JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2001:67c:289c:4::131

2001:67c:289c:4::131 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 20%: ?

20%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Foreningen for digitala fri- och rattigheter
Usage Type	Fixed Line ISP
ASN	AS198093
Hostname(s)	tor-exit-read-me.dfri.se
Domain Name	dfri.net
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2001:67c:289c:4::131

Whois 2001:67c:289c:4::131

IP Abuse Reports for 2001:67c:289c:4::131:

This IP address has been reported a total of 122 times from 15 distinct sources. 2001:67c:289c:4::131 was first reported on June 7th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-31 16:14:41 (3 hours ago)	Blocked by UFW (TCP on 51384) Source port: 9050 Packet length: 2303 This report (for 2001:067c:289c ... show more Blocked by UFW (TCP on 51384) Source port: 9050 Packet length: 2303 This report (for 2001:067c:289c:0004:0000:0000:0000:0131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-30 18:14:05 (1 day ago)	Blocked by UFW (TCP on 52764) Source port: 9051 Packet length: 2299 This report (for 2001:067c:289c ... show more Blocked by UFW (TCP on 52764) Source port: 9051 Packet length: 2299 This report (for 2001:067c:289c:0004:0000:0000:0000:0131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-29 19:05:48 (2 days ago)	Blocked by UFW (TCP on 9999) Source port: 47958 Packet length: 80 This report (for 2001:067c:289c:0 ... show more Blocked by UFW (TCP on 9999) Source port: 47958 Packet length: 80 This report (for 2001:067c:289c:0004:0000:0000:0000:0131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Ping of Death
🇺🇸 xmission.com	2026-07-27 06:49:51 (4 days ago)	Blocked by UFW (TCP on 56672) Source port: 9050 Packet length: 1500 This report (for 2001:067c:289c ... show more Blocked by UFW (TCP on 56672) Source port: 9050 Packet length: 1500 This report (for 2001:067c:289c:0004:0000:0000:0000:0131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-22 09:29:50 (1 week ago)	Blocked by UFW (TCP on 8333) Source port: 59416 Packet length: 80 This report (for 2001:067c:289c:0 ... show more Blocked by UFW (TCP on 8333) Source port: 59416 Packet length: 80 This report (for 2001:067c:289c:0004:0000:0000:0000:0131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-12 00:00:43 (2 weeks ago)	Blocked by UFW (TCP on 38752) Source port: 443 Packet length: 2298 This report (for 2001:067c:289c: ... show more Blocked by UFW (TCP on 38752) Source port: 443 Packet length: 2298 This report (for 2001:067c:289c:0004:0000:0000:0000:0131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-11 08:00:42 (2 weeks ago)	Blocked by UFW (TCP on 44426) Source port: 9001 Packet length: 2310 This report (for 2001:067c:289c ... show more Blocked by UFW (TCP on 44426) Source port: 9001 Packet length: 2310 This report (for 2001:067c:289c:0004:0000:0000:0000:0131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 Peter-Johann Sarbach	2026-07-02 04:21:17 (4 weeks ago)	Jul 01 14:20:58 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A0000 ... show more Jul 01 14:20:58 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm (no auth attempts in 1 secs): user=<>, rip=2001:67c:289c:4::131, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm show less	Hacking
🇺🇸 xmission.com	2026-07-01 04:34:43 (4 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 51664 Packet length: 80 This report (for 2001:067c:289c:0 ... show more Blocked by UFW (TCP on 8333) Source port: 51664 Packet length: 80 This report (for 2001:067c:289c:0004:0000:0000:0000:0131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-15 11:33:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se) ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 07:32:57.147015 2026] [security2:error] [pid 21988:tid 21988] [client 2001:67c:289c:4::131:47684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.48consultancy.com"] [uri "/.git/config"] [unique_id "ai_i6YubHJN8FSHUGOubrAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 09:14:32 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se) ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:14:23.293974 2026] [security2:error] [pid 32766:tid 32766] [client 2001:67c:289c:4::131:38318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.teamsterslmcc.com"] [uri "/.git/config"] [unique_id "aivN7yEKjuhOKhuo2FAQJwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 01:04:59 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se) ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 21:04:53.441615 2026] [security2:error] [pid 3130:tid 3130] [client 2001:67c:289c:4::131:56712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.aufflammen.com"] [uri "/.git/config"] [unique_id "aitbNb5rEGDcLHN49Id5iwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2026-06-10 09:23:08 (1 month ago)	20 attempts against mh-misbehave-ban on web-new	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 20:55:44 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se) ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 16:55:39.368549 2026] [security2:error] [pid 9145:tid 9145] [client 2001:67c:289c:4::131:60880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.carmel.xyz"] [uri "/.git/config"] [unique_id "aiM3y_dOfTDNO9F-WZurkAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 19:57:25 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se) ... show more (mod_security) mod_security (id:210492) triggered by 2001:67c:289c:4::131 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 15:57:18.061047 2026] [security2:error] [pid 3948:tid 3948] [client 2001:67c:289c:4::131:53370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.addisonkinkade.com"] [uri "/.git/config"] [unique_id "aiMqHljxqyMHYXhxkhKyNgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 202.165.26.42

🇲🇴 182.93.50.90

🇳🇱 176.65.148.243

🇨🇳 116.181.10.21

🇹🇷 94.154.43.87

🇺🇸 66.132.172.113

🇺🇸 50.62.22.47

🇧🇷 45.231.253.92

🇳🇱 45.153.34.161

🇺🇦 31.129.232.223

🇨🇴 2800:1e0:d40:4:9999::202

🇺🇦 176.119.112.124

🇺🇸 66.132.224.18

🇳🇱 45.148.10.157

🇳🇱 45.148.10.147

🇳🇱 213.176.26.34

🇹🇭 202.29.242.115

🇺🇸 172.236.228.198

🇪🇨 149.50.198.155

🇺🇸 91.230.168.7