs6hHrAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-31 18:43:30 UTC · (5 months ago)	Blocked by UFW (TCP on 8333) Source port: 47144 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-05-27 18:25:15 UTC · (5 months ago)	Blocked by UFW (TCP on 8333) Source port: 56372 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-05-16 11:25:20 UTC · (5 months ago)	Blocked by UFW (TCP on 8333) Source port: 43412 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 27.42.140.176

🇩🇪 212.30.36.153

🇩🇪 195.182.16.183

🇩🇪 148.153.50.179

🇨🇳 121.229.107.184

🇰🇷 121.129.7.154

🇰🇷 112.166.31.243

🇨🇦 85.217.149.52

🇳🇱 77.239.124.150

🇺🇸 66.249.74.134

🇧🇷 205.210.31.239

🇺🇸 188.213.202.154

🇧🇷 179.125.101.146

🇺🇸 172.212.203.134

🇻🇳 103.9.204.35

🇷🇴 80.94.95.115

🇬🇧 57.129.149.40

🇨🇳 42.63.158.14

🇺🇸 34.68.77.118

🇧🇪 34.53.147.106